OpenCourser brand icon
Sign in
We may earn an affiliate commission when you visit our partners.
Course image
Course image
Coursera logo

Governance and Strategy

InfoSec Institute Instructor and infosec instructor

This course is an introduction and an overview to the basic principles of cybersecurity Governance and Strategy. It provides guidance on determining information security objectives and how to

measure progress toward achieving them. It is an exposition on the rationale and necessity for

senior management to integrate information security into overall organizational governance at

the highest levels.

Enroll now

What's inside

Syllabus

Introduction to IS Governance (474)
IS Roles and Responsibilities (475)
Information Security Strategy (478)
Read more
IS Resources and Constraints (480)
Implementation Action Plan (484)
Strategy and Implementation (488)
Risk Assessment (494)
Asset Classification and Operational Considerations (496)
Security Program Architecture (502)
Security Program Activities (508)
Effective Incident Management (512)
IR, BC and DR Planning and Procedures (513)
Risk Management (413)

Good to know

Know what's good
, what to watch for
, and possible dealbreakers
Explores principles of cybersecurity governance and strategy, which are essential for managing information security in organizations
Provides guidance on determining information security objectives and measuring progress towards achieving them, which is crucial for effective security management
Emphasizes the need for senior management to integrate information security into the highest levels of organizational governance, which is essential for organizations to take ownership of their security posture
Covers risk assessment, asset classification, and operational considerations, which are foundational elements for developing effective security programs
Addresses effective incident management and IR, BC, and DR planning and procedures, which are critical for organizations to respond to and recover from security incidents
Taught by InfoSec Institute Instructor, who are recognized for their expertise in cybersecurity governance and strategy

Save this course

Save Governance and Strategy to your list so you can find it easily later:
Save

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Governance and Strategy with these activities:
Review the fundamentals of Cybersecurity
Review the basic principles of cybersecurity as they will be the foundation of the materials learned in this course.
Browse courses on Cybersecurity
Show steps
  • Read through online blog posts, articles, and documentation on the fundamentals of cybersecurity and the key concepts that go along with this topic.
  • Summarize what you learned into a 500-word summary that will become a study guide for you to reference through the course.
Review Risk Assessment Basics
Review the basics of risk assessment to prepare for the course materials on risk assessment.
Browse courses on Risk Assessment
Show steps
  • Read assigned course materials on risk assessment basics
  • Complete assigned quizzes on risk assessment basics
  • Review notes and examples from previous courses on risk assessment
Review Security Fundamentals
Refresh your understanding of security fundamentals to strengthen your comprehension of key concepts in cybersecurity governance and strategy.
Show steps
  • Revise key cybersecurity concepts, such as risk management, threat analysis, and incident response.
  • Review common security frameworks and standards, such as ISO 27001 and NIST Cybersecurity Framework.
Nine other activities
Expand to see all activities and additional details
Show all 12 activities
Review Enterprise Architecture
Review core concepts in Enterprise Architecture to prepare for the course content.
Browse courses on Enterprise Architecture
Show steps
  • Read books and articles to refresh core concepts.
  • Take practice quizzes to test knowledge.
Explore Best Practices for Cybersecurity Governance
Enhance your knowledge of best practices in cybersecurity governance by following guided tutorials and exploring real-world case studies.
Browse courses on Cybersecurity Governance
Show steps
  • Follow online tutorials on cybersecurity governance frameworks and standards.
  • Analyze case studies of effective cybersecurity governance implementations.
  • Identify key principles and best practices for cybersecurity governance.
Create a Cybersecurity Strategy Outline
Develop a strategy outline to reinforce course content and improve strategic thinking.
Show steps
  • Research industry best practices for cybersecurity strategy.
  • Follow tutorials on how to create a cybersecurity strategy.
  • Create a rough draft of your strategy outline.
  • Get feedback on your outline from a mentor or peer.
Practice Cybersecurity Governance Policies
Complete practice drills on cybersecurity governance policies to cement skills and apply knowledge.
Browse courses on Cybersecurity Governance
Show steps
  • Complete practice drills provided by the course instructor
  • Complete practice drills found online
  • Create your own practice drills and quiz yourself
Simulate Cybersecurity Governance Scenarios
Develop your decision-making skills by simulating real-world cybersecurity governance scenarios and making strategic choices.
Browse courses on Cybersecurity Governance
Show steps
  • Participate in simulated cybersecurity governance exercises.
  • Analyze simulated scenarios and make decisions based on best practices.
  • Evaluate the outcomes of your decisions and identify areas for improvement.
Develop a Cybersecurity Governance Strategy
Create a cybersecurity governance strategy to apply knowledge and deepen understanding of the course material.
Browse courses on Cybersecurity Strategy
Show steps
  • Research and gather information on cybersecurity governance strategies
  • Develop a draft of your cybersecurity governance strategy
  • Refine and finalize your cybersecurity governance strategy
Attend a Cybersecurity Governance Workshop
Expand your knowledge and network with industry professionals by attending a cybersecurity governance workshop focused on current trends and best practices.
Browse courses on Cybersecurity Governance
Show steps
  • Research and identify relevant cybersecurity governance workshops.
  • Register and attend the workshop.
  • Actively participate in discussions and ask questions.
Develop a Policy Framework for Cybersecurity Governance
Develop a policy framework to demonstrate understanding of cybersecurity governance best practices.
Show steps
  • Research cybersecurity governance frameworks.
  • Identify the specific policies needed for your organization.
  • Draft the policy framework.
  • Get feedback on your policy framework from a mentor or peer.
  • Implement the policy framework in your organization.
Develop a Cybersecurity Governance Plan
Solidify your understanding of cybersecurity governance by creating a comprehensive plan that outlines key objectives and strategies for your organization.
Browse courses on Cybersecurity Governance
Show steps
  • Identify the organization's security objectives and risk tolerance.
  • Develop a cybersecurity governance framework that aligns with industry best practices.
  • Outline strategies for implementing and monitoring the cybersecurity governance plan.

