Governance, Risk, Compliance (GRC), Audit & Privacy

This course develops mastery of cybersecurity governance, risk management, compliance frameworks, audit, and privacy regulations. Participants cover international standards, financial-industry frameworks, privacy regulations, and the audit and reporting skills needed to run an enterprise compliance program. 

Course Content

​

Week 1: Security Governance 

• Policies 

• Standards 

• Procedures 

• Security Programs 

Week 2: Risk Management I 

• Risk Assessment 

• Risk Treatment 

Week 3: Risk Management II 

• Business Impact Analysis 

• Third-Party Risk 

Week 4: Compliance Frameworks I 

• ISO/IEC 27001 

• ISO/IEC 27701 

Week 5: Compliance Frameworks II 

• NIST Cybersecurity Framework 

• COBIT 

Week 6: Compliance Frameworks III 

• PCI DSS 

• SWIFT CSP 

• FFIEC Guidelines 

Week 7: Privacy Regulations 

• PII Protection 

• GDPR 

• CCPA 

• Data Sovereignty 

Week 8: Security Audit & Assurance I 

• Internal Audit 

• External Audit 

Week 9: Security Audit & Assurance II 

• Compliance Assessment 

• Evidence Collection 

Week 10: Security Audit & Assurance III 

• Audit Reporting 

Week 11: Security Metrics & Reporting 

• KRIs 

• KPIs 

• Board Reporting 

• Regulatory Reporting