We may earn an affiliate commission when you visit our partners.

Cyber Security

GRC Part 1 - Governance

Matt Bushby

In a digital-first world, cyber security is no longer the sole responsibility of IT—it’s a core business imperative. From compliance and risk governance to cyber resilience planning, organisations need leaders who can align security priorities with strategic goals, manage regulatory frameworks, and drive organisational change.

From Frameworks to Roadmaps: Architect the Future of Cyber Security

Developed by the Cyber Skills Academy at Macquarie University, ranked in the top 1% of universities globally and recognised as Australia’s leading cyber security school, this course equips you with the critical capabilities to design, implement, and lead enterprise-wide cyber security strategy.

You’ll gain real-world knowledge in:

• Understanding the global landscape of cyber security frameworks (e.g. NIST, ISO 27001, ISM, Five Safes).

• Designing and launching policy frameworks that align with organisational risk appetite and compliance obligations.

• Establishing governance structures, audit readiness, and cyber risk oversight mechanisms.

• Developing business-aligned cyber strategies and actionable roadmaps that respond to evolving threats.

• Executing threat modelling workshops, gap assessments, and value-driven implementation plans.

• Embedding change management, reporting progress, and articulating return on investment (ROI).

Where Strategy Meets Execution

Whether you're a business leader, compliance officer, or security professional, this course empowers you to translate complex cyber requirements into clear, actionable initiatives that protect your organisation and enable growth.

Get ready to lead the conversation, shape enterprise policy, and future-proof your organisation’s cyber resilience.

Enroll now

Or subscribe to Coursera Plus

And get unlimited access to Coursera

Two deals to help you save

Save money when you learn. Here are two deals and offers that may be relevant to this course.

All coupon codes, vouchers, and discounts are applied automatically unless otherwise noted.

Valid until December 2

Annual Subscription

Invest in your career growth and save. Start your annual subscription to Coursera Plus and access 10,000+ programs.

Valid until March 12, 2027

Save 40% Off 3 Months

Access thousands of top-rated learning programs with a Coursera Plus monthly subscription and take 40% off 3 months for a limited time.

What's inside

Syllabus

Cyber Security Frameworks

In today’s hyper-connected world, the question isn’t if your organisation will face a cyber threat, but when. As the threat landscape continues to evolve, prioritising cyber security has become a strategic necessity for every organisation, regardless of size or sector. This topic introduces the critical role that cyber security frameworks play in helping organisations respond to this challenge. You’ll explore why cyber resilience must sit at the heart of organisational strategy and how adopting recognised frameworks can mitigate risk, support compliance, and safeguard reputation. You’ll get to know the leading national and international frameworks such as NIST, ISO 27001, the Australian Government’s ISM, and CIS Benchmarks and examine how they guide the development of robust security policies and controls. We’ll also review the Five Safes Framework and how it supports data governance and information sharing. Whether you're new to governance or looking to refine your approach, this topic provides a critical first step in understanding how structured frameworks can be the cornerstone of a secure, compliant, and future-ready organisation.

Save this course

Create your own learning path. Save this course to your list so you can find it easily later.

Save

Career center

Learners who complete Cyber Security: GRC Part 1 - Governance will develop knowledge and skills that may be useful to these careers:

Cyber Security Governance Manager

A Cyber Security Governance Manager is crucial for establishing and maintaining the overarching structure that guides an organization's security posture. This role involves developing, enforcing, and monitoring policies, frameworks, and processes to ensure alignment with strategic goals and regulatory obligations. The Cyber Security GRC Part 1 Governance course is exceptionally well-suited for this path, directly equipping learners with the critical capabilities to design and implement enterprise-wide cyber security strategy. It delves into understanding global cyber security frameworks like NIST and ISO 27001, designing policy frameworks aligned with risk appetite, and establishing robust governance structures and audit readiness. This course provides the exact foundational knowledge needed to lead conversations, shape enterprise policy, and ensure an organization's cyber resilience, offering practical insights for securing informed decision-making across all levels.

