GRC 101 — Governance, Risk & Compliance Foundations
A 40-hour foundation course for career starters and IT or security staff moving into GRC: 10 live sessions on governance, policy, risk, controls, compliance, third parties, audit and reporting, with GCC examples, a practical in every session, a capstone and a final exam.
- Foundation
- 40 ساعة
- المدرّب: Muhammad Eissa
ما ستتعلمه
- Explain governance, risk and compliance, how they connect, and the roles in the Three Lines Model.
- Distinguish governance from management and describe the structures (board, committees, RACI, charter) that direct security.
- Write and maintain a policy set (policy, standard, procedure, guideline), including exceptions.
- Run a risk assessment using ISO 31000, ISO/IEC 27005 and NIST SP 800-30, and record the results in a risk register with treatment and KRIs.
- Select and map controls across ISO/IEC 27001 Annex A, NIST CSF 2.0 and CIS Controls, and justify a Statement of Applicability.
- Identify the regulatory obligations relevant to a GCC organisation and build a cross-framework compliance map.
- Assess a third party and outline continuity requirements (business impact analysis, RTO and RPO).
- Plan a control test and write audit findings (condition, criteria, cause, effect, recommendation).
- Design GRC metrics and a board report, and evaluate a programme's maturity.