Exam-prep training for CISA

FreeWebinar

BrightTALKLive

Trends from Hyperproof's 2024 IT Risk and Compliance Benchmark Report

Is your IT risk and compliance program ready for 2024 and beyond? For the last five years, Hyperproof has asked over 1,000 GRC professionals about their pain points, IT risk and compliance budgets, staffing, risk management best practices, and much more. We then compare results from the previous year, and provide an in-depth view of the market’s current state in our annual benchmark report. The 2024’s IT Risk and Compliance Benchmark report highlights a fascinating change in the overarching narrative of cybersecurity: respondents and key stakeholders from other departments are thinking about cybersecurity compliance as a key competitive differentiator rather than just a cost center. Join Hyperproof and ISC2 April 9, 2024 at 1:00 p.m. Eastern/10:00 a.m. Pacific to learn: -How unifying risk and compliance data affected survey respondents’ ability to mitigate risk, improve cybersecurity, and avoid breaches -Key trends for cybersecurity in 2024 -How the market has responded to AI risks in 2023 and how cybersecurity professionals plan on leveraging AI in 2024 -Why cybersecurity decision-making is becoming more collaborative with an integrated view of risk and compliance data.

FreeWebinar

BrightTALKLive

Everything You Need to Know about CGRC

Governance, risk and compliance (GRC) professionals play a vital role in organizations, aligning IT goals with objectives as they manage cyber risks and achieve regulatory needs. Learn how CGRC certification demonstrates that you have the knowledge and skills to integrate governance, performance management, risk management and regulatory compliance within an organization. Join us to learn more about: - What is GRC? - Why is GRC important for cybersecurity? - What are the core global frameworks? - How is GRC relevant in every industry? - What is the pathway to CGRC? Save your spot today! Moderator: Brandon Dunlap Panelists: AJ Yawn, Partner in Charge, Product and Innovation Mohamed Malki, Director, Enterprise Security Architecture Chris Stanley, Exam Content Developer

CISA~1CISM~1

RecordingAired May 31, 2024

FreeWebinar

BrightTALKLive

Everything You Need to Know about CGRC in North America

Governance, risk and compliance (GRC) professionals play a vital role in organizations, aligning IT goals with objectives as they manage cyber risks and achieve regulatory needs. This webinar talks about governance, risk and compliance globally, as well as specific core frameworks in the North American region. Get answers to these questions and more: - What is GRC? - Why is GRC important for cybersecurity? - What are the core frameworks for the North American Region? - How is GRC relevant in every industry? - What is the pathway to CGRC? Learn how CGRC certification demonstrates that you have the knowledge and skills to integrate governance, performance management, risk management and regulatory compliance within an organization. Register today! Panelists: AJ Yawn, Partner in Charge, Product and Innovation Mohamed Malki, Director, Enterprise Security Architecture Chris Stanley, Exam Content Developer Moderator: Brandon Dunlap

CISM1.5CISA~1.5CISSP~1.5

RecordingAired May 31, 2024

FreeWebinar

BrightTALKLive

From Vulnerability Management to Exposure Management: Evolution or Revolution?

Vulnerability management has been a staple of security teams for decades. But if you haven’t noticed, this space has evolved considerably in recent years. Long gone are the days of lengthy, hard-to-digest vulnerability scanning reports often created to check the PCI compliance checkbox. These days, smart IT security teams are investing in exposure management platforms and embracing best practices to help prioritize which vulnerabilities to remediate first based on a variety of internal and external factors. Join Steve Piper, Founder & CEO of CyberEdge (and proud CISSP), as he: - Recaps the evolution from VA, to VM, to RBVM, to exposure management - Defines key elements of modern-day exposure management platforms - Reviews internal and external factors to help prioritize vulnerability remediation - Summarizes the extraordinary benefits derived from exposure management deployments - Describes what to look for when evaluating best-of-breed exposure management offerings

CISSP1.5CISA~1.5CySA+~1.5

RecordingAired May 31, 2024

FreeWebinar

BrightTALKLive

Ransomware and Third-Party Global Supply Chains: Understanding & Mitigating Risks

CDK. Colonial Pipeline. UnitedHealth Group. What do all these companies have in common? They have all been subject to recent headline-making cyberattacks impacting the global product supply chain. Cyber incidents such as these can wreak havoc – preventing orders/payments, interrupting service, and in some cases cause detriment to human health and safety. There is no way to ignore that the vast majority of businesses rely on third-party partnerships to maintain their day-to-day operations. From a business perspective, third-party partnerships are seen as ways of reducing costs, creating efficiencies and enhancing access to goods and service. From a cyber perspective, they must be viewed as another threat surface. If your third-party partner is attacked – your data and business may be impacted as well. Join this panel of experts as they discuss and debate: · The underlying causes of most supply chain cybersecurity failures. · How to assess how secure your partners are against cyberattacks. · The value of strong business continuity procedures. · Success stories/case studies in reducing third party cyber risk exposure.

