AI-CRRQ™ Cyber Resilience Masterclass · January 2027

Your systems will go down. Leave with the plan that keeps your services running.

AI avatar of Alim Abdul.

A live, five-session masterclass for leaders who keep banks, hospitals, telecom networks and schools running. You leave with a draft cyber resilience playbook and a 90-day plan for your leadership team.

Dates
Jan 12 to 28, 20275 sessions, Tue and Thu
Time
7 to 9 PM New YorkDhaka 6 to 8 AM next day · other cities
Format
Live onlineEvery session recorded
Tuition
USD 1,495USD 1,295 early tuition until Dec 18
Cohort
Capped at 20Small group, live discussion
Certificate
Completion recordIssued by AABGM Inc.
Reserve your seat Get the outline

Early tuition of USD 1,295 ends December 18, 2026.

What you leave with

Five live sessions. Five things you take back to your organization.

01

A playbook draft

Built on your own organization, or on our fictional case company if your environment is sensitive.

02

A live tabletop

Ninety minutes making ransomware decisions with peers, as new facts land.

03

RTO and RPO targets

Recovery targets for your critical services, and a plan to prove them in a real restore test.

04

A 90-day plan

Named owners and dates for the first three months after class.

05

A leadership presentation

Your plan, presented to the cohort, with feedback before it reaches your board.

The five sessions

Each session puts you in a moment you will face, and ends with a section of your playbook done.

  1. 1 · Assume breach

    Tue, Jan 12
    The moment you will face
    Your core systems are down. Which services must keep running, and how long can each one be down?
    What you leave with
    Your critical services ranked, mapped to what they depend on, with a downtime tolerance for each.

  2. 2 · Threat exposure

    Thu, Jan 14
    The moment you will face
    A key vendor, cloud service or AI tool fails without warning. Which one would hurt most?
    What you leave with
    A threat and third-party exposure map, with your vendors and tools ranked by business impact.

  3. 3 · Response capability

    Tue, Jan 19 · live crisis exercise
    The moment you will face
    Ransomware hits. Who leads, who decides on a ransom demand, and when do you involve the authorities?
    What you leave with
    An incident command structure and a ransomware decision guide, tested in a 90-minute tabletop.

  4. 4 · Recovery velocity

    Thu, Jan 21
    The moment you will face
    You have to restore. What comes back first, and how do you know your backups work?
    What you leave with
    Recovery priorities, RTO and RPO targets, and a plan for one real restore test.

  5. 5 · Leadership presentation

    Thu, Jan 28
    The moment you will face
    Your board asks what you need approved in the next 90 days, and why.
    What you leave with
    A leadership briefing and a 90-day action plan, presented to the cohort for feedback.

Sessions run 7:00 to 9:00 PM New York time (UTC−5). About 6 hours a week, including worksheets. No technical background required.

Illustration: leaders around a conference table working through a ransomware tabletop exercise Illustration

Session 3 · Live crisis exercise

Ninety minutes inside a ransomware attack.

You take a role (CEO, CIO, legal, communications, operations) and make the calls as new facts arrive on a fictional company, Meridian Industries.

  • Detection. Systems are encrypted. Who is told first, and who takes command?
  • Containment. What is shut down, what stays up, what switches to manual work.
  • Outside help. Counsel, insurers, relevant authorities and incident response specialists, plus reporting and sanctions obligations.
  • Pay or no pay. Who has the authority, and what the board must hear.
  • Communications and recovery. First messages, deadlines, restore order and lessons learned.

The exercise builds decision-making under pressure. It does not replace technical recovery testing, which you plan in Session 4.

See what you build

Three sample pages from the playbook.

These use our fictional case company. Yours will use your own services, people and numbers, or stay on the case company if you prefer.

Sample · Meridian Industries

Critical services and downtime tolerance

ServiceOwnerMax downWorkaround
Order processingCOO8 hoursPaper order forms and phone confirmations
PayrollCFO3 daysRepeat prior pay run, adjust manually
Customer portalCIO24 hoursStatus page and call center script
Sample · Meridian Industries

Ransomware decision guide: first 4 hours

WhenDecision or actionWho
0 to 30 minDeclare an incident lead and isolate affected systemsCIO
30 to 60 minCall outside counsel and the cyber insurer; preserve evidenceGeneral Counsel
1 to 2 hoursNotify relevant authorities and assess sanctions obligations before any payment discussion (U.S. example: FBI field office, OFAC check)CISO
2 to 4 hoursDecide on interim operations and send the first staff messageCEO
Sample · Meridian Industries

90-day plan

DaysActionOwner
1 to 30Run a full restore test of order processing and record the actual timeIT Director
31 to 60Put an incident response retainer in place with outside counselGeneral Counsel
61 to 90Brief the board on the Survival Index™ score and the top three gapsCEO

Who it is for

For the leaders accountable when essential services stop.

Executives, board members, technology and security leaders, legal and risk, HR, operations and continuity teams. A disruption is never one department's problem, so the class puts these roles in the same room. Leaders join from the U.S., Bangladesh and the Middle East.

  • Banking and financial services
  • Healthcare
  • Telecommunications and digital services
  • Education
48%of breaches involved ransomwareVerizon Data Breach Investigations Report, 2026
48%of breaches involved a third party, up from 30% a year earlierVerizon Data Breach Investigations Report, 2026
$4.99Mglobal average cost of a data breachIBM Cost of a Data Breach Report, 2026
4 daysfor U.S. public companies to disclose a material cyber incident, in most cases, after deciding it is materialSEC Form 8-K, Item 1.05
Alim Abdul, course instructor

Your instructor

Alim Abdul

Alim Abdul has spent more than 30 years in technology and security. He has held senior leadership roles, including AVP at two New York health systems, where he led the modernization of their disaster recovery programs. He has led tabletop exercises spanning cybersecurity, business continuity, crisis management and third-party risk.

