Risk Management and Governance

Lessons

1. 1

   What is Risk Management?

   Understand risk in the cybersecurity context and why businesses prioritize managing it.

   Beginner·30 min
2. 2

   Risk Assessment

   Identify and catalog assets, model threats, and score risk with likelihood-impact matrices.

   Beginner·40 min
3. 3

   Security Policies and Standards

   Understand security policies, ISO 27001, SOC 2, and write a basic acceptable use policy.

   Beginner·35 min
4. 4

   Compliance and Regulatory Frameworks

   Navigate major compliance frameworks, audit processes, and consequences of non-compliance.

   Intermediate·40 min
5. 5

   Business Continuity and Disaster Recovery

   Understand BCP vs DRP, recovery objectives (RTO/RPO), and build a basic disaster recovery plan.

   Intermediate·40 min
6. 6

   Security Governance in Practice

   Apply security leadership, budgeting, and risk communication to non-technical stakeholders.

   Advanced·40 min
7. 7

   Risk Management Resources and Next Steps

   Explore curated resources including the NIST Risk Management Framework for continued learning.

   Beginner·25 min
8. 8

   Risk and Governance Job Readiness

   Translate GRC skills into a resume, portfolio plan, and interview prep for analyst and consultant roles.

   Beginner·30 min