Career center

Learners who complete Governance and Strategy will develop knowledge and skills that may be useful to these careers:
Information Security Analyst
Information Security Analysts plan and carry out security measures to protect an organization's computer networks and systems, advising management to ensure that its approach to managing risks is aligned with best practices and regulations. *Governance and Strategy* can help build a foundation in information security strategy, governance, and risk management.
See salaries and explore the career path for Information Security Analyst
Compliance Manager
Compliance Managers oversee a company's adherence to industry regulations and internal policies. They help organizations establish and maintain compliance programs, policies, and procedures. *Governance and Strategy* can be useful to those in Compliance Management, as it provides an overview of cybersecurity governance and strategy, as well as the rationale for senior management integration of information security into organizational governance.
See salaries and explore the career path for Compliance Manager
Cybersecurity Risk Analyst
Cybersecurity Risk Analysts help organizations identify and mitigate cyber risks. They assess the likelihood and impact of threats, and develop plans to address them. *Governance and Strategy* may be useful for those in this role, as it helps build a foundation in cybersecurity governance, strategy, and risk management.
See salaries and explore the career path for Cybersecurity Risk Analyst
Security Manager
Security Managers manage and oversee the security of an organization's computer systems and networks. They develop and implement policies, procedures, and practices to protect against threats and vulnerabilities. *Governance and Strategy* can be useful to those in this role, as it helps build a foundation in cybersecurity governance, strategy, and risk management.
See salaries and explore the career path for Security Manager
Cybersecurity Consultant
Cybersecurity Consultants advise clients on how to protect their computer networks and systems from attack, and help them develop and implement security plans. *Governance and Strategy* may be useful for those in this role, as it helps build a foundation in cybersecurity governance and strategy.
See salaries and explore the career path for Cybersecurity Consultant
Cybersecurity Engineer
Cybersecurity Engineers design, implement, and maintain an organization's cybersecurity infrastructure. They work to ensure that the organization's systems and networks are secure from threats and vulnerabilities. *Governance and Strategy* may be useful for those in this role, as it helps build a foundation in cybersecurity governance and strategy.
See salaries and explore the career path for Cybersecurity Engineer
Incident Responder
Incident Responders respond to and investigate cybersecurity incidents. They analyze the nature and scope of the incident, and work to contain and resolve it. *Governance and Strategy* may be useful for those in this role, as it helps build a foundation in cybersecurity governance and strategy.
See salaries and explore the career path for Incident Responder
IT Auditor
IT Auditors assess the effectiveness of an organization's information security controls. They provide assurance that the organization's systems and networks are secure from threats and vulnerabilities. *Governance and Strategy* may be useful to those in this role, as it provides an overview of cybersecurity governance, strategy, and risk management.
See salaries and explore the career path for IT Auditor
Cybersecurity Architect
Cybersecurity Architects design, build, and maintain an organization's cybersecurity infrastructure. They work to ensure that the organization's systems and networks are secure from threats and vulnerabilities. *Governance and Strategy* may be useful for those in this role, as it helps build a foundation in cybersecurity governance and strategy.
See salaries and explore the career path for Cybersecurity Architect
Cybersecurity Analyst
Cybersecurity Analysts monitor and analyze an organization's cybersecurity systems and networks for threats and vulnerabilities. They work to identify, investigate, and resolve security incidents. *Governance and Strategy* may be useful for those in this role, as it helps build a foundation in cybersecurity governance and strategy.
See salaries and explore the career path for Cybersecurity Analyst
Data Protection Officer
Data Protection Officers oversee an organization's compliance with data protection laws and regulations. They help organizations protect the privacy and security of personal data. *Governance and Strategy* provides an overview of cybersecurity governance, strategy, and risk management, which may be useful to those in this role.
See salaries and explore the career path for Data Protection Officer
Risk Analyst
Risk Analysts identify, assess, and manage risks to an organization. They work to develop and implement strategies to mitigate risks and protect the organization from harm. *Governance and Strategy* provides an overview of cybersecurity governance, strategy, and risk management, which may be useful to those in this role.
See salaries and explore the career path for Risk Analyst
Compliance Analyst
Compliance Analysts help organizations ensure that they comply with industry regulations and internal policies. They review policies, procedures, and practices to identify and address compliance risks. *Governance and Strategy* can be useful to those in Compliance Analysis, as it provides an overview of cybersecurity governance and strategy, as well as the rationale for senior management integration of information security into organizational governance.
See salaries and explore the career path for Compliance Analyst
Network Security Engineer
Network Security Engineers design, implement, and maintain an organization's network security infrastructure. They work to ensure that the organization's networks are secure from threats and vulnerabilities. *Governance and Strategy* may be useful for those in this role, as it helps build a foundation in cybersecurity governance and strategy.
See salaries and explore the career path for Network Security Engineer
Information Security Officer
Information Security Officers are responsible for managing an organization's information security program. They work to develop and implement policies, procedures, and practices to protect the organization from threats and vulnerabilities. *Governance and Strategy* can help build a foundation in cybersecurity governance and strategy, which may be useful to those in this role.
See salaries and explore the career path for Information Security Officer

