Governance, Risk & Compliance
IT Governance, Risk and Compliance
This five-day programme prepares technology leaders, risk professionals, and auditors to govern IT, manage technology risk, and meet technology compliance obligations as one integrated capability, covering IT governance foundations, IT risk management, IT compliance and regulatory obligations, IT controls, security and third parties, and reporting, assurance and maturity. Participants develop skills in IT governance and oversight design, IT risk assessment and management, IT compliance and control design, and IT GRC reporting, assurance, and maturity assessment.
Introduction
IT Governance, Risk and Compliance Training Course prepares technology leaders, risk professionals, and auditors to govern IT, manage technology risk, and meet technology compliance obligations as one integrated capability. Participants work through IT governance foundations and board oversight, IT risk management and risk assessment practice, IT compliance, regulatory obligations, and control frameworks, IT controls, security, and third-party risk management, and IT GRC reporting, assurance, and maturity assessment as one connected discipline. The programme links the value an organisation expects from technology with the governance and controls that protect it. As a result, learners gain a practical command of IT GRC. Furthermore, the course strengthens governance judgement, IT risk discipline, and compliance literacy.
IT Governance, Risk and Compliance Course Objectives
- Explain IT governance concepts, structures, and board oversight.
- Apply COBIT 2019 and ISO/IEC 38500 to IT governance design.
- Apply IT risk management frameworks and ISO 31000 to technology.
- Apply IT risk assessment, threat modelling, and risk scenarios.
- Apply IT compliance obligations and regulatory mapping.
- Apply control frameworks: ISO/IEC 27001, NIST CSF, and COBIT controls.
- Apply IT control testing, evidence, and control assurance.
- Apply third-party, cloud, and vendor IT risk governance.
- Apply IT GRC reporting, dashboards, and board-ready information.
- Apply IT GRC assurance mapping, maturity assessment, and roadmaps.
Course Methodology
- Interactive sessions built on IT GRC and technology risk cases.
- Workshops on governance design, risk scenarios, and control mapping.
- Group exercises on compliance mapping and third-party risk review.
- Hands-on practice with risk registers, control matrices, and IT dashboards.
- Simulation of an IT steering committee and a control testing review.
- Facilitator coaching and peer review on IT GRC improvement plans.
Who Should Take This Course
- IT governance and IT risk professionals.
- CIOs, IT directors, and IT service managers.
- IT auditors and assurance specialists.
- Governance, risk, and compliance officers in technology.
- Cybersecurity and information security managers.
- Consultants advising on IT GRC frameworks.
IT Governance, Risk and Compliance Course Outlines
IT Governance Foundations
- • IT governance concepts, scope, and business value.
- • Board and executive oversight of technology.
- • Governance structures: IT steering committees and mandates.
- • ISO/IEC 38500 principles for IT governance.
- • COBIT 2019 framework structure and governance system overview.
- • Delegations, IT decision rights, and accountability lines.
- • Case discussion: technology decisions taken with no oversight.
IT Risk Management
- • IT risk concepts, appetite, and tolerance design.
- • Applying ISO 31000 principles and process to technology.
- • IT risk assessment methods and risk registers.
- • Threat modelling, vulnerability, and scenario analysis.
- • Cyber, availability, project, and data risk themes.
- • Risk aggregation and enterprise IT risk profiling.
- • Workshop: building an IT risk register and risk profile.
IT Compliance and Regulatory Obligations
- • IT compliance obligations and regulatory landscape.
- • Data protection and privacy obligations (GDPR-aligned).
- • Sector rules, cyber reporting, and breach notification duties.
- • Regulatory mapping for technology services and systems.
- • Policy architecture, standards, and IT procedures.
- • Compliance monitoring, exceptions, and waiver handling.
- • Exercise: mapping regulatory obligations to IT processes.
IT Controls, Security, and Third Parties
- • Control frameworks: ISO/IEC 27001, NIST CSF, and COBIT controls.
