Learning path

INTERMEDIATE24 courses · 151 lessons
Learning PathsGovernance / Risk / Compliance

Governance / Risk / Compliance

Develop security program fluency, risk language, assurance practice, and compliance execution.

24

Modules

0/151

Lessons

0 of 151 lessons · Active module: Security Foundations0%

Course sequence

Open a course, or expand it to preview lessons

One row per course. Expand a row to see its lesson list without leaving this page.

01

Security Foundations

Current

8 lessons · Module 1 of 24

You are currently working through Security Purpose and Defensive Outcomes in this module.

  • Security Purpose and Defensive OutcomesRecommended
  • Confidentiality, Integrity, and AvailabilityAvailable
  • Authentication, Authorization, and AccountabilityAvailable

+5 more lessons in this module

02

Networking Foundations

Not started

8 lessons · Module 2 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Network Layers and Why They MatterAvailable
  • Network Identity: IP Addresses, MAC Addresses, and AttributionAvailable
  • Ports, Protocols, and ServicesAvailable

+5 more lessons in this module

03

Threat Landscape and Attacker Thinking

Not started

6 lessons · Module 3 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Attacker Motivations and ObjectivesAvailable
  • The Shape of an ATT&CKAvailable
  • Initial Access PatternsAvailable

+3 more lessons in this module

04

Operating Systems for Defenders

Not started

6 lessons · Module 4 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Processes, Users, and the Idea of Security ContextAvailable
  • Windows Essentials for DefendersAvailable
  • Linux Essentials for DefendersAvailable

+3 more lessons in this module

05

Cryptography Essentials

Not started

7 lessons · Module 5 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Cryptography Purpose and Defender ContextAvailable
  • Symmetric CryptographyAvailable
  • Asymmetric CryptographyAvailable

+4 more lessons in this module

06

Defensive Web Fundamentals

Not started

8 lessons · Module 6 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Web Architecture and Request FlowAvailable
  • URLs, Domains, DNS, and HostingAvailable
  • HTTPS and TLS in the BrowserAvailable

+5 more lessons in this module

07

Identity and Access Management

Not started

7 lessons · Module 7 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Identity, Accounts, and the Identity LifecycleAvailable
  • Authentication Factors and Modern AuthenticationAvailable
  • Federated Identity: SSO, OAuth, and OpenID ConnectAvailable

+4 more lessons in this module

08

System Hardening Fundamentals

Not started

6 lessons · Module 8 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • System Hardening Purpose and Defensive ValueAvailable
  • Configuration Baselines and BenchmarksAvailable
  • Patch ManagementAvailable

+3 more lessons in this module

09

Logging, Monitoring, and Telemetry

Not started

6 lessons · Module 9 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Design Security TelemetryAvailable
  • Build Reliable Source CoverageAvailable
  • Protect the Telemetry PipelineAvailable

+3 more lessons in this module

10

Blue Team Operations

Not started

6 lessons · Module 10 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Understand the Blue Team MissionAvailable
  • Follow the Current Incident-Response ModelAvailable
  • Design a Sustainable SOC Operating ModelAvailable

+3 more lessons in this module

11

Security Governance and Program Foundations

Not started

6 lessons · Module 11 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Establish Governance and Decision RightsAvailable
  • Navigate Obligations and FrameworksAvailable
  • Govern Risk DecisionsAvailable

+3 more lessons in this module

12

Cloud Security Foundations

Not started

6 lessons · Module 12 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Model Cloud Architecture and DependenciesAvailable
  • Apply Shared Responsibility PreciselyAvailable
  • Protect Human and Workload IdentityAvailable

+3 more lessons in this module

13

GRC Analyst Fundamentals

Not started

7 lessons · Module 13 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • The GRC Analyst Role and Program ContextAvailable
  • Risk Management MethodologyAvailable
  • Policy Development and ManagementAvailable

+4 more lessons in this module

14

Risk Management Fundamentals

Not started

7 lessons · Module 14 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • The Risk Management Lifecycle in PracticeAvailable
  • Risk Identification TechniquesAvailable
  • Risk Analysis MethodologiesAvailable

+4 more lessons in this module

15

Audit and Assurance

Not started

7 lessons · Module 15 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • The Audit Profession and Its DisciplineAvailable
  • Internal Audit OperationsAvailable
  • External Audit Cycles in DepthAvailable

+4 more lessons in this module

16

Security Frameworks and Control Mapping

Not started

6 lessons · Module 16 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • The Framework LandscapeAvailable
  • NIST CSF and SP 800-53 in PracticeAvailable
  • ISO 27001 and SOC 2 as Trust MechanismsAvailable

+3 more lessons in this module

17

Policy Writing in Practice

Not started

5 lessons · Module 17 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Effective Security Policies and Why They FailAvailable
  • Policy Lifecycle and Library ManagementAvailable
  • Stakeholder Management and ApprovalAvailable

+2 more lessons in this module

18

Security Awareness and Culture

Not started

4 lessons · Module 18 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Security Awareness Programs: Failure Patterns and What WorksAvailable
  • Program Design and Phishing SimulationAvailable
  • Measuring Security CultureAvailable

+1 more lessons in this module

19

Business Continuity and Disaster Recovery Planning

Not started

5 lessons · Module 19 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • BC/DR Foundations and Program Failure PatternsAvailable
  • Business Impact AnalysisAvailable
  • Backup Architecture and Recovery DesignAvailable

+2 more lessons in this module

20

GRC Capstone: Building a Security Program

Not started

6 lessons · Module 20 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Charter the Program and Establish ScopeAvailable
  • Assess Risk and Assign DecisionsAvailable
  • Translate Outcomes into a Control SystemAvailable

+3 more lessons in this module

21

Risk Quantification with FAIR

Not started

6 lessons · Module 21 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Qualitative Risk Limits and Quantitative AlternativesAvailable
  • The FAIR OntologyAvailable
  • Estimating FAIR InputsAvailable

+3 more lessons in this module

22

Privacy Law and GDPR Practice

Not started

6 lessons · Module 22 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • The Global Privacy LandscapeAvailable
  • Data Mapping at ScaleAvailable
  • Data Protection Impact AssessmentsAvailable

+3 more lessons in this module

23

Compliance Program Design and Operations

Not started

6 lessons · Module 23 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Compliance Program DesignAvailable
  • Compliance Automation ToolingAvailable
  • Continuous Evidence CollectionAvailable

+3 more lessons in this module

24

Security Architecture Review

Not started

6 lessons · Module 24 of 24

Start with the suggested lesson, or choose another lesson that fits what you need now.

  • Architecture Review MethodologyAvailable
  • Cloud Architecture Security ReviewAvailable
  • Microservices and API ArchitectureAvailable

+3 more lessons in this module