See salaries and explore the career path for Cyber Security Governance Manager

Cyber Security Strategist

A Cyber Security Strategist develops and refines an organization's long-term approach to cyber security, aligning it with business goals and anticipating future threats. This role involves creating comprehensive roadmaps and initiatives to enhance the organization's defense posture and resilience. The Cyber Security GRC Part 1 Governance course provides ideal training for this career. It explicitly focuses on developing business-aligned cyber strategies and actionable roadmaps, starting from understanding organizational objectives and risk posture. Learners gain skills in assessing gaps, conducting threat modelling, and crafting plans that drive measurable progress and earn executive support. The course's emphasis on frameworks, policy design, and embedding change management helps build a foundation for translating complex cyber requirements into clear, strategic initiatives that protect and enable organizational growth, preparing learners to architect the future of cyber security.

See salaries and explore the career path for Cyber Security Strategist

Cyber Security Risk Manager

A Cyber Security Risk Manager identifies, assesses, and mitigates cyber threats and vulnerabilities, ensuring an organization maintains an acceptable level of risk. This role involves developing risk management frameworks, conducting risk assessments, and reporting on the organization's risk posture. The Cyber Security GRC Part 1 Governance course is highly relevant for this career, as it focuses on governing risk and building resilience. Learners gain real-world knowledge in designing policy frameworks that align with organizational risk appetite, establishing cyber risk oversight mechanisms, and executing threat modelling workshops. By understanding global cyber security frameworks and developing cyber strategies that respond to evolving threats, individuals are well-prepared to articulate risk, embed change management, and contribute significantly to an organization's secure and compliant future. This course helps build a foundation for proactive risk governance.

See salaries and explore the career path for Cyber Security Risk Manager

Chief Information Security Officer

As a Chief Information Security Officer, one is responsible for the overall vision, strategy, and execution of cyber security initiatives across an entire organization. This leadership role demands a deep understanding of risk management, compliance, and how to align security priorities with broader business objectives. The Cyber Security GRC Part 1 Governance course provides a robust foundation for aspiring or current Chief Information Security Officers. It explicitly addresses key areas such as developing business-aligned cyber strategies and actionable roadmaps, establishing governance structures, audit readiness, and cyber risk oversight mechanisms. The course also details embedding change management and articulating return on investment, which are essential for securing executive support and driving successful enterprise-wide cyber resilience, empowering learners to lead the conversation and shape policy. This role typically requires an advanced degree.

See salaries and explore the career path for Chief Information Security Officer

Information Technology Compliance Officer

An Information Technology Compliance Officer ensures that an organization’s IT systems and processes adhere to relevant laws, regulations, and industry standards. This involves interpreting compliance requirements, implementing controls, and preparing for audits. The Cyber Security GRC Part 1 Governance course is directly aligned with the responsibilities of this role. It provides specific knowledge in understanding the global landscape of cyber security frameworks such as NIST and ISO 27001, and designing policy frameworks that align with compliance obligations. The course also teaches how to establish governance structures and audit readiness, which are crucial for any compliance professional. By equipping learners to translate complex cyber requirements into actionable initiatives, this course helps build a strong foundation for ensuring that technology governance supports compliance and embeds security into every level of the business.

See salaries and explore the career path for Information Technology Compliance Officer

Regulatory Compliance Analyst

A Regulatory Compliance Analyst monitors changes in laws and regulations, assesses their impact on an organization, and ensures that internal policies and procedures meet external requirements. This role requires meticulous research and an understanding of diverse regulatory landscapes. The Cyber Security GRC Part 1 Governance course is directly applicable to the responsibilities of a Regulatory Compliance Analyst. It provides real-world knowledge in understanding the global landscape of cyber security frameworks, such as NIST and ISO 27001, and designing policy frameworks that align with compliance obligations. The course also details establishing governance structures and audit readiness, which are crucial for ensuring an organization's adherence to regulatory mandates. By helping learners translate complex regulatory requirements into clear, actionable initiatives, this course helps build a foundation for ensuring an organization is both compliant and future-ready.

