Free Governance, Risk, and Compliance Training Resources

Here are some free Governance, Risk, and Compliance training resources. (H/T Christian Hyatt, Christian Hyatt's LinkedIn)

SOC 2

• AICPA (AICPA Link)
• SOC 2 YouTube Playlist (YouTube Playlist Link)
• SOC 2 to Comply with Multiple Frameworks (Frameworks Link)

PCI DSS

• PCI Standards Council (PCI Standards Link)
• PCI YouTube Playlist (YouTube Playlist Link)
• List of Tasks to Maintain your PCI Program (Tasks Link)

ISO 27001

• ISO Framework Updates (Framework Updates Link)
• YouTube Playlist (YouTube Playlist Link)
• 3 part series on getting ISO certified (Certification Series Link)

GRC Training, Leadership, Methods:

• Gerald Auger’s Updates (Updates Link)
• Microsoft CISO Workshop Series (Workshop Series Link)
• Risk3sixty GRC Training (Training Link)
• 5 CISO Archetypes (CISO Archetypes Link)
• Security Team Operating System (Operating System Link)

HIPAA Updates

• HIPAA Newsroom Updates (Newsroom Link)
• Security Risk Assessment Tool (Assessment Tool Link)

HITRUST Updates

• HITRUST Newsroom (HITRUST Newsroom Link)
• YouTube Playlist (YouTube Playlist Link)
• HITRUST ROI Calculator (ROI Calculator Link)

Single Framework Strategy: Comply with Multiple Frameworks

• YouTube Video on How to Establish a Governance Structure to Support Multiple Frameworks – Part 1 of 4 (Video Link)
• Whitepaper on Single Framework Strategy (Whitepaper Link)