Cybersecurity: Framework, Compliance, and Governance
PremiumIntermediateCourse
Learn cybersecurity principles, industry standards, regulations, and audit processes. Explore key concepts in information security, compliance, and risk management.

Language
- English
Topic
- Computer Science & Information Technology
Skills You Will Learn
- Artificial Intelligence, CyberSecurity, CyberSecurity Compliance, Encryption, Endpoint Security
Offered By
- IBMSkillsNetwork
Estimated Effort
- 25 hours
Platform
- SkillsNetwork
Last Update
- December 16, 2025
About this Course
Cyberthreats are a growing challenge, costing billions and impacting everyone, from governments to small businesses. Are you ready to be part of the solution?
This course offers a comprehensive understanding of cybersecurity compliance principles, industry standards, regulations, and audit processes. You’ll explore essential topics such as governance, risk management, compliance, cybersecurity frameworks, and process management.
This course offers a comprehensive understanding of cybersecurity compliance principles, industry standards, regulations, and audit processes. You’ll explore essential topics such as governance, risk management, compliance, cybersecurity frameworks, and process management.
You’ll dive into IT service management, the NIST Risk Management Framework, and AI ethical considerations. The course also covers cybersecurity laws and regulations, including HIPAA, GDPR, and PCI DSS, from both US and global perspectives. Additionally, you’ll learn about audit processes using the COBIT framework and SOC reports, and explore key standards like OWASP, ISO, and IEEE, with practical guidance on applying them.
Over five self-paced modules, you’ll engage in interactive activities to apply your knowledge in real-world scenarios and complete a final project to demonstrate your skills and understanding.
Learning Outcomes
- Understand the core concepts of cybersecurity, including governance, risk management, compliance, AI ethics, and the audit process.
- Identify key cybersecurity laws and regulations at both national and international levels, and understand their impact on organizations.
- Explore industry standards and their role in cybersecurity practices, with a focus on the COBIT framework and SOC reports.
- Apply cybersecurity standards and best practices to reduce risks, strengthen security, and ensure compliance through effective audit processes.
Course Syllabus
Welcome
- Video: Course Introduction (3:49)
- General Information
- Learning Objectives and Syllabus
- Grading Scheme
Module 1: Introduction to Information Security and Compliance
- Module Introduction and Learning Objectives
- Video: Governance, Risk, and Compliance (GRC)
- Video: Governance Components
- Reading: GRC Tools
- (Lab) Match Activity: Applying GRC Concepts
- Video: NIST Cybersecurity Framework
- Reading: Aligning to the NIST Cybersecurity Framework
- Activity: Align to the NIST Cybersecurity Framework
- Video: Elements of Effective Security Compliance
- Video: Standardize Processes
- Video: Automation and Orchestration
- Video: Change Management
- Reading: Asset Management
- Module 1 Summary: Introduction to Information Security and Compliance
- Module 1 Glossary: Introduction to Information Security and Compliance
- Module 1 Graded Quiz: Introduction to Information Security and Compliance
- Discussion Prompt: (Optional) CSF Implementation
Module 2: Foundations of IT Service Management and Risk Governance
- Module Introduction and Learning Objectives
- Video: Information Technology Infrastructure Library (ITIL) Overview
- Video: Key ITIL Processes
- Activity: Identify the ITIL Phases
- Reading: ITIL Process Implementation
- Video: Risk Management
- Reading: Risk Analysis
- (Lab) Matching: Accept, Transfer, Avoid, or Mitigate?
- Video: Third-Party Risk Assessment and Management
- Video: AI Ethics
- Reading: EU AI Act
- Video: How to Implement AI Ethics
- Activity: Apply AI Ethics
- Module 2 Summary: Foundations of IT Service Management and Risk Governance
- Module 2 Glossary: Foundations of IT Service Management and Risk Governance
- Module 2 Graded Quiz: Foundations of IT Service Management and Risk Governance
- Discussion Prompt:(Optional) Foundations of IT Service Management and Risk Governance
Module 3: Understanding Cybersecurity Laws and Regulations
- Module Introduction and Learning Objectives
- Video: Overview of US Cybersecurity Laws and Regulations
- Video: HIPAA Security Rule
- Reading: HIPAA Cybersecurity Guidance
- Activity: Apply HIPAA Guidelines
- Reading: US Laws and Regulations Cheat Sheet
- Video: Overview of Global Cybersecurity Laws and Regulations
- Reading: Applying Global Cybersecurity Laws and Regulations
- Activity: Apply global cybersecurity laws and regulations
- Reading: Global Cybersecurity Laws and Regulations Cheat Sheet
- Practice Quiz: Understanding Cybersecurity Laws and Regulations
- Module 3 Summary: Understanding Cybersecurity Laws and Regulations
- Module 3 Glossary: Understanding Cybersecurity Laws and Regulations
- Module 3 Graded Quiz: Understanding Cybersecurity Laws and Regulations
- Discussion Prompt: (Optional) Cybersecurity Laws
Module 4: Understanding Cybersecurity Standards and Audits
- Module Introduction and Learning Objectives
- Video: Industry Standards
- Reading: OWASP Use Cases
- Activity: Apply OWASP Standards
- Video: NIST, ISO, and IEEE Overview
- Reading: NIST Standards
- Reading: ISO Standards
- Reading: IEEE Standards
- Video: Security Control Audits
- Video: Performing a Security Audit
- Video: ISACA Standards
- Reading: COBIT
- Video: SOC Reports
- Practice Quiz: Understanding Cybersecurity Standards and Audits
- Module 4 Summary: Understanding Cybersecurity Standards and Audits
- Module 4 Glossary: Understanding Cybersecurity Standards and Audits
- Module 4 Graded Quiz: Understanding Cybersecurity Standards and Audits
- Discussion Prompt: (Optional) Conducting Security Audits
Module 5: Final Project
- Module Introduction and Learning Objectives
- Final Project Overview
- Final Project Scenarios
- Final Project
Course Wrap-Up
- Video: Course Summary
- Congratulations and Next Steps
- Thanks from the Course Team
- Copyrights and Trademarks
Course Rating & Feedback
Badge
General Information
- This course is self-paced.
- This platform works best with current versions of Chrome, Edge, Firefox, Internet Explorer, or Safari.
Recommended Skills Prior to Taking this Course
Knowledge of cybersecurity and IT fundamentals.

Language
- English
Topic
- Computer Science & Information Technology
Skills You Will Learn
- Artificial Intelligence, CyberSecurity, CyberSecurity Compliance, Encryption, Endpoint Security
Offered By
- IBMSkillsNetwork
Estimated Effort
- 25 hours
Platform
- SkillsNetwork
Last Update
- December 16, 2025