GRC Analyst:

GRC Cybersecurity Program

Introduction to Cybersecurity Engineering

Get enrolled now

Week 1:

Why Does GRC Matter?

What is Cybersecurity
What does a GRC Analyst do?
Where does GRC Analyst fit in Cybersecurity
Understanding Technology
Identify Cybersecurity Threats
Importance of Governance, Risk, and Compliance

Week 2:

Security Awareness & Asset Management

The Human Element
Phishing
Social Engineering
Cybersecurity Education & Awareness Programs
Measuring the effectiveness of Cybersecurity Programs
Asset management
Type of Assets
Asset Identification and Classification
Why organizations fail at asset management
Best practical approach to asset management

Week 3:

Risk Assessment

CIA triad in the real world
PhishingWhat is Cybersecurity Risk
Threat modeling
Quantitative vs. qualitative risk assessment
Risk assessment models
Risk likelihood and impact
Risk tolerance
Risk appetite
Business impact analysis (BIA)
Risk mitigation strategies
Conducting a Cybersecurity risk assessment

Week 4:

Risk Management

Risk management strategies: Mitigation, avoidance, transference, acceptance
Risk Management Framework (RMF)
RMF vs. CAP
Risk maturity level
Residual risk
Continuous monitoring and incident response
Patch management and the Common Vulnerability Scoring System (CVSS)
Types of Security Controls (Preventive, Detective, Corrective)
Understanding RMF Processes and Controls
Implementing RMF Processes and Controls

Week 5:

Industry Compliance Framework

Understanding Payment Card Industry (PCI-DSS)
Understanding Sarbanes-Oxley (SOX) Act
Understanding National Institute of Standard and Technology (NIST)
Understanding General Data Protection Regulation (GDPR)
Understanding Systems and Organization Control (SOC2)
Understanding International Standard Organization (ISO 27001)
The RMF Framework

Week 6:

Privacy Compliance Framework

What is Privacy
Personally identifiable information (PII)
Data architecture
Data handling
Data Encryption Health Insurance Portability and Accountability Act (HIPAA)
Gramm-Leach-Bliley Act (GLBA)
Privacy best practices

Week 7:

Governance and Policy

Business continuity plan (BCP)
Disaster recovery plan (DRP)
Business impact analysis (BIA)
Single point of failure
Redundancy
Rapid information sharing
RACI chart
Discussion: Fast vs. good vs. cheap
Governance Baseline Assessment
Developing & Implementing Policies, Standards and Procedures
Understanding Legal and Regulatory Compliance

Week 8:

GRC Cybersecurity Audit (SOC2)

Introduction to SOC2
When to Perform an Audit
The Planning Phase
SOC2 Framework
Preparing for Implementation
Security Management Procedure
Initiating a SOC2 Audit
Monitor, Control and Complete SOC 2 Project Plan
Conducting a SOC 2 Audit
Closing the Audit and Follow up