Governance, Risk and Compliance (GRC) and Data Privacy
What you'll learn
- Define the responsibilities of information security or cybersecurity governance
- Understand what compliance really is
- Implement risk management and analysis in an agile fashion
- How to apply GRC knowledge for all cybersecurity personnel
- Understand how to engage with all levels of your company
- Understand data privacy regulations like HIPAA and GDPR for security practice
- Understand ISO 27001, NIST, SOC2 and other frameworks and standards
- Understand the role of Enterprise Security Architecture (TOGAF, SABSA) in GRC
- Integrating TOGAF and SABSA (Enterprise Security Architecture) into GRC
Requirements
- No prior cybersecurity or information security pre-requisites
Description
This course on Governance, Risk Management Compliance (GRC) and Data Privacy is designed to equip apprentices, students, and professionals across various industries with a deep understanding of this holistic approach to organizational security and risk management, quality management and regulatory responsibilities. It involves aligning a company’s governance structure, quality and risk processes, and compliance and data privacy activities to better enable the achievement of the company’s strategic goals. This means it covers ISACA’s CRISC certification, a decent portion of CISM and can be used as secondary study for the relevant CISSP domains, as well as placing GPDR and other data privacy activities within the broader business GRC realm. It also looks at what is an Enterprise Security Architecture through the lenses of TOGAF and SABSA, which isn't about the technical implementation; think of building a house where you get an architect to to design it and you ensure the construction is aligned to best practices and your goals.
Whether you are an InfoSec/Cyber specialist, a risk management practitioner, or simply seeking to enhance your knowledge in this domain, this course will provide you with the necessary framework and tools to excel in your current or future role. It teaches you the fundamentals of GRC, including what GRC is and why it is important; the key components of GRC; how to implement a GRC program; what Data Privacy is beyond protection and; how to use GRC to improve your company's performance.
Key Course Objectives:
1. Provide a thorough comprehension of the principles, frameworks, and industry best practices in governance, risk, and compliance.
2. Develop the skills and expertise required to identify, assess, and mitigate risks within an organizational context.
3. Explore the legal and regulatory requirements that organizations must adhere to, and the strategies for ensuring comprehensive compliance.
4. Understand Data Privacy and its applicability to GRC beyond data protection.
5. Enable participants to design and implement effective GRC programs tailored to the specific needs of their respective organizations.
6. Foster critical thinking, problem-solving, and ethical decision-making abilities in the context of GRC.
7. Prepare participants for ISACA's industry-recognized risk certifications CRISC, as well as complement studies towards CISM, CISSP and CGEIT certifications.
8. Outlines TOGAF and SABSA in describing what Enterprise Security Architecture is and its relevance for your GRC work.
Target Audience:
This course caters to a diverse range of professionals, including:
- Apprentices during their cybersecurity training
- Undergraduate and postgraduate students transitioning into information security and cybersecurity
- Individuals seeking to pursue CRISC, and as an extra resource towards CISM, CISSP and CGEIT.
- Professionals in risk management, data privacy, compliance, internal audit, legal, and corporate governance roles
- Individuals from other business areas who seek to gain a comprehensive understanding of GRC and its practical applications to better their productivity without the jargon.
Expected Outcomes:
1. Students/professionals will gain a deep understanding of GRC principles, enabling them to contribute effectively to risk management and compliance initiatives in organizations.
2. Participants will acquire the necessary skills to develop and implement robust GRC programs tailored to the needs of their respective organizations.
3. The course will enhance critical thinking, problem-solving, and ethical decision-making skills among participants.
4. Students/professionals will be better prepared to pursue careers in risk management, compliance, internal audit, and corporate governance roles.
I have been in IT for almost two and a half decades and in information security since 2009. I currently hold a senior Information Security role. I hold numerous IT, security, risk management and data privacy-related certifications. I am committed to helping each and every one of you to succeed, and I am confident that you will learn a lot in this course. Everyone who takes this course gets access to support from myself. Rest assured you are in knowledgeable and experienced hands.
Who this course is for:
- Newcomers and apprentices wanting to understand what GRC is, and existing cyber professionals wanting to broaden their understanding.
- Cybersecurity professionals interested in governance, risk or compliance
- Information Security professionals wanting to learn about GRC
- Risk managers wanting to learn about cybersecurity GRC
- Any professional wanting an introduction to GRC
- Anyone taking ISACA’s CRISC certification on risk
- Anyone studying towards ISACA’s CISM (Certified Information Security Manager) certification
- Anyone wanting to brush up further on these domains as part of their CISSP studies
- Anyone wanting to expand their CIPP/E data privacy knowledge for the real world
Instructor
- 4.3 Instructor Rating
- 198 Reviews
- 5,171 Students
- 1 Course
I am an experienced Information Security leader and a former Data Protection Officer. In addition, I have worked in IT for over 25 years and with business security for over 16 years.
During this time, I have held numerous leadership roles in various industries, such as politics, charity, manufacturing and technology sectors. I have built security and compliance programmes. I use excellent business communication skills and a deep knowledge of information security and cybersecurity to partner with C-level executives, leaders and auditors to build and sustain best-in-class cybersecurity and security risk management programs aligned to the business. This strategic focus, alongside the ability to articulate risks and threats in business terms, assists in developing a proactive stance by identifying the most crucial aspects of the business. I then develop robust governance and operational frameworks to mitigate the disruption to these critical workflows. (See Sarah Armstrong-Smith’s book about the variable nature and impact of disruptive activities and risky behaviours)
I am also an archaeologist who is the co-Director (with a Sudanese Professor) heading a mission in the Sudan at a site first excavated by the founder of the Wellcome Trust. I firmly believe that my social science skills and project management skills are cross-disciplinary, and I leverage them every day to the benefit of the company I worked for and with in InfoSec.