GRC Foundations: ISMS, COBIT, SOC 2 & PCI DSS

Build Practical GRC Expertise

Develop a strong foundation in Governance, Risk and Compliance while learning how major security and compliance frameworks work in real-world environments.

This live cohort program covers ISO 27001, COBIT, SOC 2 and PCI DSS, alongside the cybersecurity fundamentals needed to work effectively with technical and business teams.

What You'll Learn

Cybersecurity Fundamentals

• CIA Triad, threats, vulnerabilities and risk

• Common attack types

• Access controls, encryption and security monitoring

• Core cybersecurity concepts and terminology

ISO/IEC 27001

• ISMS fundamentals

• Risk assessment and treatment

• Statement of Applicability

• Annex A controls

• Internal audits and management reviews

• Certification readiness

COBIT 2019

• Governance vs. management

• Governance and management objectives

• Design factors and organizational context

• Connecting governance with security programs

SOC 2

• SOC 1, SOC 2 and SOC 3

• Trust Services Criteria

• Type I vs. Type II

• Controls and evidence

• Audit readiness

PCI DSS

• PCI DSS scope

• Cardholder Data Environment

• Core requirements

• SAQs

• Assessment and reporting fundamentals

Practical Application

Learn how to map controls across frameworks and reduce duplicated compliance work.

You'll work through a practical case study and develop:

• A scope statement

• Control matrix

• Gap analysis

• Prioritized remediation roadmap

Who This Is For

• Aspiring GRC professionals

• IT auditors

• Compliance professionals

• Security consultants

• Risk professionals

• SaaS and fintech professionals

• IT professionals transitioning into GRC

• Career changers with relevant IT or audit experience

Program Format

Live cohort-based training
1.5–2 hour live sessions
Private cohort community
Practical exercises and case study
Certificate of completion

Upcoming cohort dates and schedule are provided at registration.