CISSP1CISM1CISSP-ISSMP~1+1 more

RecordingAired Oct 3, 2024

FreeWebinar

BrightTALKLive

How to Ensure Your SOC is Built for Tomorrow’s Threats

The cybersecurity landscape is evolving at an unprecedented pace, and organizations must ensure their Security Information and Event Management (SIEM) solutions don’t merely keep up with emerging threats and compliance requirements but also provide room to adapt and grow. In this exclusive webinar, Sumo Logic will share insights on navigating SIEM implementation and optimization in a growing, cloud-first world. Learn why a modern SIEM is the cornerstone of an effective security practice, how to log critical data efficiently, and what’s the horizon for security operations. Key Takeaways: - Essential SIEM capabilities to secure your organization from evolving cyber threats. - Strategies to increase fidelity, scale security operations, and improve resilience. - How to streamline security monitoring and compliance reporting.

CySA+1CISSP~1CISM~1+1 more

RecordingAired Jun 7, 2025

FreeWebinar

BrightTALKLive

The Workforce Under Pressure: Burnout, Skills Gaps and Organizational Risk (#1)

Cybersecurity professionals are under more pressure than ever—with 90% of teams reporting skills gaps, 67% facing staffing shortages, and burnout rising across roles. In this opening session, we reveal the latest workforce data from ISC2, CyberSN and Cybermindz to unpack the human and operational impacts of today’s talent crisis. Speakers will explore how stress, role ambiguity, and unsustainable workloads are accelerating risk—both personal and organizational—and introduce the concept of mental resilience as an essential component of operational readiness. Attendees will gain insights into identifying burnout risks in themselves and their teams, along with practical guidance for setting healthier boundaries at work.

CISM~1CISA~1

RecordingAired Oct 20, 2025

FreeWebinar

BrightTALKLive

Certified in Governance, Risk and Compliance (CGRC) Info Session

Join us for a deep dive into Certified in Governance, Risk and Compliance (CGRC), the governance, risk and compliance credential from ISC2, creator of the CISSP. The CGRC is an information security practitioner who champions system security commensurate with an organization’s mission and risk tolerance, while meeting legal and regulatory requirements. CGRC, a vendor-neutral cybersecurity credential, recognizes your knowledge, skills and abilities to authorize and maintain information systems within the RMF. It proves you know how to formalize processes to assess risk and establish security documentation. CGRC is particularly well-suited for IT, information security and cybersecurity practitioners who manage risk in information systems. It is also recommended for any practitioner involved in authorizing and maintaining information systems. In this 60-minute live virtual session, you’ll learn: - If CGRC is right for you - How Official ISC2 Training flexes with your learning style - What to expect on exam day - How to become endorsed and maintain your certification Plus! Get answers to your CGRC questions during the Q&A section. Register now and begin your CGRC certification journey today!

CISM~1CISA~1

RecordingAired Mar 12, 2026

FreeCourse

CourseraSelf-paced

Vulnerability Assessment and Management

This program equips cybersecurity professionals, IT teams, and system administrators with the foundational knowledge and practical skills needed to identify, analyze, and remediate vulnerabilities across modern enterprise environments. You’ll start by understanding the vulnerability assessment lifecycle, exploring how weaknesses emerge in networks, systems, and web applications, and learning the principles behind risk, exposure, and exploitability. Next, you’ll dive into hands-on vulnerability assessment techniques, using tools such as Nmap, Nikto, and open-source scanners to perform host discovery, service enumeration, and web application checks. You’ll learn how to validate findings, classify severity using structured scoring methods, and document vulnerabilities effectively for organizational reporting. You’ll then advance into vulnerability management, where you’ll design patching workflows, apply configuration hardening practices, automate remediation tasks, and perform post-fix validation. You will also learn how to build governance processes, track metrics, and create dashboards that support long-term risk reduction and audit readiness. By the end of this program, you will be able to: - Explain the core concepts of vulnerability assessment and the full assessment lifecycle. - Distinguish between vulnerabilities, threats, risks, and exploits in enterprise environments. - Conduct network and web vulnerability scans using open-source tools such as Nmap and Nikto. - Validate scan results, classify vulnerabilities, and prioritize remediation using risk-based scoring. - Implement patch management, configuration hardening, and automated remediation techniques. - Design and document a vulnerability management program aligned with governance requirements. - Create consolidated reports and dashboards to track vulnerabilities and support compliance. This course is designed for cybersecurity engineers, SOC analysts, network administrators, DevOps practitioners