Reading list

We've selected 11 books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in Governance and Strategy.
Cover image
Cybersecurity Framework Manufacturing Profile
Save
The NIST Cybersecurity Framework voluntary framework that provides guidance on how to protect information systems and assets. It can be used by organizations of all sizes and industries.
Cybersecurity Framework Manufacturing Profile Low...
Paperback
$$$
Cybersecurity Framework Manufacturing Profile Low...
Paperback
$$$
Cybersecurity Framework Manufacturing Profile Low...
Paperback
$$
Cybersecurity Framework Manufacturing Profile Low...
Kindle Edition
$$
Cybersecurity Framework Manufacturing Profile: NIST...
Kindle Edition
$
Cover image
Applied Cryptography
Save
Provides a comprehensive overview of applied cryptography. It covers all aspects of applied cryptography, from basic concepts to advanced topics.
Applied Cryptography: Protocols, Algorithms and...
Hardcover
$$
Applied Cryptography: Protocols, Algorithms, and...
Hardcover
$$$$
Applied Cryptography: Protocols, Algorithms, and...
Paperback
$$
Applied Cryptography: Protocols, Algorithms, and...
Paperback
$$$$
Applied Cryptography: Protocols, Algorithms and...
Kindle Edition
$$
Cover image
Cryptography and Network Security: Principles and...
Save
Provides a comprehensive overview of cryptography and network security. It covers all aspects of cryptography and network security, from basic concepts to advanced topics.
Cryptography and Network Security: Principles and...
Paperback
$$$
Cover image
Ethical Hacking and Web Hacking Handbook and Study...
Save
Provides a comprehensive overview of web application security. It covers all aspects of web application security, from basic concepts to advanced topics.
Ethical Hacking and Web Hacking Handbook and Study...
Paperback
Check
Ethical Hacking and Web Hacking Handbook and Study...
Kindle Edition
Check
Security Engineering and Tobias on Locks Two-Book...
Save
Provides a guide to building dependable distributed systems. It covers all aspects of security engineering, from threat modeling and risk assessment to security testing and incident response.
Security Engineering and Tobias on Locks Two-Book...
Hardcover
$$$$
Cover image
Introduction to Machine Learning with Applications...
Save
Provides a comprehensive overview of information security. It covers all aspects of information security, from basic concepts to advanced topics.
Introduction to Machine Learning with Applications...
Hardcover
$$$
Introduction to Machine Learning with Applications...
Kindle Edition
$$$
Cover image
Network Security
Save
Provides a comprehensive overview of network security. It covers all aspects of network security, from basic concepts to advanced topics.
Network Security
Paperback
Check
Network Security
Kindle Edition
Check
Management of Information Security + Mindtap...
Save
Provides a practical approach to information security governance, including the development and implementation of an effective information security governance framework. It also discusses the roles and responsibilities of the board of directors, senior management, and IT management in information security governance.
Bundle: Management of Information Security, 5th +...
Product Bundle
$$$$
Cover image
Hacking: The Art of Exploitation, 2nd Edition
Save
Provides a comprehensive overview of hacking. It covers all aspects of hacking, from basic concepts to advanced topics.
