For people in their first few years of security, audit, compliance or IT governance work who want to get hands on with the real artefacts: controls, evidence, risk registers, SOA entries and audit findings.
Each module starts from a real artefact and ends with you producing one. No slides-only theory.
Take one Annex A control from ISO 27001 and trace it from policy to the evidence an auditor will ask for.
Justify inclusion and exclusion for a set of controls in language an auditor will accept.
Identify, score and treat risks for a sample process, with owners, due dates and approval steps.
Plan a sample, record observations, grade findings and write a corrective action plan that closes.
Pick one business process, list the personal data it touches, and draft the notice and consent points it needs.
Map a sample environment to the six CSF functions, find the gaps, and prioritise the first three actions.
Tell us your role and your team's current tools. We will confirm the next batch date, format and venue.
Starting out? See the freshers and student sessions.