Learning path
Governance / Risk / Compliance
Develop security program fluency, risk language, assurance practice, and compliance execution.
24
Modules
0/151
Lessons
Course sequence
Open a course, or expand it to preview lessons
One row per course. Expand a row to see its lesson list without leaving this page.
01Security Foundations
Current8 lessons · Module 1 of 24
0%
Security Foundations
Current8 lessons · Module 1 of 24
You are currently working through Security Purpose and Defensive Outcomes in this module.
- Security Purpose and Defensive OutcomesRecommended
- Confidentiality, Integrity, and AvailabilityAvailable
- Authentication, Authorization, and AccountabilityAvailable
+5 more lessons in this module
02Networking Foundations
Not started8 lessons · Module 2 of 24
0%
Networking Foundations
Not started8 lessons · Module 2 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Network Layers and Why They MatterAvailable
- Network Identity: IP Addresses, MAC Addresses, and AttributionAvailable
- Ports, Protocols, and ServicesAvailable
+5 more lessons in this module
03Threat Landscape and Attacker Thinking
Not started6 lessons · Module 3 of 24
0%
Threat Landscape and Attacker Thinking
Not started6 lessons · Module 3 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Attacker Motivations and ObjectivesAvailable
- The Shape of an ATT&CKAvailable
- Initial Access PatternsAvailable
+3 more lessons in this module
04Operating Systems for Defenders
Not started6 lessons · Module 4 of 24
0%
Operating Systems for Defenders
Not started6 lessons · Module 4 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Processes, Users, and the Idea of Security ContextAvailable
- Windows Essentials for DefendersAvailable
- Linux Essentials for DefendersAvailable
+3 more lessons in this module
05Cryptography Essentials
Not started7 lessons · Module 5 of 24
0%
Cryptography Essentials
Not started7 lessons · Module 5 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Cryptography Purpose and Defender ContextAvailable
- Symmetric CryptographyAvailable
- Asymmetric CryptographyAvailable
+4 more lessons in this module
06Defensive Web Fundamentals
Not started8 lessons · Module 6 of 24
0%
Defensive Web Fundamentals
Not started8 lessons · Module 6 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Web Architecture and Request FlowAvailable
- URLs, Domains, DNS, and HostingAvailable
- HTTPS and TLS in the BrowserAvailable
+5 more lessons in this module
07Identity and Access Management
Not started7 lessons · Module 7 of 24
0%
Identity and Access Management
Not started7 lessons · Module 7 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Identity, Accounts, and the Identity LifecycleAvailable
- Authentication Factors and Modern AuthenticationAvailable
- Federated Identity: SSO, OAuth, and OpenID ConnectAvailable
+4 more lessons in this module
08System Hardening Fundamentals
Not started6 lessons · Module 8 of 24
0%
System Hardening Fundamentals
Not started6 lessons · Module 8 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- System Hardening Purpose and Defensive ValueAvailable
- Configuration Baselines and BenchmarksAvailable
- Patch ManagementAvailable
+3 more lessons in this module
09Logging, Monitoring, and Telemetry
Not started6 lessons · Module 9 of 24
0%
Logging, Monitoring, and Telemetry
Not started6 lessons · Module 9 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Design Security TelemetryAvailable
- Build Reliable Source CoverageAvailable
- Protect the Telemetry PipelineAvailable
+3 more lessons in this module
10Blue Team Operations
Not started6 lessons · Module 10 of 24
0%
Blue Team Operations
Not started6 lessons · Module 10 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Understand the Blue Team MissionAvailable
- Follow the Current Incident-Response ModelAvailable
- Design a Sustainable SOC Operating ModelAvailable
+3 more lessons in this module
11Security Governance and Program Foundations
Not started6 lessons · Module 11 of 24
0%
Security Governance and Program Foundations
Not started6 lessons · Module 11 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Establish Governance and Decision RightsAvailable
- Navigate Obligations and FrameworksAvailable
- Govern Risk DecisionsAvailable
+3 more lessons in this module
12Cloud Security Foundations
Not started6 lessons · Module 12 of 24
0%
Cloud Security Foundations
Not started6 lessons · Module 12 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Model Cloud Architecture and DependenciesAvailable
