Courses
Courses that leave you with real work done.
Each course is built around a task you do at work, like running a SOC 2, answering a breach, or putting AI to use safely. You finish with a working deliverable built on your own organization, whether you are a team of five or five thousand, and a certificate anyone can verify.
87courses
12domains
5credential paths
273ALCs to earn
7included with Associate Membership
The course mapEvery course, by domain. Pick a credential to light up the courses that count toward it.
Included with Associate MembershipPractitionerExecutive Practitioner
Concepts you hear but never learned Included
16 ten-minute lessons, included with Associate Membership. 0.25 ALC each, toward the Foundations Certificate. Open the series.
Bridge letterTPR · 10 minutes
CUECTPR · 10 minutes
Subservice organisation and carve-outTPR · 10 minutes
Global Privacy Control (GPC)PRV · 10 minutes
TCF and consent stringsPRV · 10 minutes
SBOM and VEXCYB · 10 minutes
Statement of ApplicabilityGRC · 10 minutes
ITGCAUD · 10 minutes
Legitimate interest and the balancing testPRV · 10 minutes
Article 28 processor termsPRV · 10 minutes
Business associate agreementPRV · 10 minutes
Risk acceptance and expiryRSK · 10 minutes
Type I versus Type IITPR · 10 minutes
Data processing agreement versus data protection addendumPRV · 10 minutes
Suppression listPRV · 10 minutes
Population and sampleAUD · 10 minutes
Risk Management
4 coursesRSK-201Practitioner
Risk Assessment as a Craft: Scoping, Scenarios and Judgment
Good risk assessment is judgment, not a spreadsheet. Scope an assessment, build realistic scenarios and write down assumptions others can challenge.
3 ALCs
RSK-210Executive
Quantifying Risk: From Heat Maps to Money
Heat maps can't tell you whether a control is worth the money. Estimate risk in dollars, with ranges you can defend.
3 ALCs
RSK-220Practitioner
Treatment, Acceptance and Exceptions That Expire
Accepted risks that never expire become permanent holes. Make every acceptance name an owner, a compensating control and an end date.
2.5 ALCs
RSK-230Executive
Risk Appetite, KRIs and the Board Conversation
Most appetite statements are too vague to guide a decision. Tie appetite to indicators and thresholds, and have a sharper risk conversation with the board.
2.5 ALCs