Selection and Approval of Security and Privacy Controls for CGRC from Pluralsight

Risk is managed through controls and this course will teach you how to select the controls required to protect an Information System as needed for the Certified in Governance, Risk and Compliance examination.

The objective of risk management is to ensure that adequate controls are in place to protect information and information systems. In this course, Selection and Approval of Security and Privacy Controls for the Certified in Governance, Risk and Compliance certification, you’ll learn to select and document the security controls needed in an Information system and documented in the System Security Plan. First, you’ll explore control requirements. Next, you’ll discover allocation of baseline and inherited controls. Finally, you’ll learn how to prepare system documentation to obtain approval for the system security plan. When you’re finished with this course, you’ll have the skills and knowledge of selection and approval of security and privacy controls needed for the Certified in Governance, Risk and Compliance examination.

What's inside

Syllabus

Course Overview

Select and Tailor Information Security Controls

Document and Approve Information Security Plans

Domain Summary

Good to know

Know what's good

, what to watch for

, and possible dealbreakers

Explores control requirements, which is standard in the field of risk management

Taught by Kevin Henry, who is recognized for their work in governance, risk, and compliance

Develops skills and knowledge needed for the Certified in Governance, Risk and Compliance examination

Examines allocation of baseline and inherited controls, which is highly relevant to system security

Activities

Be better prepared before your course. Deepen your understanding during and after it. Supplement your coursework and achieve mastery of the topics covered in Selection and Approval of Security and Privacy Controls for CGRC with these activities:

Review Course Materials

Show steps

Review the course materials in advance to familiarize yourself with the key concepts and topics.

Show steps

Read through the syllabus and course outline
Review the assigned readings and videos
Take notes and highlight important points

Glossary of Security Terms

Show steps

Create a glossary of key security terms to reinforce your understanding of the technical vocabulary used in the course.

Show steps

Identify the key security terms from the course materials
Define each term clearly and concisely
Organize the terms into a glossary

Review Information Systems Security

Show steps

Review the key concepts of information systems security to strengthen your foundational knowledge for the course.

View Principles of Information Security (MindTap... on Amazon

Show steps

Read Chapters 1-3
Summarize the main points of each chapter
Identify key terms and concepts

Five other activities

Expand to see all activities and additional details

Show all eight activities

Control Approval Process Walkthrough

Show steps

Follow guided tutorials to enhance your understanding of the approval process for security controls.

Browse courses on Security Controls

Show steps

Find video tutorials or online resources
Watch the tutorials and take notes
Summarize the key steps in the approval process

Control Selection Practice

Show steps

Engage in exercises that strengthen your ability to select appropriate security controls for various scenarios.

Show steps

Access practice questions or simulations
Apply the principles of control selection
Analyze scenarios and identify suitable controls
Review your answers and learn from mistakes

Security Control Allocation Exercises

Show steps

Complete exercises that reinforce your ability to allocate security controls appropriately.

Show steps

Review the course materials on control allocation
Analyze scenarios and identify applicable controls
Apply the principles of control allocation
Check your answers and learn from mistakes

System Security Plan Outline

Show steps

Create an outline for a system security plan to demonstrate your understanding of documenting security controls.

Browse courses on System Security Plan

Show steps

Review the course materials on system security plans
Gather information about a specific system
Identify the security controls for the system
Create an outline for the system security plan

System Security Plan Proposal

Show steps

Craft a proposal for a system security plan to apply your knowledge in a practical setting.

Browse courses on System Security

Show steps

Research and gather information about a specific system
Identify the relevant security controls and requirements
Develop a plan for implementing and managing the security controls
Write a comprehensive proposal outlining the plan

Career center

Learners who complete Selection and Approval of Security and Privacy Controls for CGRC will develop knowledge and skills that may be useful to these careers:

Privacy Officer

Privacy Officers are responsible for developing and implementing privacy policies and procedures to protect personal information. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful for understanding the legal and regulatory requirements for protecting personal information.

See salaries and explore the career path for Privacy Officer

Data Privacy Analyst

Data Privacy Analysts help organizations to comply with privacy regulations, manage privacy risks, and protect sensitive data. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful for developing the skills needed to select and implement security controls to protect personal information.

See salaries and explore the career path for Data Privacy Analyst

IT Security Architect

IT Security Architects design and implement security solutions for information systems. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful for learning about the process of selecting and implementing security controls.

See salaries and explore the career path for IT Security Architect

Cloud Security Engineer

Cloud Security Engineers design, implement, and maintain security systems to protect cloud applications and data. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful for learning about the process of selecting and implementing security controls to protect cloud environments.

See salaries and explore the career path for Cloud Security Engineer

Security Architect

Security Architects design and implement security solutions for organizations. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful for learning about the process of selecting and implementing security controls to protect organizations from security threats.

See salaries and explore the career path for Security Architect

Information Security Engineer

Information Security Engineers design, implement, and maintain security systems to protect information and information systems. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful for learning about the process of selecting and implementing security controls.

See salaries and explore the career path for Information Security Engineer

Security Consultant

Security Consultants help organizations to protect their information and information systems. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful for learning how to assess the security needs of an organization and to recommend appropriate controls.

See salaries and explore the career path for Security Consultant

Information Security Manager

Information Security Managers are responsible for developing and implementing security policies and procedures to protect information and information systems. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful to learn about the process of selecting and approving security controls.

See salaries and explore the career path for Information Security Manager

IT Auditor

IT Auditors evaluate the effectiveness of IT controls to ensure that they are operating as intended. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful for learning about the process of selecting and implementing security controls, as well as how to evaluate their effectiveness.

See salaries and explore the career path for IT Auditor

Cybersecurity Analyst

Cybersecurity Analysts protect computer systems and networks from cyberattacks. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful by providing an understanding of the different types of security controls that can be used to protect against cybersecurity threats.

See salaries and explore the career path for Cybersecurity Analyst

Network Security Engineer

Network Security Engineers design, implement, and maintain security systems to protect networks and network devices. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful for learning about the process of selecting and implementing security controls to protect networks.

See salaries and explore the career path for Network Security Engineer

Security Analyst

Security Analysts monitor and analyze security events to identify and respond to threats. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful for developing the skills needed to select and implement security controls to prevent and detect security breaches.

See salaries and explore the career path for Security Analyst

Risk Manager

Risk Managers are responsible for identifying and assessing risks to an organization. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful for understanding how to select and implement controls to mitigate risks.

See salaries and explore the career path for Risk Manager

Compliance Analyst

Compliance Analysts may leverage their knowledge of security and privacy controls to assist their company in managing regulatory compliance. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful in learning how to identify and implement the security controls needed to protect information and systems.

See salaries and explore the career path for Compliance Analyst

Auditor

Auditors are responsible for assessing the effectiveness of internal controls. The course, Selection and Approval of Security and Privacy Controls for CGRC, may be useful for developing the skills to evaluate the adequacy of security and privacy controls.

See salaries and explore the career path for Auditor