Cybersecurity Compliance Framework, Standards & Regulations

Cybersecurity Compliance Framework, Standards & Regulations

This course is part of multiple programs.

Instructors: IBM Skills Network Team

What you'll learn

Define fundamental concepts of cybersecurity, including governance, risk management, compliance, AI ethics, and the audit process.
Identify cybersecurity laws and regulations, both at a national and international level and comprehend their implications for organizations.
Explore industry standards and their significance in cybersecurity practices and gain insights into the COBIT framework and SOC reports.
Apply cybersecurity industry standards and best practices to mitigate risks, enhance security, and ensure compliance through audit processes.

Details to know

Earn a career certificate

Add to your LinkedIn profile

Assessments

14 assignments

Taught in English

See how employees at top companies are mastering in-demand skills

Learn more about Coursera for Business

Build your subject-matter expertise

This course is available as part of

When you enroll in this course, you'll also be asked to select a specific program.

Learn new concepts from industry experts
Gain a foundational understanding of a subject or tool
Develop job-relevant skills with hands-on projects
Earn a shareable career certificate

Earn a career certificate

Add this credential to your LinkedIn profile, resume, or CV

Share it on social media and in your performance review

There are 5 modules in this course

Cyber threats present a constant challenge today, costing billions and affecting everyone, from governments to small businesses. Are you ready to contribute to the solution?

This course will provide you with a deep understanding of cybersecurity principles, industry standards, regulations, and audit processes. You will explore the fundamental concepts of information security and compliance, covering topics such as governance, risk, compliance, cybersecurity frameworks, and process management. You will also learn about IT service management and explore the NIST risk management framework and AI ethical considerations. You will gain insights into cybersecurity laws and regulations, focusing on both US and global perspectives, including HIPPA, GDPR, and PCI DSS. Additionally, you will familiarize yourself with the audit processes using the COBIT framework and SOC reports. You will also explore prominent standards such as OWASP, ISO, and IEEE, learning how to apply them effectively. Throughout this five-module self-paced course, you will engage in interactive activities to apply your knowledge in real-world scenarios. You will also complete a final project to test your skills and showcase your understanding. Join us on this cybersecurity journey!

Information security and compliance are essential aspects for organizations that want to protect their sensitive data and adhere to regulations. This module provides a comprehensive overview of the guidelines, practices, policies, and technologies involved in safeguarding digital assets. First, you’ll be introduced to the Governance, Risk, and Compliance (GRC) strategy and tools. Then, you’ll learn about the NIST Cybersecurity Framework or CSF 2.0, which guides organizations in managing cybersecurity risks. You’ll also gain insights into CSF components, functions, and tier levels. Further, you are going to learn about security compliance that helps organizations protect their data, assets, and reputation, as well as about the repercussions of non-compliance with laws, regulations, or industry standards. You will also gain knowledge regarding the use of standardized processes in an organization that allows for a centralized structure and the concepts of automation and orchestration, which are essential to cybersecurity, streamlining processes, and reducing manual intervention. Finally, you learned about change management, which helps you adapt to new technologies and regulations.

What's included

8 videos2 readings4 assignments1 discussion prompt7 plugins

8 videosTotal 50 minutes

Course Introduction3 minutesPreview module
Governance, Risk, and Compliance (GRC)5 minutes
Governance Components5 minutes
NIST Cybersecurity Framework 6 minutes
Elements of Effective Security Compliance7 minutes
Standardize Processes 6 minutes
Automation and Orchestration6 minutes
Change Management7 minutes

2 readingsTotal 6 minutes

Course Overview2 minutes
Module 1 Summary: Introduction to Information Security and Compliance4 minutes

4 assignmentsTotal 60 minutes

Practice Quiz: Governance, Risk, and Compliance10 minutes
Practice Quiz: Cybersecurity Framework10 minutes
Practice Quiz: Security Management and Oversight10 minutes
Module 1 Graded Quiz: Introduction to Information Security and Compliance30 minutes

1 discussion promptTotal 10 minutes

(Optional) CSF Implementation10 minutes

7 pluginsTotal 46 minutes

Reading: Helpful Tips for Course Completion3 minutes
Reading: GRC Tools 5 minutes
Activity: Applying GRC Concepts5 minutes
Reading: Aligning to the NIST Cybersecurity Framework5 minutes
Activity: Align to the NIST Cybersecurity Framework15 minutes
Reading: Asset Management7 minutes
Module 1 Glossary: Introduction to Information Security and Compliance6 minutes

This module offers a comprehensive introduction to IT service management (ITSM), risk management, and ethical considerations in artificial intelligence (AI). Participants will explore key frameworks and processes essential for effective IT service delivery, risk mitigation, and ethical AI implementation. Through a combination of videos, readings, activities, and quizzes, participants will gain practical insights into ITIL, risk management frameworks, and AI ethics.