CySA+2Security+1.5PenTest+~1.5+2 more

AlwaysAvailable

FreeCourse

Cybrary3 hrSelf-paced

Practical Detection Engineering with Sigma Rules

How to author, test, and tune Sigma detections that survive contact with reality. Covers ATT&CK alignment, false-positive triage, and a CI pipeline for detections-as-code.

CySA+3CISA~3Security+~3

AlwaysAvailable

FreeCourse

TryHackMeSelf-paced

SOC Level 1 — TryHackMe Learning Path

Hands-on learning path on TryHackMe covering SOC Level 1. Self-paced sequence of practical rooms with live attacker/defender labs. Some rooms are free; full path access included in a TryHackMe subscription.

CySA+20Security+20CISA~15

AlwaysAvailable

FreeCourse

TryHackMeSelf-paced

Advanced Endpoint Investigations — TryHackMe Learning Path

Hands-on learning path on TryHackMe covering Advanced Endpoint Investigations. Self-paced sequence of practical rooms with live attacker/defender labs. Some rooms are free; full path access included in a TryHackMe subscription.

CySA+8Security+~6CISA~5

AlwaysAvailable

FreeCourse

TryHackMeSelf-paced

SOC Level 1 (Legacy) — TryHackMe Learning Path

Hands-on learning path on TryHackMe covering SOC Level 1 (Legacy). Self-paced sequence of practical rooms with live attacker/defender labs. Some rooms are free; full path access included in a TryHackMe subscription.

CySA+3Security+3CISA~2

AlwaysAvailable

FreeVendor training

Microsoft Learn1 hr 19 minSelf-paced

Implement and manage Microsoft 365 retention and recovery

Retention helps organizations meet compliance requirements and manage the lifecycle of data in Microsoft 365. This learning path shows how to configure retention labels and policies, apply them with adaptive scopes, and recover deleted content in Microsoft 365 workloads. It aligns with exam SC-401: Microsoft Information Security Administrator.

Azure Security Engineer Associate (AZ-500)1.25CISM~1.25CISA~1.25

AlwaysAvailable

FreeVendor training

Microsoft Learn1 hr 34 minSelf-paced

Audit and search activity in Microsoft Purview

Logging actions and locating content are essential for investigating events, supporting compliance efforts, and maintaining transparency. Microsoft Purview provides audit and content search capabilities to help organizations understand what actions were taken and find specific items across Microsoft 365 services. This learning path aligns with exam SC-401: Microsoft Information Security Administrator.

CISA1.5CISM~1.5CCSP~1.5

AlwaysAvailable

FreeCourse

PluralsightSelf-pacedNewly added

Azure Assets Security Auditing Best Practices

Azure Assets Security Auditing Best Practices — Pluralsight course. Visit the course page for full details, prerequisites, and pricing.

Azure Security Engineer Associate (AZ-500)2CISA~1.75Azure Administrator Associate (AZ-104)~1.5

AlwaysAvailable

Exam-prep training for CISA

Opportunities

Trends from Hyperproof's 2024 IT Risk and Compliance Benchmark Report

Everything You Need to Know about CGRC

Everything You Need to Know about CGRC in North America

From Vulnerability Management to Exposure Management: Evolution or Revolution?

Ransomware and Third-Party Global Supply Chains: Understanding & Mitigating Risks

How to Ensure Your SOC is Built for Tomorrow’s Threats

The Workforce Under Pressure: Burnout, Skills Gaps and Organizational Risk (#1)

Certified in Governance, Risk and Compliance (CGRC) Info Session

Vulnerability Assessment and Management

Practical Detection Engineering with Sigma Rules

SOC Level 1 — TryHackMe Learning Path

Advanced Endpoint Investigations — TryHackMe Learning Path

SOC Level 1 (Legacy) — TryHackMe Learning Path

Implement and manage Microsoft 365 retention and recovery

Audit and search activity in Microsoft Purview

Azure Assets Security Auditing Best Practices

Other ways to filter CISA opportunities