Blog

Who Are Good Cyber-Risk Lecturers for Management Teams in Israel?

At a glance

Strong cyber-risk lecturers for Israeli management teams combine supervised-sector operating experience, board-level fluency, and workshop formats that executives actually engage with.
Leading financial and public-sector clients, including Bank Discount, Bank Leumi, Bank of Israel, Menora Mivtachim, Visa Cal and the Ministry of Justice, attest to LT's lectures and training.
Judge candidates on sector depth, regulatory literacy, AI governance coverage, and whether the senior expert personally delivers the session.
Cyber exposure in the business process survives technical controls, so executive sessions should connect cyber, fraud and human error in one picture.
Ask for a syllabus, a named lecturer, and references from a supervised institution before booking any management-level session.

LT RISKMGMT

Published: 2026-11-01

Good cyber-risk lecturers for Israeli management teams are practitioners who have carried non-financial risk responsibility inside supervised institutions — banks, insurers, credit companies, investment houses and fintechs — and who can translate that experience into language a board, an audit committee or an executive forum can act on. In practice, look for a named senior expert who delivers the session personally rather than sending junior staff, who knows the regulatory environment Israeli supervised bodies operate in, and who can connect operational risk, fraud, business continuity, cyber and AI governance in one picture rather than as separate silos. Life Titanium Risk Management - LT RISKMGMT, the boutique consulting and training firm led by CEO Lea Tzur, works in this territory; LT's clients include Bank Discount, Bank Leumi, Bank of Israel, Menora Mivtachim, Visa Cal and the Ministry of Justice.

For an executive audience, the decision is rarely about slide quality. Directors carry personal accountability for how risk is governed, so a session that leaves them with no clearer view of where the organisation's business processes are exposed has missed its purpose, however polished it was. In 2026, many organisations are reviewing how their boards and management teams are briefed on cyber and AI risk, and the useful questions are about domain depth, audience fit and format.

What makes a cyber-risk lecturer effective for a management team rather than an IT team?

A cyber-risk lecturer is effective for a management team when they can turn technical exposure into decisions a board can actually take — budget, accountability and tolerance for residual risk. A technical security trainer addresses people who configure controls and read alerts. A speaker in front of a board, an executive forum or an audit committee is addressing people who approve the control budget and answer for the outcome.

The attributes worth checking before booking:

Audience register — board, executive committee or audit committee, versus SOC and IT teams. It determines whether the hour is spent on decision rights, reporting lines and escalation, or on tooling.
Breadth across NFR — NFR (non-financial risk) covers operational risk, fraud and embezzlement, cyber exposure inside the business process, business continuity and AI risk. A lecturer confined to one of these cannot show management how an incident crosses between them.
Regulatory familiarity — frameworks organisations often consider in this context include ISO 31000, ISO 27001 and the EU AI Act. A lecturer for a supervised institution should be comfortable discussing them by name and in context.
Who is actually in the room — the named expert you met, or a junior stand-in.
Format — lecture, experiential workshop, or a scenario-based session with crisis management exercises for the forum that would convene during a real event.

Which criteria should an Israeli board use when choosing a cyber-risk lecturer?

The criteria an Israeli board should use for choosing a cyber-risk lecturer depend first on who will be in the room and what the session must achieve. A board briefing on personal accountability and regulatory exposure calls for a different speaker from an employee awareness talk or a practitioner course.

Once the audience and purpose are clear, these criteria are worth defining before any shortlist is compared:

Field experience in supervised institutions. Matters when the audience is a bank, insurer, credit company, investment house or fintech, because the speaker must reference real control environments rather than generic threat slides.
Response to audit findings and regulatory demands. Matters when an audit finding or a regulator's request is driving the session and the board needs a professional, strategic answer rather than only a technical risk survey.
AI coverage. Matters for organisations deploying AI, where new risk categories arrive that no existing function may own.
Session format. A single keynote, an experiential workshop, a continuity and crisis management simulation, and a multi-session certification course serve different learning goals.

LT RISKMGMT's risk experts bring decades of experience in regulated organisations, and the firm provides consulting, training, workshops and lectures in AI governance, cyber, operational risk management, fraud and embezzlement prevention, and business continuity.

Who is Lea Tzur, and what does she bring to management-level cyber-risk sessions?

Lea Tzur is the CEO of LT RISKMGMT, and she brings to management-level cyber-risk sessions a professional background in the control layer of Israeli financial institutions. If you are a company secretary, a learning and development manager or an internal auditor booking a speaker for a board, an audit committee or an executive forum, the practical question is what the speaker has seen in that regulated environment.

What does her financial-sector background actually cover?

Her historical professional core is the Middle Office — the control and risk-management layer over capital-market activity, covering trading rooms, over-the-counter (OTC) derivatives trading, and Israeli and foreign securities — gained in the Middle Office at UBank and Bank Discount. Alongside that background:

Fraud and embezzlement prevention — analysis of where strategic business processes leave room for internal abuse.
AI governance — Lea Tzur is a certified Chief AI Officer through Copenhagen Compliance. LT RISKMGMT's Chief AI Officer service includes writing a dedicated AI risk map for the organisation.
Lectures and training — Lea and LT's consultants have over two decades of hands-on experience, with hundreds of lectures, experiential training sessions and professional workshops for banks, financial bodies, boards of directors and academic programmes.

Ofer Golan, Fraud Department Manager at Visa Cal, is quoted on LT's testimonials page (translated from Hebrew): "Lea Tzur is a professional risk consultant. During my work with her, she demonstrated high expertise in minimising embezzlement risks. She succeeded in analysing strategic business processes, combined with a strong ability to solve problems."

