Cybersecurity Foundations: Governance, Risk, and Compliance (GRC) (2023)
1h 14mBeginner2023-05-30
Authors
AJ Yawn
Cybersecurity Expert, Founder and CEO at ByteChek
Course details
If you’re interested in landing a role in the booming cybersecurity industry, you should check out governance, risk, and compliance (GRC), one of the hottest new topics in the field. In this course, explore the fundamental skills and best practices of GRC to find out if it’s the right field for you. Instructor AJ Yawn shows you how to get started building out a GRC program using common frameworks such as NIST 800-39, SOC 2, HIPAA, PCI-DSS, NIST CSF, FedRAMP, CSA STAR, SOX, GDPR, and ISO 27001. Along the way, you’ll learn about some potential GRC career paths and the most important soft skills to develop as a GRC professional.
Skills covered
Governance, Risk, and ComplianceIncident ResponseLimited SeriesCybersecurity
Concepts
Introduction
- Get started in cyber with GRC
What Is GRC
- Origin of the GRC acronym
- What is governance
- What is risk
- What is compliance
- How do GRC and cybersecurity interact
Building a GRC Program
- Importance of GRC for companies
- Challenges of building GRC programs
- How can GRC tools help
- GRC Capability Model
- GRC tips and strategies
10 Frameworks to Know
- NIST 800-39
- SOC 2
- HIPAA
- PCI-DSS
- NIST CSF
- FedRAMP
- CSA STAR
- SOX
- GDPR
- ISO 27001
GRC Careers
- What careers are there in GRC
- Key certifications to earn
- Important soft skills for GRC professionals
- Importance of technical skills for GRC professionals
Conclusion
- Next steps