Cyber Risk Management & GRC: From Risk to Assurance (Self-Paced)

Self-paced online training with expert support

Security budgets are won in the language of risk, not the language of engineering. Learn to assess, quantify, register and report cyber risk the way executives and boards will actually act on it.

$1,049 12 clock hours Live Support Start anytime

This course includes

  • 12 hours of project-based training from experts
  • Answers from real instructors
  • Retake for free within 1 year
  • Access to class recordings (30 days)
  • Verified digital certificate of completion

This is the self-paced version. For live instruction, enroll in Cyber Risk Management & GRC: From Risk to Assurance.

A full self-paced pass through governance, risk and compliance, written for whoever has to convert a technical finding into a risk decision that will survive being questioned. The course covers the arc end to end: defining governance and accountability, assessing risk, analyzing and prioritizing what comes out, picking a response, writing it into a register, mapping it to controls, validating through assessment, pushing it out to third parties, and carrying it upward to the people who decide. The NIST and commercial frameworks are taught side by side rather than one after the other, so NIST SP 800-30, 800-39 and the IR 8286 series appear next to COSO, ISO 31000, ISO/IEC 27005 and the EU Digital Operational Resilience Act — which makes the material as usable in a multinational as in a single-market business.

Quantification is where the course goes furthest. It works through the FAIR model, then applies a materiality determination against the SEC disclosure criteria in Item 1.05 of Form 8-K and Item 106 of Regulation S-K — the question boards are actually putting to their security teams, and a long way past the qualitative red, amber and green where most training stops. A closing workshop has you writing risk register entries for a fictional organization, judging whether a given scenario triggers a disclosure obligation, and arguing for a risk treatment recommendation. A scope note worth having up front: third-party content here is enterprise-level oversight and governance, and procurement-level supply chain work lives in its own course, Cybersecurity Supply Chain Risk Management (C-SCRM) (Self-Paced).

Read more

This course has a prerequisite

Foundational cybersecurity knowledge.

Yelp Facebook LinkedIn YouTube Twitter Instagram