See salaries and explore the career path for Regulatory Compliance Analyst

Information Technology Auditor

An Information Technology Auditor evaluates an organization's IT infrastructure, applications, and processes to ensure their reliability, integrity, and compliance with internal policies and external regulations. This involves assessing controls, identifying weaknesses, and recommending improvements. The Cyber Security GRC Part 1 Governance course is highly beneficial for an Information Technology Auditor by focusing on audit readiness and establishing robust governance structures. Learners explore leading national and international frameworks like NIST and ISO 27001, which are often used as audit benchmarks. The course also covers implementing policy frameworks and technology governance, demonstrating how to build structures for secure, informed decision-making. These insights are invaluable for understanding what constitutes effective controls and how to assess an organization's adherence to best practices and regulatory requirements, preparing one to examine reporting progress and compliance effectively.

See salaries and explore the career path for Information Technology Auditor

Internal Control Specialist

An Internal Control Specialist designs, implements, and monitors internal control systems to safeguard an organization's assets, ensure data integrity, and promote operational efficiency and adherence to policies. This role is crucial for risk management and compliance. The Cyber Security GRC Part 1 Governance course is highly relevant for an Internal Control Specialist. It specifically covers establishing governance structures, audit readiness, and cyber risk oversight mechanisms, which are foundational to effective internal controls. Learners gain real-world knowledge in designing and launching policy frameworks that align with organizational risk appetite and compliance obligations. By equipping individuals with the tools to implement technology governance and embed security into every level of the business, the course helps build a foundation for designing robust controls that support secure, informed decision-making and ensure a strong, compliant culture.

See salaries and explore the career path for Internal Control Specialist

Policy Development Specialist

A Policy Development Specialist is responsible for researching, drafting, and refining organizational policies to address various issues, ensuring they are clear, compliant, and effective. This role requires attention to detail, strong analytical skills, and an understanding of implementation challenges. The Cyber Security GRC Part 1 Governance course is highly relevant for a Policy Development Specialist. It dedicates significant attention to crafting and implementing a cyber security policy framework that aligns with an organization’s risk appetite and drives real behavioral change. Learners explore the full lifecycle of policy development, from drafting and stakeholder engagement to measuring impact and refining over time. This course equips individuals with the tools and mindset to ensure cyber security policies don’t just exist on paper, but shape real-world outcomes and build a strong, compliant culture of cyber resilience.

See salaries and explore the career path for Policy Development Specialist

Business Resilience Manager

A Business Resilience Manager is responsible for developing and implementing strategies to ensure an organization can withstand and recover from significant disruptions, whether from cyber threats, natural disasters, or other events. This role emphasizes proactive planning and crisis management. The Cyber Security GRC Part 1 Governance course is particularly relevant for this career, directly addressing the need to "Build Resilience" and conduct "cyber resilience planning". Learners gain capabilities in aligning security priorities with strategic goals, developing business-aligned cyber strategies, and creating actionable roadmaps that respond to evolving threats. The course's focus on embedding change management and driving organizational change helps build a foundation for ensuring that resilience strategies are effectively adopted and integrated throughout the enterprise, enabling an organization to adapt and thrive in an evolving threat landscape.

See salaries and explore the career path for Business Resilience Manager

Privacy Program Manager

A Privacy Program Manager oversees the development, implementation, and maintenance of an organization's privacy program, ensuring compliance with data protection laws and best practices. This role often intersects with information security and governance, particularly regarding data handling and policy. The Cyber Security GRC Part 1 Governance course is relevant for this career. While primarily focused on cyber security, the course covers understanding global frameworks, including a review of the Five Safes Framework and how it supports data governance and information sharing. Implementing policy frameworks and establishing governance structures also directly contribute to a robust privacy program by ensuring data protection policies are practical, enforceable, and embedded in daily operations, helping to build a strong, compliant culture of cyber resilience across the enterprise.

See salaries and explore the career path for Privacy Program Manager

Enterprise Security Architect

An Enterprise Security Architect designs and oversees the implementation of security solutions and strategies across an entire organization, ensuring they align with business objectives, regulatory requirements, and risk appetite. This role requires a strategic perspective on technology, governance, and organizational change. The Cyber Security GRC Part 1 Governance course is useful for an Enterprise Security Architect. It equips learners to lead the plan, govern risk, and build resilience by understanding global cyber security frameworks like NIST and ISO 27001. The course also covers designing and launching policy frameworks, establishing governance structures, and developing business-aligned cyber strategies and actionable roadmaps. These capabilities are crucial for an architect who must embed security into the very fabric of an organization's technology and processes, translating complex cyber requirements into a secure and adaptive infrastructure.

