Sign in
Learning PathsGovernance / Risk / Compliance

Learning path

INTERMEDIATE24 courses156 lessons

Governance / Risk / Compliance

Develop security program fluency, risk language, assurance practice, and compliance execution.

This path groups the courses for one direction. Use it to understand the sequence, then open the specific course you want to work through.

Sign in to startOpen current courseBack to paths

Courses

24

Modules

24

Lessons

156

Completion

0%

0 of 156 lessons completed ยท Active module: Security Foundations0%

Courses in this path

Open the course you want to work through

This path groups related courses into one branch. Course pages stay focused on the lesson-by-lesson workspace.

Module preview

What this path covers

Preview the modules and lesson sequence here, then use each course page when you want the full execution view.

Module 10/8 completeCurrent module

Security Foundations

You are currently working through Security Purpose and Defensive Outcomes in this module.

Preview lessons

  • Security Purpose and Defensive OutcomesCurrent
  • Confidentiality, Integrity, and AvailabilityLocked
  • Authentication, Authorization, and AccountabilityLocked

+5 more lessons in this module

Module 20/8 complete

Networking Foundations

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Network Layers and Why They MatterLocked
  • Network Identity: IP Addresses, MAC Addresses, and AttributionLocked
  • Ports, Protocols, and ServicesLocked

+5 more lessons in this module

Module 30/6 complete

Threat Landscape and Attacker Thinking

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Attacker Motivations and ObjectivesLocked
  • The Shape of an ATT&CKLocked
  • Initial Access PatternsLocked

+3 more lessons in this module

Module 40/6 complete

Operating Systems for Defenders

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Processes, Users, and the Idea of Security ContextLocked
  • Windows Essentials for DefendersLocked
  • Linux Essentials for DefendersLocked

+3 more lessons in this module

Module 50/7 complete

Cryptography Essentials

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Cryptography Purpose and Defender ContextLocked
  • Symmetric CryptographyLocked
  • Asymmetric CryptographyLocked

+4 more lessons in this module

Module 60/8 complete

Defensive Web Fundamentals

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Web Architecture and Request FlowLocked
  • URLs, Domains, DNS, and HostingLocked
  • HTTPS and TLS in the BrowserLocked

+5 more lessons in this module

Module 70/7 complete

Identity and Access Management

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Identity, Accounts, and the Identity LifecycleLocked
  • Authentication Factors and Modern AuthenticationLocked
  • Federated Identity: SSO, OAuth, and OpenID ConnectLocked

+4 more lessons in this module

Module 80/6 complete

System Hardening Fundamentals

Complete the lessons in sequence to move this path forward.

Preview lessons

  • System Hardening Purpose and Defensive ValueLocked
  • Configuration Baselines and BenchmarksLocked
  • Patch ManagementLocked

+3 more lessons in this module

Module 90/6 complete

Logging, Monitoring, and Telemetry

Complete the lessons in sequence to move this path forward.

Preview lessons

  • High-Quality Security TelemetryLocked
  • The Major Log Sources Every Defender Should KnowLocked
  • SIEM, Log Management, and the Detection PlatformLocked

+3 more lessons in this module

Module 100/6 complete

Blue Team Operations

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Blue Team Mission and Daily WorkLocked
  • The Incident LifecycleLocked
  • SOC Structure and Analyst RolesLocked

+3 more lessons in this module

Module 110/6 complete

Security Governance and Program Foundations

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Security Governance Purpose and Operating ModelLocked
  • The Framework and Regulatory LandscapeLocked
  • Risk Management: Identification, Assessment, and TreatmentLocked

+3 more lessons in this module

Module 120/6 complete

Cloud Security Foundations

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Cloud Security Model and Shared ResponsibilityLocked
  • The Shared Responsibility ModelLocked
  • Cloud Identity and Access ManagementLocked

+3 more lessons in this module

Module 130/7 complete

GRC Analyst Fundamentals

Complete the lessons in sequence to move this path forward.

Preview lessons

  • The GRC Analyst Role and Program ContextLocked
  • Risk Management MethodologyLocked
  • Policy Development and ManagementLocked

+4 more lessons in this module

Module 140/7 complete

Risk Management Fundamentals

Complete the lessons in sequence to move this path forward.

Preview lessons

  • The Risk Management Lifecycle in PracticeLocked
  • Risk Identification TechniquesLocked
  • Risk Analysis MethodologiesLocked

+4 more lessons in this module

Module 150/7 complete

Audit and Assurance

Complete the lessons in sequence to move this path forward.

Preview lessons

  • The Audit Profession and Its DisciplineLocked
  • Internal Audit OperationsLocked
  • External Audit Cycles in DepthLocked

+4 more lessons in this module

Module 160/6 complete

Security Frameworks and Control Mapping

Complete the lessons in sequence to move this path forward.

Preview lessons

  • The Framework LandscapeLocked
  • NIST CSF and SP 800-53 in PracticeLocked
  • ISO 27001 and SOC 2 as Trust MechanismsLocked

+3 more lessons in this module

Module 170/5 complete

Policy Writing in Practice

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Effective Security Policies and Why They FailLocked
  • Policy Lifecycle and Library ManagementLocked
  • Stakeholder Management and ApprovalLocked

+2 more lessons in this module

Module 180/4 complete

Security Awareness and Culture

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Security Awareness Programs: Failure Patterns and What WorksLocked
  • Program Design and Phishing SimulationLocked
  • Measuring Security CultureLocked

+1 more lessons in this module

Module 190/5 complete

Business Continuity and Disaster Recovery Planning

Complete the lessons in sequence to move this path forward.

Preview lessons

  • BC/DR Foundations and Program Failure PatternsLocked
  • Business Impact AnalysisLocked
  • Backup Architecture and Recovery DesignLocked

+2 more lessons in this module

Module 200/11 complete

GRC Capstone: Building a Security Program

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Scoping the Security ProgramLocked
  • Conducting the Risk AssessmentLocked
  • Designing the Policy LibraryLocked

+8 more lessons in this module

Module 210/6 complete

Risk Quantification with FAIR

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Qualitative Risk Limits and Quantitative AlternativesLocked
  • The FAIR OntologyLocked
  • Estimating FAIR InputsLocked

+3 more lessons in this module

Module 220/6 complete

Privacy Law and GDPR Practice

Complete the lessons in sequence to move this path forward.

Preview lessons

  • The Global Privacy LandscapeLocked
  • Data Mapping at ScaleLocked
  • Data Protection Impact AssessmentsLocked

+3 more lessons in this module

Module 230/6 complete

Compliance Program Design and Operations

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Compliance Program DesignLocked
  • Compliance Automation ToolingLocked
  • Continuous Evidence CollectionLocked

+3 more lessons in this module

Module 240/6 complete

Security Architecture Review

Complete the lessons in sequence to move this path forward.

Preview lessons

  • Architecture Review MethodologyLocked
  • Cloud Architecture Security ReviewLocked
  • Microservices and API ArchitectureLocked

+3 more lessons in this module