Module 02: Governance, Risk, and Compliance - Theory
📅 Date Started: 2026-05-03
📅 Date Completed: 2026-05-04
🎯 What I Learned:
- Governance frameworks: Policies, standards, guidelines, and procedures for organizational security
- Risk management lifecycle: Identification, assessment, impact analysis, tolerance, and response strategies
- Compliance requirements: Laws, regulations, and standards that govern cybersecurity practices
- Administrative controls: Creating control plans to ensure compliance and risk mitigation
- Documentation: Maintaining proper records for governance and audit purposes
💡 Key Takeaways:
- GRC provides the framework for aligning security with business objectives and legal requirements
- Risk management is about making informed decisions on what to protect and how
- Compliance is not optional—it’s a legal and ethical obligation
- Strong governance requires clear policies, documented procedures, and regular audits
🔗 Links/Resources:
📸 Screenshots:
(Screenshots captured )