Module 6: Governance, Risk and Compliance

Time Required: 1.5 Hours

6.0 Module overview

• Overview & Learning Outcomes

6.1 Governance

• Corporate strategy and governance
• Business goals and objectives
• Cyber strategy, planning and budgeting
• Information Security Management (ISMS) development
• Documenting policies, procedures, guidelines and standards

6.2 Cyber Risk Management

• Risk identification – internal and 3 rd party
• Risk assessment
• Risk control – technical and compliance
• Control review

6.3 Compliance

• Identifying relevant laws and regulations
  • EU General Data Protection Regulation (GDPR)
  • Payment Card Industry Data Security Standard (PCI-
    DSS)
  • Australia’s Privacy Act 1988
• Mapping compliance requirements to ISMS and standards
• Cyber auditing