Technical controls only go so far without policy, process, and audit discipline behind them. This course prepares you to build risk registers, map controls to frameworks like ISO 27001 and NIST CSF, and support compliance audits that keep organizations out of regulatory trouble. It’s ideal for analysts moving into GRC, compliance, or security-management roles.
What You Will Learn
- Build and maintain enterprise risk registers
- Map security controls to ISO 27001 and NIST CSF
- Prepare evidence and documentation for compliance audits
- Write and socialize security policies across an organization
- Communicate cyber risk in business terms to leadership
Course Curriculum
Modules cover governance foundations, risk assessment methodology, control mapping to ISO 27001 and NIST CSF, and a final module on running mock audits and presenting findings to leadership.