This module introduces the foundational concepts of governance, risk, and compliance (GRC), explaining their definitions, roles, and interrelationships. Learners will explore how these areas function within organizations and how they contribute to effective decision-making and regulatory adherence. Practical examples and a knowledge check reinforce key ideas and prepare students for more advanced topics.

This module explores the Three Lines of Defense model, explaining its historical background, key components, and practical applications in risk management and governance. Learners will gain insights into how each line contributes to organizational resilience and effective GRC processes.

This module guides learners through the process of understanding and mapping an organization's information security risk universe. It covers key areas such as infrastructure, business applications, third parties, end users, and physical perimeters, while emphasizing the importance of focusing on risks rather than controls. Learners will gain practical skills to identify and assess risk factors within an organizational context.

This module provides learners with the skills to identify, document, and assess inherent risks across various organizational areas such as infrastructure, business applications, third parties, and physical perimeters. It also covers how to apply templates and align risk documentation with international standards like ISO 27001. Learners will gain practical knowledge for implementing risk management strategies within a GRC framework.

This module explores the three lines of defense model in Governance, Risk, and Compliance, covering the roles, responsibilities, and interactions of each line. Learners will understand how these lines work together to ensure effective risk management and organizational governance. The content includes practical applications and knowledge checks to reinforce understanding.

This module explores how organizations implement and evaluate existing policies, mitigations, and controls to manage risk effectively. Learners will gain insights into identifying and assessing the impact of these controls within the broader context of risk management and compliance frameworks.

This module explores the concept of residual risk, challenges the belief that risk can be completely eliminated, and teaches how to analyze and manage residual risk in decision-making processes.

This module explores the critical processes of remediation, oversight, and risk management within governance, risk, and compliance (GRC) frameworks. Learners will gain an understanding of how to effectively monitor and address risk deficiencies through strategic and operational reporting. The module emphasizes practical approaches to maintaining compliance and mitigating ongoing risks.

This module explores the integration of governance, risk, and compliance frameworks, focusing on how to align risk management strategies with organizational goals. Learners will gain a comprehensive understanding of the key elements that support secure and efficient operations. The content emphasizes practical application and strategic oversight in information security.

This module explores the role of GRC tools in automating governance, risk, and compliance processes. Learners will gain an understanding of key features, benefits, and practical applications of these tools in real-world scenarios.

This module provides an in-depth understanding of IT auditing, focusing on the roles of internal and external audits in risk management, compliance, and organizational governance. Learners will explore how audits serve as a critical mechanism for ensuring transparency and accountability in IT operations.

This module provides a final review of the course objectives, emphasizes the practical application of GRC concepts, and prepares learners to implement their knowledge in real-world risk management scenarios.