Digital Trust for Managers: A Cybersecurity Toolkit for Non-Technical Leaders

Most cyber losses in African organisations do not start with clever hacking. They start with an email asking finance to update a supplier’s bank details, a voice note that sounds like the CFO, a SIM swapped without proper checks, or customer data left open in cloud storage. This course explains cyber risk as business and payment risk, for managers who are not technical, and gives you the tools to protect what matters most.

It is part of the EunoiaData Professional Toolkits series, for managers, business owners, finance and HR heads, board members and auditors who need a manager-level view. Each lesson closes with three views: as the auditor, as the manager and as the board.

Examples follow one fictional case company, Kuvanya Group, operating across Zimbabwe, Zambia, South Africa, Botswana, Kenya and Nigeria. The company and all its people are fictional, created by EunoiaData for teaching, and no named character is shown as an attacker.

Frameworks used

The course explains these in its own words: the NIST Cybersecurity Framework 2.0 (2024), ISO/IEC 27001:2022 and the CIS Critical Security Controls v8.1, with breach notice duties under the data protection laws of the six countries taught as principles. Editions are shown as at 2026 and are expected to change. EunoiaData is not affiliated with or endorsed by any framework body or software vendor; product names are trademarks of their owners and are used for identification only. The course does not prepare you for any certification exam, and it does not teach technical configuration or attack methods.

What you will learn

• What attackers want, money, data and disruption, and how to name your crown jewels
• How fake supplier emails, voice-note scams, SIM-swap and ransomware work at the level a manager needs, and the payment checks that stop them
• Which basic controls matter most: multi-factor authentication, admin rights, leavers, backups, updates and third-party access
• What to do in the first hours of an incident, and how breach notice clocks differ across six countries
• How to communicate with customers, regulators and the board when things go wrong
• How to govern digital trust: roles, measures a board can understand, culture and a budget for a small team

Your toolkit

You leave with five ready-to-adapt tools: a crown-jewels list and cyber risk register, a payment verification procedure and staff awareness checklist, an essential controls self-assessment, an incident response playbook, and a board cyber question bank with a 12-month roadmap.

How the course works

There are five modules, each with four lessons and a short quiz. You need 70% on each quiz to complete the course and earn your certificate. No technical background is needed. It pairs with our ERP Audit Toolkit and Fraud Risk Toolkit courses and with the EunoiaData data protection course for your country.