This module explores the foundational concepts of information security governance, including the distinction between governance and management, the role of governance committees, and how to align security strategies with corporate objectives. Learners will gain an understanding of organizational structures, stakeholder roles, and tools like the RACI matrix to enhance security leadership. The module also covers the integration of governance with risk management and compliance frameworks.

This module equips learners with the skills to align security strategies with business goals, conduct gap and feasibility analyses, and navigate implementation challenges. It also covers techniques for securing management buy-in and using maturity assessment models for continuous improvement.

This module covers essential aspects of data security, including managing data throughout its lifecycle, implementing secure disposal practices, and understanding IT asset management. It also explores the distinct roles of data owners and custodians, and provides a knowledge check to reinforce key concepts. Learners will gain practical insights into securing data at every stage and within organizational structures.

This module covers the development and implementation of effective security policies, standards, and procedures. It explores different approaches to policy creation, the importance of clarity and compliance, and the ongoing process of policy review and adaptation.

This module explores the implementation of security frameworks, the use of balanced scorecards, and the alignment of cybersecurity practices with business strategies. Learners will gain an understanding of key industry standards, risk management, and compliance considerations in information security governance.

This module covers the fundamentals of risk management in information security, including the CIA Triad, vulnerability analysis, and common cyber threats like DDoS, MITM, and malware. Learners will gain an understanding of threat landscapes and practical defense strategies to secure digital environments.

This module covers fundamental risk management concepts, including identifying, analyzing, and responding to security risks. Learners will explore the difference between inherent and residual risk, effective monitoring strategies, and various risk management frameworks. By the end, they will have a comprehensive understanding of how to manage and mitigate organizational risks.

This module explores the selection, implementation, and evaluation of security controls to mitigate risks in information systems. Learners will gain insights into strategic approaches like Defense in Depth and Zero Trust, and learn how to apply best practices for effective security management.