See salaries and explore the career path for Enterprise Security Architect

Management Consultant

A Management Consultant advises organizations on various strategic, operational, and organizational challenges to improve performance and achieve objectives. Consultants often work with leadership to drive change, implement new strategies, and manage risk. The Cyber Security GRC Part 1 Governance course is particularly helpful for Management Consultants, especially those specializing in digital transformation or risk advisory. The course equips learners with critical capabilities to design, implement, and lead enterprise-wide cyber security strategy, covering areas like aligning security priorities with strategic goals, managing regulatory frameworks, and driving organizational change. By focusing on developing actionable roadmaps and articulating return on investment, the course provides the strategic leadership and execution insights necessary to guide clients through complex cyber security challenges and enable growth through effective governance.

See salaries and explore the career path for Management Consultant

Information Technology Project Manager

An Information Technology Project Manager leads the planning, execution, and closing of IT projects, which often include significant cyber security initiatives. This role requires strong organizational skills, stakeholder management, and the ability to drive complex implementations. The Cyber Security GRC Part 1 Governance course may be useful for Information Technology Project Managers overseeing security projects. The course focuses on designing and launching policy frameworks, executing threat modelling workshops, gap assessments, and value-driven implementation plans. It also covers embedding change management and reporting progress, which are all critical aspects of successful project delivery in cyber security. By understanding how to develop actionable roadmaps and align initiatives with strategic goals, project managers can better guide their teams and ensure projects contribute effectively to the organization’s overall cyber resilience and growth.

See salaries and explore the career path for Information Technology Project Manager

Organizational Change Lead

An Organizational Change Lead helps drive and manage significant transitions within an organization, ensuring that new initiatives, processes, and technologies are effectively adopted by employees. This role focuses on communication, training, and mitigating resistance to change. The Cyber Security GRC Part 1 Governance course may be helpful for an Organizational Change Lead. The course explicitly highlights "embedding change management" as a key capability. It prepares learners to lead conversations and shape enterprise policy, emphasizing how to drive organizational change by aligning security priorities with strategic goals and translating complex cyber requirements into clear, actionable initiatives. Understanding how to articulate return on investment and build a compliant culture of cyber resilience, as taught in this course, provides valuable insights for effectively managing the human element of security transformations and ensuring successful adoption of new security strategies.

See salaries and explore the career path for Organizational Change Lead

Reading list

We've selected 50 books that we think will supplement your learning. Use these to develop background knowledge, enrich your coursework, and gain a deeper understanding of the topics covered in Cyber Security: GRC Part 1 - Governance.

An Assessment of Four Divisions of the Information...

Save

Another cornerstone NIST publication, SP 800-37 Rev 2 details the Risk Management Framework (RMF). This document is crucial for understanding the process of managing security and privacy risks throughout the system lifecycle. It key reference for anyone involved in implementing an RMF program.

An Assessment of Four Divisions of the Information...

Kindle Edition

A Comprehensive Guide to the NIST Cybersecurity...

Save

This recent publication provides a vital introduction to the updated NIST Cybersecurity Framework 2.0. It covers strategies, implementation, and best practices in clear language, suitable for both beginners and experienced professionals. is essential for understanding the latest iteration of the CSF and its contemporary applications.

A Comprehensive Guide to the NIST Cybersecurity...

Kindle Edition

$$$

Unveiling the NIST Risk Management Framework (RMF)

Save

This guide demystifies the NIST Risk Management Framework (RMF), offering practical insights into its implementation. It's structured as both an educational resource and a practical manual, making it valuable for cybersecurity professionals involved in governance, risk management, and compliance. It helps solidify an understanding of the RMF lifecycle and its application.

Cyber Security

Two deals to help you save

What's inside

Syllabus

Save this course

Career center

Reading list

Share

Similar courses

Coursera Buyer Protection & Guarantee

7-Day Free Trial & Free Audit

14-Day Refund Guarantee

Verified Academic & Industry Partner