Management Reporting - Stretegic vs Operational

Mastering Governance, Risk, and Compliance (GRC): A Handbook

Course Overview

Introduction

GRC Essentials - A Risk Manager’s playbook to IT Security Governance, Risk and Compliance (3:10)
Course Objectives (2:49)
Course Audience (1:20)
Before we take off - Some Ground Rules (3:43)
Fair Disclaimer (0:54)
Some _Not So Fun_ Facts about Cybersecurity (1:05)

Module 1: What is Governance Risk and Compliance - Quite Literally

Why This Module (1:32)
What is Governance - Part 1 (3:11)
What is Governance - Part 2 (8:53)
What is Risk (7:47)
What is Compliance (2:51)
Risk Analyst and Risk Manager (4:51)
Quick Exercise (1:16)
Extension Fun Fact (0:43)
Module 1 Quiz

Module 2 : The Three Lines of Defense

History and Relevance (1:40)
First Line (Part 1) (4:52)
First Line (Part 2) (1:34)
Second Line (3:16)
Third Line (2:20)
How does this help (2:21)
Things to unlearn - One Size Fits All (0:26)

Module 3 : Step 1 Information Gathering-Understand the Organization Risk Universe

Recap & Back to problem statement (1:29)
Map your Information Security risk universe for ABC Inc (5:28)
Infrastructure - Compute & Workstation (4:04)
Business Applications (3:37)
Third Parties (2:06)
End Users (1:39)
Physical Perimeter (0:56)
Revenue Stream - Client Services and Products (1:43)
Outcome (3:22)
Things to Unlearn - Start with Risks and not Controls (1:47)
Module 3 Quiz

Module 4 : Step 2: Drafting Inherent Risks

What is Inherent Risk (4:16)
How to identify Inherent Risks (4:17)
Time for templates! (1:50)
Drafting Inherent Risks - Infrastructure - Compute - Part 1 (9:53)
Drafting Inherent Risks - Infrastructure - Compute - Part 2 (6:26)
Drafting Inherent Risks – Infrastructure – Workstations (2:23)
Drafting Inherent Risks - Business Applications - Part 1 (4:47)
Drafting Inherent Risks - Business Applications - Part 2 (3:43)
Drafting Inherent Risks - Third Parties (5:31)
Drafting Inherent Risks - End Users (3:57)
Drafting Inherent Risks - Physical Perimeter (3:26)
Drafting Inherent Risks Revenue Stream Client Service or Products (2:29)
A quick pressure test with ISO 27001 (3:39)
Module 4 Quiz

Module 5 : Step 3: Mapping the Lines of Defense - Roles and Responsibilities

Module 6 : Step 4 : Existing Controls Environment

A Much Needed Recap (2:01)
Existing Policies, Mitigations and Controls - Part 1 (5:29)
Existing Policies, Mitigations and Controls – Part 2 (3:00)
Key points to identify existing mitigations (2:08)
Module 6 Quiz

Module 7 : Step 5 : Residual Risk

Module 8 : Follow Through

Module 9 : Bringing it all Together

Module 10 : GRC Tools

Module 11 : IT Auditing : The Third Line of Defense

Module 12 : Course Conclusion

Audio Version of Training

Lesson content locked

If you're already enrolled, you'll need to login.