Hands-On Training for Aspiring GRC Professionals

What you'll learn

Learn and apply key cybersecurity frameworks such as ISO 27001, NIST, PCI DSS, and HIPAA, which are foundational to regulatory compliance.

Work within SecureTech's GRC team, developing governance structures and creating and updating policies that align with industry standards.

Assess SecureTech's risks, scoring and strategizing mitigations for data breaches, third-party vulnerabilities, and compliance issues.

Gain practical experience with industry tools like SAP GRC, HIPAA One, RSA Archer, and AuditBoard through guided, real-world exercises.

Requirements

No prior experience is needed!

Designed for beginners as well as professionals looking to transition into Governance, Risk, and Compliance (GRC).

Basic computer literacy (e.g., navigating spreadsheets and documents).

Access to a computer and a stable internet connection to complete online modules and tasks.

Description

Welcome to SecureTech Solutions' 10-Week GRC Internship Experience! This skillternship provides an in-depth, hands-on journey into Governance, Risk, and Compliance (GRC) within cybersecurity, structured as a guided internship at SecureTech Solutions. Throughout these 10 weeks, participants will develop essential skills and practical knowledge that align with the day-to-day responsibilities of GRC professionals in the field.During this program, you'll be "on the job" at SecureTech Solutions, where you will:• Learn and apply key cybersecurity frameworks such as ISO 27001, NIST, PCI DSS, and HIPAA, which are foundational to regulatory compliance.• Work within SecureTech's GRC team, developing governance structures and creating and updating policies that align with industry standards.• Perform risk assessments on SecureTech's operations, categorizing, scoring, and strategizing mitigations for risks such as data breaches, third-party risks, and regulatory compliance challenges.• Gain hands-on experience with industry tools like SAP GRC, HIPAA One, RSA Archer, and AuditBoard through guided exercises that reflect the tools' real-world usage.Each week introduces tasks that build upon your previous knowledge and develop key competencies. Highlights include:• Reviewing and refining SecureTech's GRC policies and frameworks to address new regulatory and operational challenges.• Conducting a risk assessment on a recent cybersecurity incident and preparing a risk mitigation plan for SecureTech's leadership.• Drafting and submitting GRC documents for review, from governance charters to data protection policies, as you progress through real-world-inspired scenarios.• Preparing and presenting a final capstone project to SecureTech's leadership, where you'll develop a comprehensive GRC strategy that demonstrates your proficiency in GRC principles.Ideal for individuals aiming to break into or advance in cybersecurity-focused GRC roles, this program equips you with the hands-on experience, critical thinking skills, and confidence to excel in the industry. By the end of this internship-style course lab, you will be well-prepared to step into GRC roles with a practical toolkit and a clear understanding of industry expectations.

Overview

Section 1: Introduction

Lecture 1 Introduction to the Team

Lecture 2 Welcome to SecureTech!

Lecture 3 GRC Course Lab Overview

Lecture 4 Company Background and Organizations Structure

Section 2: Module 1: Introduction to GRC and Cybersecurity Frameworks

Lecture 5 Week 1: Onboarding at SecureTech Solutions

Lecture 6 Understanding Your Role as a GRC Analyst

Lecture 7 GRC Framework Overview

Lecture 8 Key Clients and Regulations

Lecture 9 Achieving Compliance

Lecture 10 Simulated Team Collaboration

Lecture 11 NIST Cybersecurity Framework

Lecture 12 Why the NIST Framework Works

Lecture 13 Explore How SecureTech Aligns with NIST Standards

Lecture 14 Critical Asset Inventory Reflection

Lecture 15 Risk Assessment

Lecture 16 Compliance Monitoring Walkthrough for ISO 27001 Compliance

Lecture 17 Video: Compliance Monitoring Walkthrough for ISO 27001 Compliance

Lecture 18 Welcome to Week 2!