- • Security controls, access management, and change control.
- • Segregation of duties and privileged access governance.
- • IT control testing, walkthroughs, and evidence practice.
- • Third-party, cloud, and vendor risk governance.
- • Business continuity, backup, and disaster recovery controls.
- • Simulation: testing IT controls and reporting exceptions.
Reporting, Assurance, and Maturity
- • IT GRC reporting, dashboards, and board packs.
- • Key risk and compliance indicators for IT.
- • Assurance mapping and coordination with IT audit.
- • Breach, incident, and escalation handling in IT GRC.
- • IT GRC maturity assessment and gap analysis.
- • Improvement roadmap, action tracking, and change management.
- • Capstone: presenting an integrated IT GRC framework.
Conclusion
By successfully completing IT Governance, Risk and Compliance, participants will gain a practical command of IT governance foundations and board oversight, IT risk management with ISO 31000, IT compliance and regulatory mapping, control frameworks including ISO/IEC 27001, NIST CSF and COBIT, and third-party risk, IT GRC reporting, assurance and maturity assessment. They will acquire skills in IT governance and oversight design, IT risk assessment and management, IT compliance and control design, and IT GRC reporting, assurance, and maturity assessment that hold up under scrutiny. Gentex Training Center designs the programme to help professionals govern technology with confidence.
FAQs for the IT Governance, Risk and Compliance course
— What is the "IT Governance, Risk and Compliance" course about?
It prepares technology leaders, risk professionals, and auditors to govern IT, manage technology risk, and meet technology compliance obligations as one integrated capability. The course spans IT governance foundations, IT risk management, IT compliance and regulatory obligations, IT controls, security and third parties, and reporting, assurance and maturity.
— What are the key benefits of the "IT Governance, Risk and Compliance" course?
You gain a practical command of IT GRC that links the value an organisation expects from technology with the governance and controls that protect it. The course improves governance structures and decision rights, strengthens IT risk assessment and registers, sharpens compliance mapping and control design, and builds integrated reporting and assurance with IT audit.
— What skills will I gain from the "IT Governance, Risk and Compliance" course?
You will develop four core skills: IT governance and oversight design, IT risk assessment and management, IT compliance and control design, and IT GRC reporting, assurance, and maturity assessment.
— What tools, methods, or standards are covered in the "IT Governance, Risk and Compliance" course?
The course covers IT governance concepts, scope and business value, board and executive oversight of technology, IT steering committees and mandates, ISO/IEC 38500 principles for IT governance, the COBIT 2019 framework structure and governance system, delegations, IT decision rights and accountability lines, IT risk concepts, appetite and tolerance, ISO 31000 principles and process applied to technology, IT risk assessment methods and risk registers, threat modelling, vulnerability and scenario analysis, cyber, availability, project and data risk themes, risk aggregation and enterprise IT risk profiling, IT compliance obligations and the regulatory landscape, data protection and privacy obligations aligned to GDPR, sector rules, cyber reporting and breach notification duties, regulatory mapping for technology services and systems, policy architecture, standards and IT procedures, compliance monitoring, exceptions and waiver handling, control frameworks including ISO/IEC 27001, NIST CSF and COBIT controls, security controls, access management and change control, segregation of duties and privileged access governance, IT control testing, walkthroughs and evidence practice, third-party, cloud and vendor risk governance, business continuity, backup and disaster recovery controls, IT GRC reporting, dashboards and board packs, key risk and compliance indicators for IT, assurance mapping and coordination with IT audit, breach, incident and escalation handling, and IT GRC maturity assessment, gap analysis and improvement roadmapping.
— How is the "IT Governance, Risk and Compliance" course applied in real-world practice?
Participants apply it to real work such as designing an IT steering committee mandate and decision rights, building an IT risk register and risk profile, mapping regulatory obligations to IT processes, testing IT controls and reporting exceptions, reviewing a cloud provider's risk position, preparing an IT GRC dashboard for the board, handling an IT incident and escalation, and presenting an integrated IT GRC framework. The same methods support IT assurance mapping and IT GRC maturity improvement.
