Technical controls only go so far without policy, process, and audit discipline behind them. This course prepares you to build risk registers, map controls to frameworks like ISO 27001 and NIST CSF, and support compliance audits that keep organizations out of regulatory trouble. It’s ideal for analysts moving into GRC, compliance, or security-management roles.
What You Will Learn
- Build and maintain enterprise risk registers
- Map security controls to ISO 27001 and NIST CSF
- Prepare evidence and documentation for compliance audits
- Write and socialize security policies across an organization
- Communicate cyber risk in business terms to leadership
Course Curriculum
Modules cover governance foundations, risk assessment methodology, control mapping to ISO 27001 and NIST CSF, and a final module on running mock audits and presenting findings to leadership.
What You Will Learn
- Build risk registers used by real security teams
- Map technical controls to ISO 27001 and NIST CSF
- Prepare audit-ready documentation and evidence
- Draft security policies that hold up to review
- Present cyber risk in language executives understand
Tools & Technologies Covered
- ISO 27001 Toolkit
- NIST CSF
- Risk Register Templates
- Audit Checklists
- GRC Platforms (e.g. ServiceNow GRC)