Lecture 19 Introduction to GRC

Lecture 20 Overview of GRC Frameworks at SecureTech

Lecture 21 Video: Overview of GRC Frameworks at SecureTech

Lecture 22 GRC Framework Review: Sample Summary

Lecture 23 PCI DSS

Lecture 24 Firewall Configuration for PCI DSS Compliance

Lecture 25 Video: Firewall Configuration for PCI DSS Compliance

Lecture 26 PCI DSS Attestation of Compliance (AOC) Form

Lecture 27 Compliance Versus Validation of Compliance

Lecture 28 Attestation of Compliance (or AOC) Task Overview

Lecture 29 Video: Attestation of Compliance

Lecture 30 AOC Sample

Lecture 31 Risk and Compliance Tools

Lecture 32 Tool Selection Task Overview

Lecture 33 Thank You for Your Submission: Tool Selection

Lecture 34 Week 6: Risk Mitigation and Incident Response

Section 3: Module 2: Governance and Policy Development

Lecture 35 Week 3: Establishing a Governance Framework

Lecture 36 Building a Strong Governance Framework

Lecture 37 Developing a Governance Structure for SecureTech

Lecture 38 Process for Developing a Governance Structure for SecureTech Solutions

Lecture 39 The Governance Charter

Lecture 40 Governance Charter Review

Lecture 41 Introduction to SAP Business One

Lecture 42 Week 4: Data Protection and IAM Gaps

Lecture 43 Developing a Governance Structure for SecureTech

Lecture 44 Data Protection Policy

Lecture 45 Recommendations on Data Protection Policy

Section 4: Module 3: Risk Management Practices and Tools

Lecture 46 Week 5: Conducting Risk Assessments

Lecture 47 Risk Assessment Methodologies

Lecture 48 Introduction to Risk Assessment Methodologies

Lecture 49 Steps to Conduct a Risk Assessment

Lecture 50 Risk Assessment Heat Map

Lecture 51 Risk Matrix Sample

Lecture 52 Sample Risk Matrix and Sample Mitigation Plan

Lecture 53 Sample Mitigation Plan

Lecture 54 Week 6: Risk Mitigation and Incident Response

Lecture 55 Developing a Mitigation Plan for Identified Risks

Lecture 56 Identified Risks and Mitigation Plan with Activities

Lecture 57 Case Study: Review and Critique of Real-World Incident Response Strategies

Section 5: Module 4: Compliance Management and Tools

Lecture 58 Week 7: Ensuring Regulatory Compliance

Lecture 59 GDPR Compliance

Lecture 60 Introducing Jira for Compliance Management

Lecture 61 Example Compliance Tracking for Regulatory Obligations

Lecture 62 Week 8: Compliance Auditing and Reporting

Lecture 63 Understanding Compliance Audits

Lecture 64 Types of Compliance Regulations and Audits

Lecture 65 Samples of Identified Gaps

Lecture 66 More Samples of a Justifications and Implementation Plan

Lecture 67 Sample ISMS Proposal

Lecture 68 ISO 27001 Implementation Plan Sample

Section 6: Module 5: Capstone Project and Job-Ready Preparation

Lecture 69 Week 9: Developing a Comprehensive GRC Strategy

Lecture 70 Submission: Developing a Comprehensive GRC Strategy

Lecture 71 Week 10: Final Submission and Career Preparation

Lecture 72 Email: Final Submission and Future Contributions at SecureTech

Lecture 73 Farewell

Recent Graduates- Those with degrees in cybersecurity, information technology, or related fields seeking hands-on experience.,Career Changers- Professionals from other sectors interested in transitioning to GRC within cybersecurity.,Current Professionals- Individuals in cybersecurity or compliance roles aiming to enhance their GRC skills and knowledge.,Those pursuing internships or practical experience in the field of GRC.,Whether you're exploring career opportunities in compliance, risk management, or regulatory frameworks, this course offers hands-on insights and practical strategies.,Gain a clear understanding of GRC workflows and what it's like to work in this growing and impactful industry.