Module 1 · Concepts¶
Before you can govern security, weigh risk or manage compliance at Scaldimet, you need the four underlying ideas to be precise (not vague). This Module defines them carefully, using Scaldimet as the running example, and then connects them.
The four concepts are taught in conceptual order (cybersecurity, then governance, then risk, then compliance) because each leans on the one before. (The operational Modules later in the course put compliance before risk, for reasons Lesson 1.5 explains. Holding both orders in your head is itself part of understanding GRC.)
What you will be able to do¶
- Explain cybersecurity at the level a manager needs: what it protects and against what.
- Distinguish governance from management, and say what governance actually produces.
- State what risk is, write a proper risk statement, and tell risk apart from threat and vulnerability.
- Define compliance, and tell the difference between a law, a standard, a framework and a contract.
- Connect all four into the "GRC triptych", and explain why the conceptual and operational orderings differ.
Chapters in this Module¶
| Chapter | Title |
|---|---|
| 1.1 | What is Cybersecurity? |
| 1.2 | What is Governance? |
| 1.3 | What is Risk? |
| 1.4 | What is Compliance? |
| 1.5 | The GRC Triptych (how the three connect) |