Digital Trust PractitionersAssociation of Digital Trust Practitioners · TrustPractitioners.org
JoinJoin

Courses

Courses that leave you with real work done.

Each course is built around a task you do at work, like running a SOC 2, answering a breach, or putting AI to use safely. You finish with a working deliverable built on your own organization, whether you are a team of five or five thousand, and a certificate anyone can verify.

87courses
12domains
5credential paths
273ALCs to earn
7included with Associate Membership
The course mapEvery course, by domain. Pick a credential to light up the courses that count toward it.
101 110 120
Digital Trust FoundationsDTF3
301 201 202 203 210 220 230 240 250 260 270 280
Privacy & Data ProtectionPRV12
210 220 230
Data GovernanceDGV3
305 201 202 203 210 220 230 240 250 260
Governance, Risk & ComplianceGRC10
201 210 220 230
Risk ManagementRSK4
303 201 210 220 230 240 250 260
Audit & Assurance OperationsAUD8
304 306 201 210 220 230 240 250
Cybersecurity & ThreatCYB8
302 201 210 215 220 230 240 250 260 270
Third-Party & Supply Chain RiskTPR10
201 210 220 230 240 250 260 270 280 290 300
AI GovernanceAIG11
201 210 220
Trust & AssuranceTRS3
201 210 220 290
Practitioner MethodsOPS4
201 202 203 204 205 206 207 208 209 210 211
Applied AI at WorkAIW11
Included with Associate MembershipPractitionerExecutive Practitioner

Concepts you hear but never learned Included

16 ten-minute lessons, included with Associate Membership. 0.25 ALC each, toward the Foundations Certificate. Open the series.

Bridge letterTPR · 10 minutes CUECTPR · 10 minutes Subservice organisation and carve-outTPR · 10 minutes Global Privacy Control (GPC)PRV · 10 minutes TCF and consent stringsPRV · 10 minutes SBOM and VEXCYB · 10 minutes Statement of ApplicabilityGRC · 10 minutes ITGCAUD · 10 minutes Legitimate interest and the balancing testPRV · 10 minutes Article 28 processor termsPRV · 10 minutes Business associate agreementPRV · 10 minutes Risk acceptance and expiryRSK · 10 minutes Type I versus Type IITPR · 10 minutes Data processing agreement versus data protection addendumPRV · 10 minutes Suppression listPRV · 10 minutes Population and sampleAUD · 10 minutes

Audit & Assurance Operations

8 courses
AIW-303Executive AI in Audit and Assurance: Sampling, Evidence and Workpapers AI can test whole populations and draft workpapers in minutes. Use it and still meet professional standards for evidence, sampling and independence. 4 ALCs AUD-201Practitioner Owning a Control: Accountability, Delegation and Follow-Through Controls fail when everyone thinks someone else owns them. Give every control one accountable owner, delegate the work, and follow it through to evidence. 3 ALCs AUD-210Practitioner Populations, Completeness and Sampling Auditors start by asking how you know the list is complete. Have the answer ready, along with samples they'll accept without redoing them. 3 ALCs AUD-220Practitioner Evidence That Holds: Collection, Freshness and Reuse Most audit pain is evidence collected late, stale or twice. Run an evidence calendar so the right proof is ready before anyone asks. 3 ALCs AUD-230Executive Automated Audit Tests and Continuous Control Monitoring Automated tests can check controls every day instead of once a year. Decide what to automate, what each test must prove and what happens when it fails. 3 ALCs AUD-240Practitioner Working With Auditors: Walkthroughs, Questions and Findings A walkthrough can win or lose an audit. Walk in prepared, answer consistently, and respond to findings without a fight. 2.5 ALCs AUD-250Practitioner Framework Scope as a Guardrail, Not a Burden Scope decisions made in a hurry come back as findings. Set framework scope on purpose and write down why each exclusion is safe. 2.5 ALCs AUD-260Executive Control Maturity and Status Reporting Red, amber and green don't tell a board anything. Define control maturity and report status in a way that shows real movement. 2.5 ALCs