Autoplay
Autocomplete
Previous Lecture
Complete and Continue
Certified in Governance Risk Management & Compliance (CGRC) Part 2
Module 1: Risk Management & Governance
M.1.1.1 Agenda (0:49)
M.1.1.2 Introduction to Risk & Definitions (6:24)
M.1.1.3 IT Risk & IT Risk Categories (2:18)
M.1.1.4 Risk Management & Risk Management Considerations (5:40)
M.1.1.5 Risk Management Principles (3:22)
M.1.1.6 RM Framework, RM Process, RM Approach (11:15)
M.1.1.7 Risk Assessment & Risk Identification (10:49)
M.1.1.8 Risk Analysis & Risk Evaluation (6:02)
M.1.1.9 Risk Treatment (4:58)
M.1.1.10 Monitoring & Review (1:36)
M.1.1.11 Residual Risk (1:36)
M.1.1.12 NIST Cybersecurity Framework (10:12)
M.1.1.13 Cost Benefit Analysis (1:18)
M.1.1.14 Governance (2:47)
M.1.1.15 CISO & CISO's Responsibilities (1:28)
M.1.1.16 Policies, Procedures & Information Security Strategy (10:08)
M.1.1.17 Security Awareness (10:42)
M.1.1 Risk Management & Governance (PDF)
Risk Management Quiz
Test Your Learning
Module 2: Information Security Management System (ISMS)
M.2.1.1 Agenda (1:33)
M.2.1.2 Introduction to ISMS (1:55)
M.2.1.3 Need for an ISMS and its Benefits (2:32)
M.2.1.4 ISO 27001 (6:57)
M2_Section1_5_Understanding Controls (3:45)
M.2.1.6. Introduction to ISO 27001:2013 standard (2:38)
M.2.1.7 Understanding the Structure of the Standard (3:13)
M.2.1.8 ISO 27001:2013 Domains (2:31)
M.2.1.9 Overview of Controls (9:00)
M.2.1.10 Control Objective-5 (9:22)
M.2.1.11 Control Objective-6 (12:50)
M.2.1.12 Control Objective-7 (8:46)
M.2.1.13 Control Objective-8 (18:47)
M.2.1.14 Control Objective-9 (18:55)
M.2.1.15 Control Objective-10 (5:45)
M.2.1.16 Control Objective-11 (15:11)
M.2.1.17 Control Objective-12 (18:46)
M.2.1.18 Control Objective-13 (8:53)
M.2.1.19 Control Objective-14 (18:01)
M.2.1.20 Control Objective-15 (9:03)
M.2.1.21 Control Objective-16 (8:35)
M.2.1.22 Control Objective-17 (5:37)
M.2.1.23 Control Objective-18 (10:17)
M.2.1.24 Overview of ISMS implementation (6:02)
M.2.1.25 Risk Assessment & Treatment (4:35)
M.2.1.26 ISMS Documentation Review (4:13)
M.2.1.27 ISMS Training (5:06)
M.2.1.28 ISMS Documentation (4:22)
M.2.1.29 Definitions (1:12)
M.2.1.30 Audit, Certification, IAF, LI, LA (7:47)
M.2.1.31 Audit Programme (4:03)
M.2.1.32 Audit Activities (3:03)
M.2.1.33 Audit Plan & Audit Checklist (2:13)
M.2.1.34 Audit Findings & Audit Report (1:03)
M.2.1.35 Opportunity For Improvement (OFI) & Non-Conformity (NC) (0:43)
M.2.1 ISMS (PDF)
ISMS Quiz
Test Your Learning
Module 3: General Data Protection Regulation (GDPR)
M.3.1.1. Agenda (2:03)
M.3.1.2. Introduction to GDPR (3:29)
M.3.1.3. Subject Matter, Objectives, Scope (5:04)
M.3.1.4. Definitions (Part I) (4:58)
M.3.1.5. Definitions (Part II) (4:51)
M.3.1.6 GDPR Structure & Applicability (1:16)
M.3.1.7 GDPR Principles-1 (8:03)
M.3.1.8 GDPR Principles - 2 (3:40)
M.3.1.9 GDPR Principles-3 (9:03)
M.3.1.10 Data Subject Rights - 1 (7:11)
M.3.1.11 Data Subject Rights - 2 (3:24)
M.3.1.12 Data Subject Rights-3 (3:32)
M.3.1.13 Data Subject Rights-4 (4:44)
M.3.1.14 Responsibility of Controller & Data Protection by Design & Default (3:59)
M.3.1.15 Data Protection Impact Assessment (DPIA) (6:43)
M.3.1.16 Data Protection Officer (DPO) (4:20)
M.3.1.17 Codes of Conduct (2:26)
M.3.1.18 Certification (3:06)
M.3.1.19 Transfer of Personal Data to Third Country (5:23)
M.3.1.20 General Principles for Transfers (7:56)
M.3.1.21 Personal Data Beach, Liabilities & Penalties (2:43)
M.3.1.22 Steps to comply with GDPR, Documents Required for GDPR & GDPR compliance (5:54)
M.3.1 GDPR (PDF)
GDPR Quiz
Test Your Learning
Module 3, Part 2: Health Information Portability And Accountability Act (HIPAA)
M.3.2.1 Agenda (0:46)
M.3.2.2 Introduction to HIPAA (2:17)
M.3.2.3 Who is Covered by Privacy Rule? (9:33)
M.3.2.4 Protected Health Information (PHI) and Electronic Protected Health Information (ePHI) (5:12)
