|
所在平台: Udemy |
课程主页: https://www.udemy.com/course/it-auditing-fundamentals-for-the-grc-analyst/
课程评论：没有评论
**课程名称：GRC分析师的IT审计基础** **课程概述：** 本课程是为希望转向网络安全领域的初级IT专业人士设计的。旨在通过IT审计这一GRC职业的核心职能，帮助学员深入理解安全控制的实施，从而有效缓解组织信息安全资产面临的风险。 **目标学员：** * 初级GRC分析师 * 需要了解IT审计基础知识的学员 * 希望转向网络安全领域的学员 **先修要求：** * 理解计算机网络的基本运行/功能 * 对IT安全原则有基本了解 **学习内容：** **第一部分：** * **第一章：** 审计流程的主要关注点、审计入门、什么是网络安全审计、网络安全审计的必要性、网络安全审计关键概念。 * **第二章：** 理解审计基础、审计类型、网络审计的基础支柱。 * **第三章：** 网络审计中的风险管理、风险评估、风险管理策略。 * **第四章：** 行业标准与治理框架、审计师的角色、审计流程。 * **第五章：** 执行网络安全审计、网络审计清单、执行AWS安全审计。 **第二部分：** * 合规性审计：ISO 27001信息安全管理体系（ISMS）。
>>About this courseThe IT Audit Fundamentals for the GRC Analyst is a course that is designed to help junior IT Professionalswho want to transition into cybersecurity. The aim is for you to use a fundamental role of the GRC profession-auditing; to aidin helping you better understand security controls implementations as a means to mitigate security risks to an organization's information security assets. >>Who this course is for?This is course is designed for the junior GRC AnalystPersons who need to understand the basics of IT AuditingPersons who want to pivot into cybersecurity>> What are the requirements for this courseAn understanding of the basic operations/functions of a computer networkBasic understanding of IT security principles>>What you'll learnIn this course you will cover the following topics:>>PART-1SECTION-1What is the main focus of the audit process?Getting started with your auditWhat is a network security audit?Why do we need a network security audit? Key concepts of network security auditingSECTION-2Understanding the fundamentals of an audit Understanding the types of auditsFoundational pillars for network auditsSECTION-3Risk management in a network audit Risk assessmentRisk management strategiesSECTION-4Industry standards and governance frameworkUnderstanding the auditor's roleUnderstanding the auditing processSECTION-5Performing a network security auditNetwork audit checklistPerforming an AWS Security audit>>PART-2Compliance Auditing ISO 27001 ISMS
