Over the years, working at the intersection of cybersecurity advocacy and business analysis, I’ve seen a consistent pattern. Cybersecurity is increasingly shaping business decisions and yet most training still treats it as a technical specialism, not a business capability. That gap is exactly why the IIBA® Certificate in Cybersecurity Analysis (CCA™) exists and why how it is taught matters far more than most realise. Our approach to teaching CCA is not accidental. It’s the result of years of observation, experimentation, and refinement.
I firmly believe that expertise is not knowledge alone. Expertise is built when:
Through years of working with Business Analysts, delivery teams, and organisations navigating cybersecurity challenges, I arrived at a simple realisation: Business Analysts don’t need more cybersecurity information, they need the right way to think about it. That realisation shaped the teaching model we now use in our trainings.
Most cybersecurity training:
The IIBA CCA curriculum doesn’t do this and neither do we. Our training treats cybersecurity as a business analysis discipline, grounded in:
This is exactly how the CCA exam is designed and how organisations operate.
I designed our CCA training to mirror how professionals really learn.
We teach using:
Only after learners experience the problem do we introduce:
This is how understanding turns into capability not memorisation.
“This training fundamentally changed how our Business Analysts engage with cybersecurity teams. They are not trying to become security experts but are asking better questions and supporting better decisions. They feel confident in collaborating with the cybersecurity team”
That feedback reinforces why this approach works.
Organisations choose to work with us because we:
The outcome is a workforce that:
The IIBA CCA certification is not about creating cybersecurity specialists. It’s about developing expertise in cybersecurity analysis - the ability to understand risk, evaluate impact, and support informed business decisions. That balance between depth and accessibility is the art of approaching IIBA CCA. It’s the approach I’ve built, refined, and now teach through our trainings.