M.3.2.5 Difference Between Protected Health Information and Consumer Health Information (1:24)
M.3.2.6 Health Information Exchange (HIE) & eHealth exchange (4:38)
M.3.2.7 Administrative Safeguards (2:20)
M.3.2.8 Physical Safeguards (1:48)
M.3.2.9 Technical Safeguards (2:05)
M.3.2.10 HIPAA Violations (2:45)
M.3.2.11 HIPAA Dos and Don'ts (2:16)
M.3.2.12 Breach and Data Breaches (7:05)
M.3.2.13 Documentation and HIPAA Requirements (2:39)
M.3.2 HIPAA (PDF)
HIPAA Quiz
Test Your Learning
Module 4: Payment Card Security Data Security Standards (PCI DSS)
M.4.1.1 Agenda (2:28)
M.4.1.2 Introduction to PCI DSS (2:50)
M.4.1.3 Common terms related to PCI DSS (1:12)
M.4.1.4 Entities Involved in Payment Card Transactions (2:10)
M.4.1.5 Some more details about Payment Card (23:14)
M.4.1.6 Consequences of Compromised Payment Card Data (1:02)
M.4.1.7 Need and Application of PCI DSS (2:59)
M.4.1.8 Steps for Adhering to PCI DSS (0:51)
M.4.1.9 Scoping & Network Segmentation (7:09)
M.4.1.10 Compliance Requirements for PCI DSS (18:52)
M.4.1.11 Levels of PCI Compliance (2:02)
M.4.1.12 Do’s and Don’ts for Payment Card Security (6:02)
M.4.1.13 SAQ and QSA (5:09)
M.4.1.14 PA-DSS and its Requirements (16:46)
M.4.1.15 Pin Transaction Security (PTS) (1:36)
M.4.1.16 Payment Card Data Breaches and Myths (4:53)
M.4.1.17 ROC, AOC & COC (20:48)
M.4.1.18 PA QSA, QPA & ASV (3:38)
M.4.1.19 Payment Card Attacks (5:23)
M.4.1 PCI DSS (PDF)
PCI DSS Quiz
Test Your Learning
Module 5: Business Continuity Management System (BCM)
M.5.1.1 Agenda (2:00)
M.5.1.2 Introduction to BCM (5:43)
M.5.1.3 Business Continuity Planning (3:49)
M.5.1.4 Issues in BCM (1:52)
M.5.1.5 Risk Control Options (3:50)
M.5.1.6 Disaster Recovery Plan (5:20)
M.5.1.7 Maintenance of BCM Plan (3:32)
M.5.1.8 Business Impact Analysis (5:59)
M.5.1.9 Backup Sites (8:24)
M.5.1.10 Backup Considerations and Backup Types (9:25)
M.5.1.11 ISO 22301 and ISO 22301 Requirements (11:36)
M.5.1.12 Mandatory Documents of ISO 22301 and Benefits (2:34)
M.5.1 BCM (PDF)
BCM Quiz
Test Your Learning
Module 6: Information Technology Infrastructure Library (ITIL)
M.6.1.1 Agenda (1:15)
M.6.1.2 Introduction to ITIL (2:32)
M.6.1.3 ITIL History, Versions and Objectives (4:46)
M.6.1.4 Definitions-1 (8:49)
M.6.1.5 Definitions-2 (6:00)
M.6.1.6 Definitions-3 (2:15)
M.6.1.7 Service & Process (5:46)
M.6.1.8 Service Design - Service Level Management (4:06)
M.6.1.9 Service Design - Availability & Capacity Management (4:01)
M.6.1.10 Service Design - Information Security & IT Service Continuity Management (3:47)
M.6.1.11 Service Design - Supplier Management (2:18)
M.6.1.12 Service Transition - Change Management (10:06)
M.6.1.13 Service Operation - Incident & Event Management (3:47)
M.6.1.14 Service Operation - Demand & Patch Management (3:55)
M.6.1.15 Service Operation - Problem Management (2:50)
M.6.1.16 Service Operation - Request & Access Management (2:33)
M.6.1.17 Functions - Service Desk (6:11)
M.6.1.18 Functions - Technical Management (3:10)
M.6.1.19 Functions - Application Management (1:32)
M.6.1.20 Functions - IT Operation Management (6:04)
M.6.1 ITIL (PDF)
ITIL Quiz
Test Your Learning
Module 7, Part 1: IT Act
M.7.1.1 Agenda (0:31)
M.7.1.2 Introduction to Cyber Crime & Information Technology Act (5:29)
M.7.1.3 Definitions (5:37)
M.7.1.4 Offenses (4:08)
M.7.1.5 Offenses (8:18)
M.7.1.6 Case Studies (12:04)
M.7.1.7 Other Offenses (5:00)
M.7.1 IT Act (PDF)
IT ACT Quiz
Test Your Learning
Module 7, Part 2: SOX Act
M.7.2.1 Introduction to Sarbanes Oxley Act (5:28)
M.7.2.2 11 Titles of Sarbanes Oxley Act (5:29)
M.7.2.3 Sections of SOX (4:21)
M.7.2.4 Audit & Penalties (1:50)
M.7.2 SOX Act (PDF)
SOX Act Quiz
Test Your Learning
M.3.2.4 Protected Health Information (PHI) and Electronic Protected Health Information (ePHI)
Lecture content locked
If you're already enrolled,
you'll need to login
.
Enroll in Course to Unlock