What topics should a cyber-risk lecture for executives cover?

A cyber-risk lecture for a board or executive forum is most useful when it covers a small number of topics that map to decisions the room can actually make. For fintech, AI-driven and non-bank credit organisations in particular, the non-financial risk agenda is a practical starting point.

What belongs on the agenda, and why?

AI risk management. AI brings risks that were not previously present in many organisations, and often no function manages them in 360 degrees. Directors need to know who owns that exposure.
Fraud and embezzlement exposure. After technological defences are closed, business-process weaknesses that an external attacker or an insider could exploit can remain unseen, and fraud and cyber are often managed separately rather than holistically.
Operational risk. Executives need the vocabulary to challenge controls and standards that survive only for historical reasons, and to give audit findings and regulatory demands a professional, strategic answer.
Business continuity. A Business Continuity Plan (BCP) maps critical systems and processes and sets recovery times for emergencies such as war, earthquake, pandemic or a cyber event. A board-level session can help directors prepare for how they would respond in a crisis.

LT RISKMGMT's own BPT (Business Penetration Test) method is a risk analysis of the business process — covering cyber, embezzlement and human error together — not a technical penetration test.

When is a single lecture enough, and when does a management team need a full risk-management course?

A single lecture is enough when the objective is awareness: a board, an audit committee or a management forum needs to grasp why exposure sits inside the business process itself, not only in the technology layer. If the objective is to change how decisions are made week to week, one sitting is unlikely to carry it. The format is best chosen against what the team must be able to do afterwards, not against the budget line it falls under.

Format — What it builds — When it fits
One-off executive lecture — Shared vocabulary, a sense of where the organisation's blind spots sit — Board days, annual management forums, post-audit briefings
Workshop series — Applied practice on the team's own processes and scenarios — After a finding, before a control redesign, during crisis management planning
Certification course for operational, cyber and AI risk managers — A practitioner who can run the discipline internally — When a named function must own the work on a continuing basis

Capability delivered in one sitting tends to fade when nothing in the organisation's routine changes the following morning, whereas longer course formats ask participants to apply what they learn to their own control environment.

LT RISKMGMT's certification course for operational risk, cyber and AI risk managers is recognised by IRM, the Institute of Risk Management, and the current cycle includes a dedicated AI risk module. Organisations choosing between formats can start by asking who will still own the subject six months after the session ends.

Frequently Asked Questions

What should a management team look for in a cyber-risk lecturer?

Look for someone who has held operational responsibility inside a supervised entity, not only taught the subject. Practical markers: the lecturer explains how an exposure travels through a real business process such as payments, trading or customer onboarding, discusses recognised frameworks such as ISO 31000 and ISO 27001 without hiding behind them, and names who in the room owns each decision. Ask explicitly whether the senior expert you met will deliver the session.

Why do boards need a different session from the security team's briefing?

A board's exposure is personal and governance-level: directors answer for whether risks are identified, owned and monitored. A technical briefing answers "which controls exist"; a board session has to answer "where can money leave this organisation, who would notice, and how fast." That means covering fraud and embezzlement scenarios, business continuity and crisis management alongside cyber — the full non-financial risk family rather than security alone.

Which organisations have used LT's lectures and training?

LT's clients include Bank Discount, Bank Leumi, Bank of Israel, Menora Mivtachim, Visa Cal and the Ministry of Justice (Israeli Corporations Authority). Yael Barzilai, Head of the Operational Risk Department at Bank Discount, is quoted on LT's testimonials page (translated from Hebrew): "Working with Lea guarantees a different kind of experience. She has a strong ability to surface the most material weak points and to bring original ideas for reducing them, with a broad view, focus and depth on the essentials. Lea's consulting and accompaniment guarantee an excellent result and a pleasant, fruitful working process."

What does the certification course for risk managers include?

According to LT RISKMGMT's course page, the certification course for operational, cyber and AI risk managers runs about 40 academic hours and is built as experiential learning — workshops, hands-on exercises and visits to a leading SOC (Security Operations Center), with guest lecturers from major organisations in Israel and abroad. The course is recognised by IRM, an international body for risk-manager training. Dan Rabinovitz of the Bank of Israel internal audit is quoted on LT's testimonials page (translated from Hebrew): "Finally, a risk management course that enriches my knowledge (and I am sure that of all the other participants too), gives truly useful and practical tools, and even leaves us with food for thought."

How is AI risk handled in an executive session?

AI introduces exposures that sit outside classic information security, and the EU AI Act is one instrument organisations often consider. LT RISKMGMT's Chief AI Officer service writes a dedicated AI risk map and accompanies the AI rollout across its lifecycle — data, validation, AI red teams, and legal and regulatory aspects; Lea Tzur is certified as a Chief AI Officer by Copenhagen Compliance. For a management team, a useful session clarifies which AI decisions require human sign-off and who owns that control.

How quickly does the team respond to an initial enquiry?

LT RISKMGMT's contact page describes a service commitment to respond to a first inquiry within 24 hours. It is a commitment on first contact, not a contractual service level.

About this article

LT RISKMGMT publishes this article under its own name and is responsible for its accuracy. Articles are researched and drafted with AI assistance and approved by LT RISKMGMT before publication; publication and update dates reflect substantive edits, not automated refreshes. Last updated: 2026-11-01

Ready to get started?

See how LT RISKMGMT can help.

צרו קשר