This course contains the use of artificial intelligence.

Security was added to your job. The budget and the team were not. And the CEO already wants to know one thing: are we protected? Here are 106 tools to answer: 84 ready-to-use templates, checklists, question lists and matrices, 5 models and methods and 17 working files.

Open a lecture, take the risk register, and write down your top five security risks today.

Why first security programs stall

There is no list of risks, policies are copied from the internet, access grows without control, vendors are never checked, nobody has rehearsed an incident, and the board gets a technical report it cannot read.

What changes after this course

Risks are priced and owned, policies fit the company, access is controlled with MFA, vendors and incidents have a process, and the board sees security in business terms.

What is inside: 106 tools, counted lecture by lecture

You do not have to take this number on trust. Open any lecture and read its description: every tool inside is listed there by name.

• 27 downloadable resources: lecture presentations plus 17 working files, including a risk register, a policy pack builder, a phishing drill kit and a board report builder
• 84 ready-to-use tools inside the presentations:
• 30 templates and sample documents: CISO 90-day plan, risk register, one-page security policy, security budget
• 17 checklists: security discovery, security quick wins, incident response readiness, board security communication
• 15 question lists and scripts: executive security interview, administrator security interview, vendor security questionnaire, security budget CFO pitch
• 9 scorecards, rubrics and matrices: security maturity scale, risk assessment matrix, vendor security scoring matrix, incident severity matrix
• 9 step-by-step procedures, plus 3 formulas and metric sets and 1 other working tool: CISO stakeholder discovery meetings, security policy approval, access security metrics, security awareness metrics, security standard selection decision tree
• 5 models and methods explained with examples: ISO 27001, SOC 2, CIS Controls

Where the tools are

The CISO role and risk (1 section, 18 tools). The first 90 days and the cyber risk register.

Policies and compliance (1 section, 23 tools). Security policies, ISO 27001 and SOC 2.

Access and awareness (1 section, 22 tools). Identity and access management, MFA and phishing drills.

Vendors and incidents (1 section, 27 tools). Third-party risk and the incident response plan.

Budget and board (1 section, 17 tools). The security budget, metrics and board reporting.

Who is teaching

I am Mike, the #1 HR instructor on Udemy, with 1,800,000+ course enrollments from 170,000 students, and the author of about 200 books on Amazon. I built the people system at Preply as it became a unicorn and worked at Wargaming, iDeals and Alfa-Bank across 20 years in HR. I hold PHRi, SHRM-CP and HCI sHRBP certifications and represent HRCI in Eastern Europe. I am also a founder and lead the strategy of my own academy.

I use four browsers at the same time: Google Chrome, Microsoft Edge, Safari and Opera. Sensitive things like online banking live in one browser, and the browser with many plugins and open tabs is a different one. It is a small habit, but security starts with deciding what must never sit in the same place.

How to use the course

Go through the five sections in order: each builds one part of the program. Section and lecture titles show how many tools are inside, and each lecture description lists them by name.

What is included

• 10 lectures across 5 sections, 7.5 hours
• 27 downloadable resources: lecture presentations and 17 working files
• 106 tools across the lessons
• Lifetime access to all materials
• Active instructor support in the Q&A section
• A Udemy Certificate of Completion

Where to start

Write down the one incident that would hurt your company most, then open the first section. Enrol now and start your first lesson today.