- Apply Shared Responsibility PreciselyAvailable
- Protect Human and Workload IdentityAvailable
+3 more lessons in this module
13GRC Analyst Fundamentals
Not started7 lessons · Module 13 of 24
0%
GRC Analyst Fundamentals
Not started7 lessons · Module 13 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- The GRC Analyst Role and Program ContextAvailable
- Risk Management MethodologyAvailable
- Policy Development and ManagementAvailable
+4 more lessons in this module
14Risk Management Fundamentals
Not started7 lessons · Module 14 of 24
0%
Risk Management Fundamentals
Not started7 lessons · Module 14 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- The Risk Management Lifecycle in PracticeAvailable
- Risk Identification TechniquesAvailable
- Risk Analysis MethodologiesAvailable
+4 more lessons in this module
15Audit and Assurance
Not started7 lessons · Module 15 of 24
0%
Audit and Assurance
Not started7 lessons · Module 15 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- The Audit Profession and Its DisciplineAvailable
- Internal Audit OperationsAvailable
- External Audit Cycles in DepthAvailable
+4 more lessons in this module
16Security Frameworks and Control Mapping
Not started6 lessons · Module 16 of 24
0%
Security Frameworks and Control Mapping
Not started6 lessons · Module 16 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- The Framework LandscapeAvailable
- NIST CSF and SP 800-53 in PracticeAvailable
- ISO 27001 and SOC 2 as Trust MechanismsAvailable
+3 more lessons in this module
17Policy Writing in Practice
Not started5 lessons · Module 17 of 24
0%
Policy Writing in Practice
Not started5 lessons · Module 17 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Effective Security Policies and Why They FailAvailable
- Policy Lifecycle and Library ManagementAvailable
- Stakeholder Management and ApprovalAvailable
+2 more lessons in this module
18Security Awareness and Culture
Not started4 lessons · Module 18 of 24
0%
Security Awareness and Culture
Not started4 lessons · Module 18 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Security Awareness Programs: Failure Patterns and What WorksAvailable
- Program Design and Phishing SimulationAvailable
- Measuring Security CultureAvailable
+1 more lessons in this module
19Business Continuity and Disaster Recovery Planning
Not started5 lessons · Module 19 of 24
0%
Business Continuity and Disaster Recovery Planning
Not started5 lessons · Module 19 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- BC/DR Foundations and Program Failure PatternsAvailable
- Business Impact AnalysisAvailable
- Backup Architecture and Recovery DesignAvailable
+2 more lessons in this module
20GRC Capstone: Building a Security Program
Not started6 lessons · Module 20 of 24
0%
GRC Capstone: Building a Security Program
Not started6 lessons · Module 20 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Charter the Program and Establish ScopeAvailable
- Assess Risk and Assign DecisionsAvailable
- Translate Outcomes into a Control SystemAvailable
+3 more lessons in this module
21Risk Quantification with FAIR
Not started6 lessons · Module 21 of 24
0%
Risk Quantification with FAIR
Not started6 lessons · Module 21 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Qualitative Risk Limits and Quantitative AlternativesAvailable
- The FAIR OntologyAvailable
- Estimating FAIR InputsAvailable
+3 more lessons in this module
22Privacy Law and GDPR Practice
Not started6 lessons · Module 22 of 24
0%
Privacy Law and GDPR Practice
Not started6 lessons · Module 22 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- The Global Privacy LandscapeAvailable
- Data Mapping at ScaleAvailable
- Data Protection Impact AssessmentsAvailable
+3 more lessons in this module
23Compliance Program Design and Operations
Not started6 lessons · Module 23 of 24
0%
Compliance Program Design and Operations
Not started6 lessons · Module 23 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Compliance Program DesignAvailable
- Compliance Automation ToolingAvailable
- Continuous Evidence CollectionAvailable
+3 more lessons in this module
24Security Architecture Review
Not started6 lessons · Module 24 of 24
0%
Security Architecture Review
Not started6 lessons · Module 24 of 24
Start with the suggested lesson, or choose another lesson that fits what you need now.
- Architecture Review MethodologyAvailable
- Cloud Architecture Security ReviewAvailable
- Microservices and API ArchitectureAvailable
+3 more lessons in this module
