Who decides?
Set direction, assign responsibility and ask for evidence that decisions are working.
YOUR FIELD GUIDE TO CYBERSECURITY GRCFind your way.
Find your way.
Build your
understanding.
Make sense of governance, risk and compliance, one useful idea at a time. Learn the foundations, connect them to real decisions, and put your knowledge into practice.
Free editorial lessons · Traceable sources · No fixed study schedule
THE LEARNING ATLAS01 — FIND YOUR WAY
GOVERNANCE / RISK / COMPLIANCEEXPLORE AT YOUR PACE ↗
30connected lessons
269glossary entries
855scenario questions
2credential preparation paths
MAKE THE LANGUAGE USEFULThree lenses.
Three lenses.
Better questions.
GRC helps people make decisions about what matters, what could happen and what obligations apply. Start with the questions behind the terminology.
What could happen?
Connect uncertainty to objectives, consider consequences and choose a response.
What must we meet?
Understand applicable obligations and use evidence to assess whether they are fulfilled.
A ROUTE THROUGH THE MATERIAL
See all learning routes A clear next step.
Build your security foundations
A guided sequence for ISC2 Certified in Cybersecurity: core concepts, everyday decisions and AI applications.
ISC2 CCExplore the path
Connect security to an ISMS
Continue to the selected ISO/IEC 27001:2022 Foundation route, with free preparation and visible paid-course gaps.
PECB FoundationExplore the path
FOLLOW YOUR CURIOSITY
Explore the connections.
Eight modules connect everyday computing to access, resilience, AI and the management system around them.
01
Think in assets, objectives and risk
Build the language of security, connect it to decisions, and make claims that the evidence can support.
02People, resilience and useful evidence
Explore behaviour, disruption and measurement through a small fictional service.
03Control identity and access
Separate identity evidence from permissions, then follow access from joining to leaving.
04Connect systems safely
Understand names, addresses, trust boundaries, wireless systems and cloud responsibilities.
05Protect data and understand activity
Choose suitable protection, interpret records and use threat information without overstating what it proves.
06Respond, maintain, test and apply AI
Use evidence to respond and improve, then apply the same foundations to AI systems.
07Build an information security management system
Connect context, leadership, risk, support and operation in the selected ISO/IEC 27001:2022 route.
08Evaluate, improve and prepare
Learn audit and corrective-action reasoning, understand the two credential routes, and turn practice into feedback.
KNOWING A WORD IS THE BEGINNINGNow put it
Now put it
in context.
Practise with workplace scenarios. Check the explanation, follow the evidence and revisit the ideas that need another look.
Try the scenario quiz855 editorial questions · Counts and personal practice ranks
A QUESTION FROM THE PRACTICE BANK
A payroll report is sent to an unauthorised supplier. Its numbers remain accurate, and the payroll service continues working.
Which objective was directly breached?
Reveal the reasoning
Confidentiality. The stated problem is unauthorised disclosure. Accuracy and access when needed are separate objectives, even though a real incident might affect several of them.
See the primary-source basisFictional scenario. This preview does not add to your quiz score.
READ WITH A SOURCE IN VIEWCurated. Connected.
Curated. Connected.
Open to inspection.
Follow named readings from standards bodies, government agencies, exam issuers and original professional authors. Reading scopes, older-source limits and remaining gaps stay visible.
Among the referenced publishersNISTISC2ISOPECBNCSCEDPB
THE NEXT LAYER OF UNDERSTANDINGMake the reading
Explore applied learningMake the reading
work for you.
Nineteen targeted guides connect free primary readings to concrete tasks, explained model guidance and visible remaining needs. Trace a packet, review AI evidence, or build an ISMS paper portfolio.
Eight introductory material needs supplied · Nine partly addressed · Two official needs open