The course is designed for people with no prior IT experience who are interested in a career change to cyber security. However it’s also suitable for:

• IT professionals seeking to specialise in GRC.

• Security professionals who want to expand their knowledge of GRC frameworks and best practices.

• Individuals working in IT audit, risk management, or compliance who want to further develop their skills.

• Anyone interested in gaining a comprehensive understanding of GRC and its role in cybersecurity.

The ISACA IT Audit Fundamentals course equips you with the foundational knowledge to launch your IT audit career. Here's what you can expect to learn:

Core IT Audit Concepts:
Grasp the fundamentals of IT auditing, including its role, scope, and the importance of conducting these audits.

Controls & Risk Management:
Understand how controls work to mitigate risks and how to effectively assess and manage them in an IT environment.

The IT Audit Process:
Gain insight into the different stages of an IT audit, from planning and fieldwork to reporting and follow-up.

IT Infrastructure & Components:
Deepen your understanding of key IT components like networks, operating systems, and emerging technologies (AI, blockchain) to effectively audit them.

Specific Audit Areas:
Learn how to tailor your audit approach for specific areas like IT governance, network security, and application controls.

This course provides a solid base for understanding how IT audits are conducted and the key areas they focus on. It positions you well for entry-level IT audit roles and prepares you for further certifications like the CISA.

The ISACA IT Risk Fundamentals course equips you with the essential skills to navigate the ever-present world of IT risk. Here's a breakdown of what you'll learn:

Demystifying IT Risk:
Gain a solid understanding of IT risk: what it is, different types, and how it can impact your organisation.

Risk Management Framework:
Learn industry-standard frameworks for identifying, assessing, and mitigating IT risks effectively.

Risk Assessment & Analysis:
Develop the skills to pinpoint potential threats, analyse their severity, and prioritise them for action.

Risk Response Strategies:
Explore various response strategies for different IT risks, including avoidance, mitigation, transference, and acceptance.

Communication & Reporting: Master the art of communicating IT risks clearly and concisely to stakeholders at all levels.

By completing this course, you'll be well-equipped to contribute to a strong cybersecurity posture within your organization. You'll understand how to identify and manage IT risks, making you a valuable asset in today's ever-evolving threat landscape.

There is no experience prerequisite. This makes it achievable for those new to the field.

Governance, Risk, and Compliance (GRC) is a framework that helps organizations manage three key areas:

Governance: This refers to the policies, procedures, and leadership structures that an organization puts in place to achieve its goals. In cybersecurity, this translates to how decisions are made about IT security, who is responsible for different aspects of security, and how well these policies are communicated and enforced.

Risk: This refers to the potential for harm that can be caused by a cyberattack. A GRC program helps organizations identify and assess these risks, such as data breaches, malware infections, or system outages.

Compliance: This refers to the organization's adherence to relevant laws and regulations. Many regulations require organizations to protect sensitive data, and a GRC program helps ensure the organization meets these compliance requirements.