Overview

Google, IBM & Meta Certificates – 40% Off

One plan covers every Professional Certificate on Coursera.

In this advanced-level certificate course, you will learn to align security capabilities with business objectives by building strategic cybersecurity roadmaps. You'll develop skills to establish governance boards, draft enterprise-wide policies mapped to ISO 27001, and quantify cyber risk to inform decision-making. You'll map organizational controls to Zero Trust and NIST CSF frameworks using tools like Microsoft Purview Compliance Manager and open-source GRC platforms, tune security programs based on KPI dashboards, and drive role-based security awareness. You'll also leverage generative AI to define and implement AI risk and governance controls for the enterprise. This course is for security professionals with foundational knowledge of information security principles and introductory experience in project management or policy development. By the end of this course, you will be able to build strategic cybersecurity roadmaps aligned with business objectives, establish governance boards and draft enterprise-wide policies mapped to ISO 27001, map organizational controls to Zero Trust and NIST CSF frameworks using Microsoft Purview Compliance Manager and open-source GRC platforms, and apply generative AI to define and implement AI risk and governance controls. Some features of Microsoft Purview require a paid license or eligible tenant. Open-source and spreadsheet-based alternatives are available throughout the course.

Syllabus

Strategy & Governance: Build Cyber Roadmaps

This module covers the framework for translating technical security needs into business-aligned strategic roadmaps that integrate resilience objectives and secure C-suite approval.

Strategy & Governance: Run Governance Boards

Learn how to create, formalize, and run a Cyber Governance Board that establishes clear decision-making rights and accountability across the enterprise.

Risk and Policy: Draft Winning Policies

This module explores the lifecycle of a security policy, from drafting to executive ratification, ensuring all standards map back to legal and regulatory drivers like ISO 27001.

Risk and Policy: Quantify Cyber Risk Fast

Move beyond subjective risk matrices. Learn to use the FAIR methodology to quantify complex risks, such as software supply chain attacks, into dollar-value loss estimates to secure mitigation funding.

Compliance: Tune Security Programs

Discover how to use KPIs and security dashboards to evaluate program maturity, and learn strategies to pivot resources quickly when corrective actions are needed.

Compliance: Master Control Mapping

Master the technique of "test once, comply many" by cross-walking organizational controls across multiple frameworks to streamline audits and reduce fatigue.

Security Culture: Drive Security Culture

Move beyond annual compliance videos. Learn to design engaging, role-specific security training that measurably reduces risk behaviors.

Security Culture: Facilitate Arch Reviews

Learn the soft skills and procedural frameworks necessary to run effective architecture review boards, mediate conflicts between IT and Security, and document enforceable decisions.

GenAI Module: GenAI for Security Strategy

Generative AI presents both massive productivity gains and novel enterprise risks. In this module, you will learn to define business-aligned risk and governance controls for GenAI adoption, build reusable prompts to accelerate security strategy tasks, and integrate AI standards into enterprise policies and processes.

Project Module: Enterprise Risk Strategy

Synthesize your knowledge of governance, risk, and compliance to develop a strategic enterprise roadmap. You will apply risk-informed design principles to align business goals with architectural security requirements.