Your Website Title

Certified in Governance, Risk Management & Compliance (CGRC)

Objectives of the course

This course will provide participants with an understanding of all the globally accepted GRC frameworks and how they can be applied to drive higher levels of business performance and improved short, medium and long-term business sustainability. Governance, Risk Management, and Compliance (GRC) are three main pillars that help assure an organization reliably achieves objectives, addresses uncertainty and acts with integrity. These frameworks ensure Confidentiality, integrity, and availability of information is maintained while operating more efficiently, enabling effective information sharing, predicting and managing risks that could hinder the organization from reliably achieving its objectives under uncertainty, reporting activities and avoiding wasteful overlaps while adhering with the mandated boundaries-laws and regulations, and voluntary boundaries-company's policies, procedures, etc.

Who should attend this training?

This course opens up career avenues in the areas of consulting for ISO 27001, PCI DSS, HIPAA, and various other cybersecurity compliance requirements. Professionals from a largely technical background will also immensely benefit from gaining exposure to the governance, risk management and compliance aspects of cybersecurity.

Module 1 : Cyber Security Fundamentals

Module 2 : IT Risk Management, Governance and Compliance

Background:
- Briefing on Definition of Risk and Risk in context of Information Technology
- Discussion and recording: Known risk scenarios
- IT Risk Management Initiative
- Project Planning Requirements
Groundwork:
- General Risk Scenarios
  - Understanding Business-specific, industry-specific, region/location-specific scenarios
  - Recording the scenarios
- Management Buy-in
  - Degree of business dependence on information technology
  - Understanding and recording technology-specific risks
  - Tying in general risk scenarios with IT risks
  - Techniques of building business case
  - Budgeting
- Project Planning
- Resource Identification and Allocation
- Understanding the Concepts and Techniques
  - IT Risk Management Cycle
  - Technology and business drivers
  - Risk Terms – Asset, Threat, Threat Agent, Threat Event, Vulnerability, Countermeasure, Risk, Residual Risk
  - Risk Assessment Methodology
  - ISO 31000:2009 Overview
- IT Risk Assessment:
  - IT Process Selection
  - IT Component Selection
  - Approach Selection
  - Risk Discussion :
    - Risks from IT Strategy adopted
    - Risks from IT Processes and Plans
    - Risks from Networks and Systems
    - Risks from Business Applications
    - Risks from Internal Application
    - Risks from Devices – Security Implementation, Disaster Recovery, Business Continuity
    - Risks from Internal and External customers
  - Applying ISO 31000 and Risk IT for Risk Assessment
  - Challenges and Solutions
  - Case Study I
- IT Risk Mitigation:
  - IT Risk Mitigation Options
  - IT Risk Mitigation Strategy
  - Controls’ Identification and Analysis
  - Cost Benefit Analysis
  - Calculating Residual Risk
  - Case Study II
  - Applying ISO 31000 and Risk IT for Risk Mitigation
- Evaluation IT Risk Management Cycle:
  - Project Evaluation
  - Learning from Selection and Execution techniques
- Integrating IT Risk Management with various frameworks and standards – BASEL II, ISO 20000, ITIL, COSO, COBIT, ISO 27001, BS 25999
- IT Risk Management Cycle: A Revision

Module 3 : Information Security Management System

Module 4 : Payment Card Industry Data Security Standard

Module 5 : ISO 22301 (Business Continuity Management)

Module 6 : HIPAA (Health Insurance Portability and Accountability Act)

Module 7 : IT Act

Module 8 : ITIL (Information Technology Infrastructure library)

Module 9 : GDPR (General Data Protection Regulation)

Cybersecurity Careers Begineers Trainings

Feedback

Munir Tuwairgi, Student

The course was basic and new information was gained and hands on lab performed.

Ali Dhawi – Al Qahtani

I would like to extend my recognition and thanks for to instructor (Mahesh) for his professional knowledge and clear answer.

Nemwr Al-Xami,

Faculty is excellent teacher. He can teach us by easy way & useful, hope to get another course with him in future.

Saurabh Singh, Nomura, Senior Analyst

Faculty is enthusiastic, approachable & he is having brilliant presentation skills.

Register for a training

Name

Phone

Training Centre

Training Program

Your comment