Course Content
Module 1
- 06:22
cybersecurity cube
32:41Different cybersecurity concepts
09:38Attacks, Attack Actors and Threat modeling
Basic Cryptographic Concepts
07:12Security Principles
14:08Exam Module 1
Module 2
What is GRC
18:24GRC goals, where its used, and its place with AI
11:41Exam Module 2
Module 3
What is governance
09:32governance structure
14:57ISO 38500 simple overview
19:48COBIT simple overview
13:32Exam Module 3
Module 4
What is Compliance
06:07Compliance Layers
21:19Different Concepts in Compliance
10:07Compliance Life Cycle
16:30Control Theory in Compliance
06:18ISO 37301 Simple Overview
22:27Exam Module 4
Module 5
What is a risk
07:02Risk Types
08:12Risk Terminology
06:28Risk Treatment Approaches
05:59Risk Communication and Reporting
07:30Exam Module 5
Module 6
Understanding Risk Methodologies and its Steps
19:28Selecting A Methodology, Different Techniques and Tools Used
11:41Practical Example
19:23Exam Module 6
Module 7
Understand risk treatment and control purpose and their types
13:21Cost vs benefit, and ROI
07:46Risk treatment Plan
21:54Exam Module 7
Module 8
Understand Risk Registers
04:47Risk Register steps and lifecycle
09:21Diagrams Used in Risk Assessment
11:21Risk Reporting
09:01Exam Module 8
Module 9
Policy Architecture its purpose and the Hierarchy
10:07Levels of Security Policy
18:11Policy Architecture, Policy Life cycle and common types of policies
12:26Risk Reporting
09:01Comparing Two Policies Briefly Example
12:42Exam Module 9
Module 10
Module 10 Intro
01:30What is ISO 27001
06:30Why ISO 27001
08:05ISO 27001 strucure and ISMS
14:45Clauses 4-10 Breakdown
29:48Annex A
08:02Expected outcome, SOA and ISO 27001 Certification Process
13:11
Module 11
Chapter 11 Introduction
01:52Introduction to COBIT 2019
10:33COBIT principles and COBIT governance structure
10:31COBIT Objectives
03:23COBIT Design Factors and Area of Focus
04:07COBIT in GRC and its Relationship between other frameworks
05:34
Module 12
Module 12 Introduction
01:15What is Audit Readiness
03:34Audit Lifecycle
03:30Types of Evidence
04:16Evidence mapping and Control Testing
04:11Required Documentation and Audit Artifacts
04:45Nonconformities and Findings
04:40Audit Program
02:46Audit From Different Perspectives
02:43
Module 13
Module Introduction
00:48Alignment between GRC and Cybersecurity & Comm
08:34Alignment Objectives
03:35Key Integration Components
06:17Security Metrics and KPIs
03:56Organization Alignment Model
02:57Operation Integration
03:41Control Tractability
03:04Roles and Responsibilities
03:11Alignment Failures
04:35Alignment Road Map and Best Practice
04:10
Module 14
Module 14 Introduction
00:59What is third party
12:44What Is Third Party Risk
19:17Third Party, Forth Party and Supply Chain
15:24Third Party Risk Managment Life Cycle
05:24Third Party Risk Classification
10:02Vendor Risk Assessment
01:51Due Diligance and Documentation
04:47Contracts and SLA
06:08Continous Monitoring
03:54Common Failours
07:45
Module 15
Core Concepts
16:12Data Lifecycle
05:33Regulatory Landscape
11:03Data Classification and Handeling
08:03Privacy by Principles
12:06Data Protection Controls
19:05Data Breach Response Life Cycle
08:02Data Protection Impact Assessment
11:45Data Retention & Data Disposal
09:25Cross Border Data Transfer
11:33Data Protection Officer
07:04Privacy VS Security short comparison
04:57Exam Module 15
Module 16
Module 16 Introduction
00:32Understanding Buisness Continuity and Disaster Recovery
04:44Buisness Conitnuity Lifecycle
03:03Buissness Impact Analysis
07:32RTO and RPO
06:17Continuity Strategy
06:28Recovery sites
13:38Backup Strategy
08:11Incicdent Governance vs Incident Response
05:54Exam Module 16
Module 17 :Exercises Solutions
Sources for Chapter 17
1 1 CIA Triad Ex
13:571 2 Data States Ex
07:071 3 Countermesures Ex
13:111 4 Attack Types Ex
10:551 5 Security Principles Ex
11:142 1 GRC Scenario Ex
17:203 1 Governance Principles Ex
20:453 2 Governance or Managment EX
05:424 1 Type of Compliance
07:325 1 Terminology Mapping
07:385 2 Assets Idenetififcation
09:245 3 Risk Type Identefication
14:126 1 Risk Assessment Phase
09:536 2 Risk Visualization
19:446 3 Risk Register
19:437 1 Risk Control Types
16:287 2 RTP Failour
13:017 3 Risk Treatment Options
24:228 1 Risk Reigester Cycle
09:068 2 Risk Matrix
15:528 3 RisK Report
09:009 1 Classify Document Type
11:049 2 Classify Security Policy Type
10:129 3 Correct The Mistak
14:0010 1 Map ISO 27001 Clauses
11:2911 1 COBIT Objectives Mapping
11:5312.1 Audit Evidance
07:5112.2 Audit Testing
06:5213.1 Control Tracability and Alignment
23:4514.1 THIRD PARTY POSITION
09:4215.1 IDENTIFY PRIVACY ROLES
14:2715.2. IDENTIFY VIOLATED RIGHT
10:0615.3. IDENTIFY THE NEED FOR A DPO
14:1316.1. CONTINUITY PLAN OR CONTINUITY STRATEGy
06:5516.2. IDENTIFY RECOVERY SITE TYPE
23:5316.3. BACKUP TYPE
11:05
Module 17 Project
Before You Start The Project
06:57Governance Strucure
06:10Risk Quantification & Treatment
05:42Compliance Validation and Audit Readiness
08:47A Bigger Project Example
Projects in GRC
Student Ratings & Reviews
No Review Yet