Introduction
IT Governance, Risk and Compliance Training Course prepares technology leaders, risk professionals, and auditors to govern IT, manage technology risk, and meet technology compliance obligations as one integrated capability. Participants work through IT governance foundations and board oversight, IT risk management and risk assessment practice, IT compliance, regulatory obligations, and control frameworks, IT controls, security, and third-party risk management, and IT GRC reporting, assurance, and maturity assessment as one connected discipline. The programme links the value an organisation expects from technology with the governance and controls that protect it. As a result, learners gain a practical command of IT GRC. Furthermore, the course strengthens governance judgement, IT risk discipline, and compliance literacy.
IT Governance, Risk and Compliance Course Objectives
- Explain IT governance concepts, structures, and board oversight.
- Apply COBIT 2019 and ISO/IEC 38500 to IT governance design.
- Apply IT risk management frameworks and ISO 31000 to technology.
- Apply IT risk assessment, threat modelling, and risk scenarios.
- Apply IT compliance obligations and regulatory mapping.
- Apply control frameworks: ISO/IEC 27001, NIST CSF, and COBIT controls.
- Apply IT control testing, evidence, and control assurance.
- Apply third-party, cloud, and vendor IT risk governance.
- Apply IT GRC reporting, dashboards, and board-ready information.
- Apply IT GRC assurance mapping, maturity assessment, and roadmaps.
Course Methodology
- Interactive sessions built on IT GRC and technology risk cases.
- Workshops on governance design, risk scenarios, and control mapping.
- Group exercises on compliance mapping and third-party risk review.
- Hands-on practice with risk registers, control matrices, and IT dashboards.
- Simulation of an IT steering committee and a control testing review.
- Facilitator coaching and peer review on IT GRC improvement plans.
Who Should Take This Course
- IT governance and IT risk professionals.
- CIOs, IT directors, and IT service managers.
- IT auditors and assurance specialists.
- Governance, risk, and compliance officers in technology.
- Cybersecurity and information security managers.
- Consultants advising on IT GRC frameworks.
IT Governance, Risk and Compliance Course Outlines
IT Governance Foundations
- • IT governance concepts, scope, and business value.
- • Board and executive oversight of technology.
- • Governance structures: IT steering committees and mandates.
- • ISO/IEC 38500 principles for IT governance.
- • COBIT 2019 framework structure and governance system overview.
- • Delegations, IT decision rights, and accountability lines.
- • Case discussion: technology decisions taken with no oversight.
IT Risk Management
- • IT risk concepts, appetite, and tolerance design.
- • Applying ISO 31000 principles and process to technology.
- • IT risk assessment methods and risk registers.
- • Threat modelling, vulnerability, and scenario analysis.
- • Cyber, availability, project, and data risk themes.
- • Risk aggregation and enterprise IT risk profiling.
- • Workshop: building an IT risk register and risk profile.
IT Compliance and Regulatory Obligations
- • IT compliance obligations and regulatory landscape.
- • Data protection and privacy obligations (GDPR-aligned).
- • Sector rules, cyber reporting, and breach notification duties.
- • Regulatory mapping for technology services and systems.
- • Policy architecture, standards, and IT procedures.
- • Compliance monitoring, exceptions, and waiver handling.
- • Exercise: mapping regulatory obligations to IT processes.
IT Controls, Security, and Third Parties
- • Control frameworks: ISO/IEC 27001, NIST CSF, and COBIT controls.
- • Security controls, access management, and change control.
- • Segregation of duties and privileged access governance.
- • IT control testing, walkthroughs, and evidence practice.
- • Third-party, cloud, and vendor risk governance.
- • Business continuity, backup, and disaster recovery controls.
- • Simulation: testing IT controls and reporting exceptions.
Reporting, Assurance, and Maturity
- • IT GRC reporting, dashboards, and board packs.