What's included

6 videos1 reading4 assignments1 discussion prompt7 plugins

6 videosTotal 43 minutes

Information Technology Infrastructure Library (ITIL) Overview6 minutesPreview module
Key ITIL Processes8 minutes
Risk Management9 minutes
Third-Party Risk Assessment and Management7 minutes
AI Ethics7 minutes
How to Implement AI Ethics3 minutes

1 readingTotal 3 minutes

Module 2 Summary: Foundations of IT Service Management and Risk Governance 3 minutes

4 assignmentsTotal 60 minutes

Practice Quiz: Information Technology Infrastructure Library (ITIL)10 minutes
Practice Quiz: Risk Management10 minutes
Practice Quiz: AI Ethics and Governance 10 minutes
Module 2 Graded Quiz: Foundations of IT Service Management and Risk Governance 30 minutes

1 discussion promptTotal 10 minutes

(Optional) Foundations of IT Service Management and Risk Governance 10 minutes

7 pluginsTotal 45 minutes

Activity: Identify the ITIL Phases5 minutes
Reading: ITIL Process Implementation5 minutes
Reading: Risk Analysis5 minutes
Activity: Accept, Transfer, Avoid, or Mitigate?5 minutes
Reading: EU AI Act 5 minutes
Activity: Applying AI Ethics 15 minutes
Module 2 Glossary: Foundations of IT Service Management and Risk Governance 5 minutes

This module provides an in-depth exploration of cybersecurity laws and regulations, focusing on both US and global perspectives. Participants will gain insights into key legislations such as HIPAA, GDPR, and PCI DSS and learn how to ensure compliance with these regulations. Through a combination of videos, readings, activities, and quizzes, participants will develop a comprehensive understanding of legal frameworks governing cybersecurity.

What's included

3 videos1 reading3 assignments1 discussion prompt7 plugins

3 videosTotal 20 minutes

Overview of US Cybersecurity Laws and Regulations 7 minutesPreview module
HIPAA Security Rule5 minutes
Overview of Global Cybersecurity Laws and Regulations 7 minutes

1 readingTotal 2 minutes

Module 3 Summary: Understanding Cybersecurity Laws and Regulations 2 minutes

3 assignmentsTotal 50 minutes

Practice Quiz: US Cybersecurity Laws and Regulations10 minutes
Practice Quiz: Global Cybersecurity Laws and Regulations10 minutes
Module 3 Graded Quiz: Understanding Cybersecurity Laws and Regulations30 minutes

1 discussion promptTotal 10 minutes

(Optional) Cybersecurity Laws10 minutes

7 pluginsTotal 55 minutes

Reading: HIPAA Cybersecurity Guidance5 minutes
Activity: Apply HIPAA Guidelines15 minutes
Reading: US Laws and Regulations Cheat Sheet5 minutes
Reading: Applying Global Cybersecurity Laws and Regulations5 minutes
Activity: Apply Global Cybersecurity Laws and Regulations5 minutes
Reading: Global Cybersecurity Laws and Regulations Cheat sheet 5 minutes
Module 3 Glossary: US Cybersecurity Laws and Regulations15 minutes

This module delves into the landscape of cybersecurity standards and audits, providing participants with a comprehensive understanding of industry standards and audit processes. Participants will explore prominent standards such as OWASP, NIST, ISO, and IEEE and learn how to apply them effectively. Additionally, the course covers security control audits, COBIT framework, and SOC reports to ensure participants grasp the auditing process. Through videos, readings, activities, and quizzes, participants will gain practical knowledge to enhance cybersecurity practices.

What's included

6 videos1 reading3 assignments1 discussion prompt7 plugins

6 videosTotal 42 minutes

Industry standards 8 minutesPreview module
NIST, ISO, and IEEE Overview7 minutes
Security Control Audits 6 minutes
Performing a Security Audit7 minutes
ISACA Frameworks5 minutes
SOC Reports6 minutes

1 readingTotal 3 minutes

Module 4 Summary: Understanding Cybersecurity Standards and Audits3 minutes

3 assignmentsTotal 50 minutes

Practice Quiz: Cybersecurity Industry Standards10 minutes
Practice Quiz: Audits10 minutes
Module 4 Graded Quiz: Understanding Cybersecurity Standards and Audits30 minutes

1 discussion promptTotal 10 minutes

(Optional) Conducting Security Audits10 minutes

7 pluginsTotal 40 minutes

Reading: OWASP Use Cases5 minutes
Activity: Applying OWASP Standards5 minutes
Reading: NIST Standards 5 minutes
Reading: ISO Standards5 minutes
Reading: IEEE Standards5 minutes
Reading: COBIT 5 minutes
Module 4 Glossary: Understanding Cybersecurity Standards and Audits10 minutes

In this module, you will complete a final project where you will have an opportunity to demonstrate your understanding of Cybersecurity Frameworks, Risk Management, and Standards and Regulations.