Professional ⚖️ Governance & Risk 💻 Online

GRC &
IAM

Governance, Risk & Compliance — Identity & Access Management

The most in-demand non-technical cybersecurity skills in the industry. This programme prepares you to lead governance frameworks, manage organisational risk, ensure compliance, and control who accesses what across the enterprise. Ideal for professionals bridging the gap between business and security — or moving into senior security roles.

⏱

8 Weeks

Duration

📚

24 Modules

Curriculum

🎯

Intermediate

Level

🌐

Online

Format

💬 Enquire on WhatsApp View Full Details

⚖️

GRC & IAM

Governance, Risk, Compliance & Identity

⏱ 8 Weeks

📚 24 Modules

🎯 Intermediate Level

🌐 100% Online

👥 Instructor-Led

🏆 Certificate Included

📋 Real-World Case Studies

💬 Enquire on WhatsApp

A real person will respond and guide you through enrolment

Outcomes

What You Will Learn

✅ Develop and implement information security governance frameworks aligned with NIST, ISO 27001, and COBIT

✅ Conduct enterprise risk assessments and build risk treatment plans

✅ Navigate compliance requirements including GDPR, PCI-DSS, and industry regulations

✅ Write and enforce security policies, standards, and procedures

✅ Design and manage identity and access management systems across enterprise environments

✅ Implement privileged access management, MFA, and zero-trust access controls

✅ Conduct internal audits and communicate security risk to leadership

✅ Bridge the gap between technical security teams and business stakeholders

Audience

Who Is This For?

✅ This course is for you if...

You work in compliance, risk, audit, or IT management
You're a security professional wanting to move into governance roles
You need to understand frameworks like ISO 27001, NIST, or GDPR
You want to lead or manage an enterprise IAM programme
You struggle to communicate security risk to non-technical leadership
You're preparing for CISA, CRISC, or similar governance certifications

❌ This course is NOT for you if...

You want a purely hands-on technical hacking course
You're a complete beginner with no IT or business experience
You're not interested in policy, process, or organisational security
You want a narrow, single-skill programme

Curriculum

Course Modules

An 8-week structured programme covering GRC and IAM in full — with real-world case studies and practical application throughout.

Part 1 — Governance, Risk & Compliance

01 Introduction to GRC & Security Governance ›

What GRC means in practice, the role of governance in security strategy, security governance structures, roles and responsibilities, and aligning security with business objectives.

02 Security Frameworks — NIST, ISO 27001 & COBIT ›

Deep dive into the NIST Cybersecurity Framework, ISO 27001 implementation, COBIT for IT governance, and how to select and apply the right framework for your organisation.

03 Enterprise Risk Management ›

Risk identification, assessment methodologies, risk appetite and tolerance, risk treatment strategies, risk registers, and presenting risk to executive leadership and boards.

04 Compliance — GDPR, PCI-DSS & Regulatory Frameworks ›

Understanding major compliance frameworks, data protection regulations, building compliance programmes, audit readiness, and managing relationships with regulators.

05 Policy Development & Security Documentation ›

Writing effective security policies, standards, procedures, and guidelines. Policy lifecycle management, exception handling, and communicating policies across the organisation.

06 Internal Audits & Security Assessments ›

Planning and conducting internal security audits, gap analysis against frameworks, assessment reporting, findings presentation, and continuous improvement processes.

Part 2 — Identity & Access Management

07 IAM Fundamentals & Architecture ›

Core IAM concepts, identity lifecycle management, authentication vs authorisation, directory services, and designing IAM architecture for enterprise environments.

08 Authentication, MFA & Zero Trust ›

Authentication methods, multi-factor authentication implementation, SSO, federated identity, and applying zero-trust principles to access management across hybrid environments.

09 Privileged Access Management (PAM) ›

Managing privileged accounts, just-in-time access, PAM tools and platforms, securing service accounts, and preventing privilege escalation and lateral movement.

10 Role-Based Access Control & Access Reviews ›

Designing RBAC and ABAC models, least privilege principles, access provisioning and de-provisioning, user access reviews, and segregation of duties enforcement.

11 Cloud IAM & Microsoft Entra ID ›

Managing identity in cloud environments, Microsoft Entra ID (Azure AD), AWS IAM, conditional access policies, and securing cloud-native identity infrastructure.

12 GRC + IAM in Practice — Capstone & Career Readiness ›

End-to-end GRC + IAM scenario exercise, building a governance programme from scratch, career pathways in GRC and IAM, interview preparation, and next certification guidance.

Prerequisites

Requirements

Basic understanding of IT systems and business processes
Experience in IT, compliance, audit, or management (recommended)
A laptop or desktop with reliable internet connection
Willingness to commit 8–10 hours per week
No advanced technical skills required — business acumen is an asset

You Will Get

What's Included

🎓 Certificate of Completion
📚 Full GRC & IAM study materials
👨‍🏫 Live instructor-led sessions
📋 Real-world case studies & templates
📝 Policy and risk assessment templates
💬 Access to learner community
🔁 Lifetime access to course materials
🎯 Guidance toward CISA, CRISC & related certs

Your Guide

Meet Your Instructor

👤

RANJAN RAJA

Cybersecurity Instructor | Ethical Hacker | Information Security Professional

With over a decade of experience in the cybersecurity domain, I am a passionate Cybersecurity Instructor and Certified Ethical Hacker (CEH). My expertise spans Ethical Hacking, Cybersecurity, Penetration Testing, Network Security, and Digital Forensics. Having trained more than 200 sessions for students and professionals alike, I take pride in empowering the next generation of security professionals. I hold a Master of Technology degree and top-tier certifications in cybersecurity, including CISSP, CISM, CISA, and Security+. My professional experience includes working on Vulnerability Assessments, Cyber Crime Investigations, Server Administration, and Network Security Design and Implementation. I also collaborate with Simplilearn and Rita Africa, expanding my footprint in the global cybersecurity landscape. Approach is research-driven and practical, blending theoretical knowledge with hands-on experience. I'm passionate about continuous learning and keeping up with the latest trends in Cybersecurity and Cloud Security.

GRC Frameworks ISO 27001 Risk Management IAM Architecture Zero Trust Compliance

Ready to Lead
Security from the Top?

Take the first step. Chat with us on WhatsApp and we'll guide you through everything — from entry requirements to your first lesson.

💬 Start on WhatsApp

✅ No pressure ✅ Real person responds ✅ Fast reply

GRC &IAM