He is the founder of AICRRQ Inc. and creator of the AI-CRRQ™ framework, which you apply in every session.

  • CISSP
  • CISM
  • CISA
  • CRISC
  • CCISO
  • CEH
  • CND
  • PMP

EC-Council Certified Instructor. Former Microsoft Certified Trainer.

Earlier training and experience

Where Alim has taught and tested before.

These are past engagements, not feedback on this masterclass.

  • 2022 · UNITAR New YorkThrough AABGM, delivered online cybersecurity sessions, including "Advanced Cybersecurity" (May 4, 2022), and a two-week onsite instructor-led cybersecurity training for UNITAR staff.
  • 2022 · United Nations HeadquartersCo-led an in-person cybersecurity session for the UN General Assembly President's HOPE Fellowship.
  • Ongoing · EC-CouncilCertified trainer delivering CEH, CND and CCISO certification training through AABGM, an EC-Council Accredited Training Center.
  • Physicians' associationsTechnology speaker for Bangladeshi North American physicians' associations, including a New York chapter session and a national conference in Atlantic City.
  • Public benefits systemsCo-led semiannual failover and failback testing of New Jersey's Medicaid Management Information System between data centers.
  • 2024 · New York CityTook part in an NYC interagency cybersecurity incident and emergency response tabletop exercise. View the 2024 participation post ↗

UNITAR, the United Nations, EC-Council, the associations and the organizations named above do not sponsor or endorse this masterclass.

Tuition and enrollment

Choose how you enroll.

USD 1,495 per seat. USD 1,295 early tuition until December 18, 2026. Teams of 3 or more: USD 1,195 per seat.

Individual

Reserve your seat

USD 1,495 per seat

Early tuition: USD 1,295 until December 18, 2026.

Fill in your details and we will get back to you to confirm your seat and payment.

Teams and organizations

Invoice my organization

USD 1,195 per seat, 3 or more

Teams of 3 or more: USD 1,195 per seat, invoiced to the organization, until the cohort is full. Does not combine with early tuition.

Not ready yet?

Get the outline

Curriculum, schedule and the playbook you build, on one page.

Refunds. Full refund if you cancel at least 14 days before the first session. After that, you can transfer your seat to a colleague or a future cohort. If we cancel or reschedule the cohort, you get a full refund.

Need a private leadership briefing or a cohort for your institution only? Email info@aabgm.com.

Questions

Before you enroll.

I'm not technical. Is this for me?

Yes. The course is written for leaders. There are no hands-on engineering labs. Technical staff are welcome, and the worksheets go deeper for those who want it.

How much time does it take each week?

About 6 hours a week for 2.5 weeks: two 2-hour live sessions plus worksheets for your playbook.

Can I watch the recordings instead of attending live?

Every session is recorded and shared the same night, so you can catch up if you miss one. A recording does not replace taking part in the live crisis exercise in Session 3, and your certificate reflects the live hours you attend.

Can my company pay, or can I get an invoice?

Yes. Use "Invoice my organization" above and we will send the invoice within one business day. Teams of 3 or more from one organization pay USD 1,195 per seat. That rate does not combine with early tuition.

What if I need to cancel or send someone else?

Full refund if you cancel at least 14 days before the first session. After that, you can transfer your seat to a colleague or a future cohort. If we cancel or reschedule the cohort, you get a full refund.

Is it accredited? Does it count for CPE?

The masterclass is not accredited. AABGM Inc. is an EC-Council Accredited Training Center, but that program does not accredit this course. You receive a Certificate of Completion from AABGM Inc. for the live hours you attend. It is a training record, not a professional certification. You may be able to submit it under your certifying body's rules, but CPE credit is not guaranteed.

Can I join from outside the U.S.? What time is it for me?

Yes. The masterclass is delivered live online by U.S.-based AABGM Inc., and tuition is charged in U.S. dollars. Sessions run January 12, 14, 19, 21 and 28, 2027.

CityLocal timeDate
New York / Toronto (UTC−5)7:00 to 9:00 PMSame date
Vancouver (UTC−7)5:00 to 7:00 PMSame date
London (UTC+0)Midnight to 2:00 AMNext day
Paris / Berlin (UTC+1)1:00 to 3:00 AMNext day
Riyadh / Doha / Kuwait City / Manama (UTC+3)3:00 to 5:00 AMNext day
Dubai / Abu Dhabi (UTC+4)4:00 to 6:00 AMNext day
Dhaka (UTC+6)6:00 to 8:00 AMNext day

If the timing does not work where you are, email info@aabgm.com. Requirements for privacy, incident reporting and resilience vary by country and sector. The course teaches preparedness and decision-making, not legal advice for any jurisdiction.

Do I have to share my organization's details?

No. You can do every exercise on our fictional case company and apply it privately. Never share passwords, patient data or details of a live incident in class.

January 12 to 28, 2027 · Live online · Capped at 20

Don't let the incident be your first test.

Five live sessions, one live ransomware tabletop, and a playbook draft and 90-day plan your leadership team can act on.

Reserve your seat Get the outline Invoice my organization

Early tuition of USD 1,295 ends December 18, 2026.

Questions? +1 929 229 5703 · info@aabgm.com