Cybersecurity Foundations: Governance, Risk, and Compliance (GRC)

In an increasingly complex regulatory landscape, organizations must build strong Governance, Risk, and Compliance (GRC) programs to protect their assets and ensure long-term success. In this course, cybersecurity expert AJ Yawn provides a comprehensive overview of GRC principles, frameworks, and tools, helping you understand how to align cybersecurity and compliance initiatives with business goals. Learn how to build and scale a GRC program like a product, incorporating key frameworks such as ISO 27001, SOC 2, and ISO 27701 for privacy. Build your understanding of the growing importance of AI governance and gain practical insights into managing AI-related risks and adapting to emerging regulations like the ISO AI certification and NIST AI Risk Management Framework. Whether you’re a cybersecurity professional, risk manager, or business leader, this course will equip you with the skills to implement modern, scalable GRC programs that are ready for the future.

Learning objectives
Explain the fundamentals of Governance, Risk, and Compliance (GRC) and how these concepts intersect with cybersecurity to protect organizations from regulatory and security risks.
Develop a GRC program that aligns with organizational goals by treating it as a product, leveraging iterative improvement cycles, and using modern tools to automate processes.
Recognize and apply the most important GRC frameworks and standards, including NIST, SOC 2, ISO 27001, HIPAA, and PCI-DSS, to meet regulatory and industry requirements.
Explore how AI impacts GRC practices, identify AI-related risks, and implement AI governance frameworks, including the emerging ISO AI certification standards and NIST AI RMF.
Gain insight into how GRC tools can streamline risk management and compliance processes, improve reporting, and enable continuous monitoring.