Back to all courses
Intermediate
Compliance Mastery
HIPAA, PCI DSS, NIST CSF, and ISO 27001 — understand the frameworks, implement the controls, and pass your audits with confidence. Built from real compliance engagements our team has led.
6 weeks18 modulesCertificate included
What You'll Learn
Map your organization against HIPAA, PCI DSS, NIST CSF, and ISO 27001 requirements
Develop compliant policies, procedures, and documentation from scratch
Implement technical and administrative controls for each framework
Prepare for and pass compliance audits with confidence
Build a risk assessment and mitigation strategy
Create employee training programs that satisfy compliance requirements
Manage vendor risk and third-party compliance
Generate audit-ready reports and maintain ongoing compliance
Full Curriculum
18 modules · Self-paced · Hands-on labs included
1
Introduction to Compliance
Why compliance mattersRegulatory landscapeCost of non-compliance
2
HIPAA Fundamentals
Privacy RuleSecurity RuleBreach notificationBusiness associates
3
HIPAA Implementation
Risk analysisAdministrative safeguardsTechnical safeguardsPhysical safeguards
4
PCI DSS Overview
The 12 requirementsScope and segmentationSAQ typesCompliance levels
5
PCI DSS Implementation
Network security controlsCardholder data protectionAccess controlMonitoring and testing
6
NIST Cybersecurity Framework
IdentifyProtectDetectRespondRecover
7
NIST CSF Implementation
Framework profilesImplementation tiersGap analysisAction planning
8
ISO 27001 Foundations
ISMS overviewAnnex A controlsCertification processDocumentation requirements
9
ISO 27001 Implementation
Risk treatmentStatement of applicabilityInternal auditsManagement review
10
Policy Development Workshop
Acceptable use policiesData classificationIncident response policyRemote work policy
11
Risk Assessment Methodology
Asset identificationThreat modelingVulnerability assessmentRisk scoring and prioritization
12
Technical Controls Deep Dive
Encryption standardsAccess managementLogging and monitoringNetwork segmentation
13
Vendor Risk Management
Third-party assessmentsContract requirementsOngoing monitoringVendor scorecards
14
Employee Training Programs
Security awareness trainingRole-based trainingPhishing simulationsTraining documentation
15
Audit Preparation
Evidence collectionControl testingRemediation planningAuditor communication
16
Compliance Reporting
Dashboard creationExecutive reportingBoard presentationsContinuous monitoring
17
Multi-Framework Alignment
Mapping controls across frameworksUnified compliance programEfficiency strategies
18
Capstone: Compliance Program Build
Full compliance program designPeer reviewPresentationFinal assessment
Prerequisites
- Basic understanding of cybersecurity concepts (or completion of Cybersecurity Fundamentals)
- Familiarity with your organization's IT infrastructure
- Access to your organization's current policies (if any exist)
- No prior compliance experience required
Who This Course Is For
This course is designed for IT professionals, business leaders, and team members who want practical, hands-on cybersecurity skills they can apply immediately in their organization.
View Pricing & EnrollNext courseThreat Detection & Response