- • Key risk and compliance indicators for IT.
- • Assurance mapping and coordination with IT audit.
- • Breach, incident, and escalation handling in IT GRC.
- • IT GRC maturity assessment and gap analysis.
- • Improvement roadmap, action tracking, and change management.
- • Capstone: presenting an integrated IT GRC framework.
Conclusion
By successfully completing IT Governance, Risk and Compliance, participants will gain a practical command of IT governance foundations and board oversight, IT risk management with ISO 31000, IT compliance and regulatory mapping, control frameworks including ISO/IEC 27001, NIST CSF and COBIT, and third-party risk, IT GRC reporting, assurance and maturity assessment. They will acquire skills in IT governance and oversight design, IT risk assessment and management, IT compliance and control design, and IT GRC reporting, assurance, and maturity assessment that hold up under scrutiny. Gentex Training Center designs the programme to help professionals govern technology with confidence.
FAQs for the IT Governance, Risk and Compliance course
— What is the "IT Governance, Risk and Compliance" course about?
It prepares technology leaders, risk professionals, and auditors to govern IT, manage technology risk, and meet technology compliance obligations as one integrated capability. The course spans IT governance foundations, IT risk management, IT compliance and regulatory obligations, IT controls, security and third parties, and reporting, assurance and maturity.
— What are the key benefits of the "IT Governance, Risk and Compliance" course?
You gain a practical command of IT GRC that links the value an organisation expects from technology with the governance and controls that protect it. The course improves governance structures and decision rights, strengthens IT risk assessment and registers, sharpens compliance mapping and control design, and builds integrated reporting and assurance with IT audit.
— What skills will I gain from the "IT Governance, Risk and Compliance" course?
You will develop four core skills: IT governance and oversight design, IT risk assessment and management, IT compliance and control design, and IT GRC reporting, assurance, and maturity assessment.
— What tools, methods, or standards are covered in the "IT Governance, Risk and Compliance" course?
The course covers IT governance concepts, scope and business value, board and executive oversight of technology, IT steering committees and mandates, ISO/IEC 38500 principles for IT governance, the COBIT 2019 framework structure and governance system, delegations, IT decision rights and accountability lines, IT risk concepts, appetite and tolerance, ISO 31000 principles and process applied to technology, IT risk assessment methods and risk registers, threat modelling, vulnerability and scenario analysis, cyber, availability, project and data risk themes, risk aggregation and enterprise IT risk profiling, IT compliance obligations and the regulatory landscape, data protection and privacy obligations aligned to GDPR, sector rules, cyber reporting and breach notification duties, regulatory mapping for technology services and systems, policy architecture, standards and IT procedures, compliance monitoring, exceptions and waiver handling, control frameworks including ISO/IEC 27001, NIST CSF and COBIT controls, security controls, access management and change control, segregation of duties and privileged access governance, IT control testing, walkthroughs and evidence practice, third-party, cloud and vendor risk governance, business continuity, backup and disaster recovery controls, IT GRC reporting, dashboards and board packs, key risk and compliance indicators for IT, assurance mapping and coordination with IT audit, breach, incident and escalation handling, and IT GRC maturity assessment, gap analysis and improvement roadmapping.
— How is the "IT Governance, Risk and Compliance" course applied in real-world practice?
Participants apply it to real work such as designing an IT steering committee mandate and decision rights, building an IT risk register and risk profile, mapping regulatory obligations to IT processes, testing IT controls and reporting exceptions, reviewing a cloud provider's risk position, preparing an IT GRC dashboard for the board, handling an IT incident and escalation, and presenting an integrated IT GRC framework. The same methods support IT assurance mapping and IT GRC maturity improvement.
Partners in Learning
Our Partners in Learning include leading companies and organizations that trust Gentex Training Center for high-quality training courses and professional development programs. Together, we deliver impactful training programs that support skills growth, leadership development, and organizational excellence.
.png)