Hacking: The Art of Exploitation, 2nd Edition
Paperback
$$
Hacking: The Art of Exploitation, 2nd Edition
Kindle Edition
$$
Cover image
Computer Security
Save
Provides a comprehensive overview of computer security. It covers all aspects of computer security, from basic concepts to advanced topics.
Computer Security
Paperback
Check
Computer Security
Kindle Edition
Check
Cover image
LBJ's Neglected Legacy
Save
Provides a comprehensive overview of the governance of enterprise IT, including the roles and responsibilities of the board of directors, senior management, and IT management. It also discusses the development and implementation of an effective IT governance framework.
LBJ's Neglected Legacy: How Lyndon Johnson Reshaped...
Paperback
$$
LBJ's Neglected Legacy: How Lyndon Johnson Reshaped...
Kindle Edition
$

Share

Help others find this course page by sharing it with your friends and followers:
Facebook
LinkedIn
Reddit
X
Link
Email

Similar courses

Here are nine courses similar to Governance and Strategy.
Information Security Governance for CISM®
Information and Cyber Security Governance, Risk and...
Information and Cyber Security Literacy: Governance, Risk...
Assessment/Audit of Security and Privacy Controls for CGRC
Security and Risk Management: Concepts and Principles for...
Selection and Approval of Security and Privacy Controls...
Scope of the Information System for CGRC
Implementation of Security and Privacy Controls for CGRC
Leadership
Course image
Via
Coursera
Institution
Infosec
Instructors
InfoSec Institute Instructor
infosec instructor
Language
English
Transcripts
Español Français Português Deutsch Italiano 中文 العربية 한국어 日本語 हिंदी Nederlands Svenska Pусский Türkçe Polski Ελληνικά українська мова Bahasa Indonesia ไทย қазақша tiếng Việt
This course belongs to a collection called Cybersecurity Leadership and Management. It's comprised of two courses:
  1. Governance and Strategy (viewing)
  2. Management
Good to know
Explores principles of cybersecurity governance and strategy, which are essential for managing information security in organizations
Provides guidance on determining information security objectives and measuring progress towards achieving them, which is crucial for effective security management
Emphasizes the need for senior management to integrate information security into the highest levels of organizational governance, which is essential for organizations to take ownership of their security posture
Covers risk assessment, asset classification, and operational considerations, which are foundational elements for developing effective security programs
Addresses effective incident management and IR, BC, and DR planning and procedures, which are critical for organizations to respond to and recover from security incidents
Taught by InfoSec Institute Instructor, who are recognized for their expertise in cybersecurity governance and strategy
Share and help others discover this course.
Facebook LinkedIn X Reddit Link Email
Don't miss out
Enroll today to gain access to this course
Enroll in this course
Our mission

OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.

Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.

Find this site helpful? Tell a friend about us.

Affiliate disclosure

We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.

Your purchases help us maintain our catalog and keep our servers humming without ads.

Thank you for supporting OpenCourser.

© 2016 - 2024 OpenCourser