Courses
Courses that leave you with real work done.
Each course is built around a task you do at work, like running a SOC 2, answering a breach, or putting AI to use safely. You finish with a working deliverable built on your own organization, whether you are a team of five or five thousand, and a certificate anyone can verify.
87courses
12domains
5credential paths
273ALCs to earn
7included with Associate Membership
The course mapEvery course, by domain. Pick a credential to light up the courses that count toward it.
Included with Associate MembershipPractitionerExecutive Practitioner
Concepts you hear but never learned Included
16 ten-minute lessons, included with Associate Membership. 0.25 ALC each, toward the Foundations Certificate. Open the series.
Bridge letterTPR · 10 minutes
CUECTPR · 10 minutes
Subservice organisation and carve-outTPR · 10 minutes
Global Privacy Control (GPC)PRV · 10 minutes
TCF and consent stringsPRV · 10 minutes
SBOM and VEXCYB · 10 minutes
Statement of ApplicabilityGRC · 10 minutes
ITGCAUD · 10 minutes
Legitimate interest and the balancing testPRV · 10 minutes
Article 28 processor termsPRV · 10 minutes
Business associate agreementPRV · 10 minutes
Risk acceptance and expiryRSK · 10 minutes
Type I versus Type IITPR · 10 minutes
Data processing agreement versus data protection addendumPRV · 10 minutes
Suppression listPRV · 10 minutes
Population and sampleAUD · 10 minutes
Cybersecurity & Threat
8 coursesAIW-304Practitioner
AI in Security Operations: Triage and Detection
AI can triage alerts and write detections, and attackers can target the AI itself. Get faster without ever letting a model close a real incident.
4 ALCs
AIW-306Practitioner
AI-Assisted Vulnerability Remediation: SAST, Secrets and SCA
Security scanners bury developers in findings. Use AI to triage SAST, secrets and dependency alerts and write fixes developers trust, without auto-suppressing…
6 ALCs
CYB-201Executive
Software Supply Chain: SBOMs, VEX and Component Monitoring in Practice
Customers and regulators are starting to ask for SBOMs. Generate them, ingest your vendors', and use VEX to know what's really exposed.
3 ALCs CTTP
CYB-210Executive
Threat Intelligence for Risk Decisions
Threat intelligence is useless if it doesn't change a decision. Turn breach and vulnerability news into risk register changes and vendor actions.
3 ALCs
CYB-220Practitioner
Vulnerability Management Governance: SLAs, Exceptions and Evidence
Vulnerability SLAs only work if exceptions expire. Set remediation deadlines engineering can meet, manage exceptions, and have the evidence ready when auditors…
2 ALCs
CYB-230Practitioner
Incident and Breach Readiness: Tabletop to Regulator
The first hours of an incident decide how the regulator sees you. This course takes you from a tabletop exercise to the decisions, logs and notices a real…
3 ALCs CDTP
CYB-240Practitioner
Access Reviews That Pass Audit
Access reviews fail audits for the same few reasons every year. Get the population right, collect real reviewer decisions and prove revoked access is gone.
2 ALCs
CYB-250Practitioner
Cyber Insurance Applications and Attestations
Cyber insurance applications ask yes-or-no questions with big consequences. Answer them honestly with evidence, and find the gaps before the insurer does.
1.5 ALCs