Risk assessment and treatment
Document information security risks, assess their importance, and recommend how to address them.
GRC Build-and-Defend Studio
Build practical GRC skills and a portfolio you can explain.
For career changers, cybersecurity graduates, and professionals developing GRC responsibilities or advisory skills.
Work through recorded lessons and a fictional company case to assess security risks, develop policies, and review vendors. Build work samples you can explain to employers or prospective clients.
$497
Study plan and live office hours included.
Support period: live group office hours on the second and fourth Saturday of each month, and written feedback within three working days, during your first 90 days.
Learn it. Build and defend it. Use it professionally.
Practice the work behind GRC.
Apply concepts to TechFlow Solutions, a fictional company. Assess risks, recommend safeguards, and explain the decisions behind your work.
Security policies and controls
Create policy and control work samples tied to the caseā€™s needs and risks.
Supplier risk
Review a supplierā€™s risks and prepare recommendations you can explain.
Your portfolio of twelve work samples also includes work on organizing evidence and communicating findings.
Connect your work to your next step.
Career direction: Practice explaining a risk assessment, policy decision, or vendor review in an interview or workplace discussion.
Advisory direction: Practice explaining the business problem, the information you need, your proposed deliverable, and the limits of your recommendation.
The case is organized around NIST Cybersecurity Framework 2.0 and introduces how ISO/IEC 27001 certification and SOC 2 reports fit into the information security landscape.
How it works
Move from lessons to work samples.
Learn
Watch recorded lessons and review the case information, templates, and working materials.
Build and defend
Complete guided tasks, explain your decisions, and submit your work for written feedback.
Use it professionally
Practice discussing your work in interviews, workplace conversations, or advisory discussions. Label it as simulated practice for a fictional company.
Who itā€™s for
Build a foundation for GRC work.
People new to GRC, including cybersecurity certificate holders such as Security+ or CISSP, graduates and career changers.
Be ready to read, write, make decisions, and revise your work. No coding is required. Already know ISO/IEC 27001 and want portfolio practice? See the ISO/IEC 27001 portfolios.
Included in the Studio
Lessons, portfolio work, and support.
Learning materials
- Short recorded lessons
- Templates and working materials
- Practice questions with explanations
Portfolio and completion
- Guided tasks for twelve portfolio pieces
- Six months of program access
- Tech Academy Certificate of Achievement after successful completion
- Reference letter from Dr. Shumba on request
Mentor support
- Written feedback within three working days during your first 90 days
- Live group office hours on the second and fourth Saturday of each month during your first 90 days
- Learner WhatsApp group invitation after enrollment
Your instructor
Learn with Dr. Rose Shumba.
Dr. Rose Shumba brings more than twenty years of cybersecurity education experience. She is a PECB Certified ISO/IEC 27001 Senior Lead Implementer and PECB Certified ISO/IEC 42001 Lead Implementer, and a former director of a National Security Agency and Department of Homeland Security Center of Academic Excellence in Cyber Defense.
She provides portfolio feedback and group office hours to help you strengthen your reasoning and explain your work.
Before you enroll
Frequently asked questions
Do I need GRC experience or coding skills?
No prior GRC experience or coding is required. The program begins with an introduction. You need a computer, internet access, Microsoft Word or a compatible program, and a Google account for your portfolio folder.
How long do I have, and what support is included?
The suggested pace is twelve weeks, with six months of course access. Written feedback is provided within three working days, and live group office hours are available on the second and fourth Saturday of each month during your first 90 days. Learners also receive an invitation to the WhatsApp group.
What will I build, and is it real client work?
You complete twelve portfolio pieces using TechFlow Solutions, a fictional company. The portfolio is simulated practice based on a fictional case; you build the work yourself and should identify it as simulated when sharing it.
Does this include PECB training or certification?
No. PECB training, examinations, applications, and credentials are separate purchases. Successful Studio completion earns a Tech Academy Certificate of Achievement, not a PECB certification and not a credential issued or endorsed by NIST, ISO, or IEC.
Does the Studio guarantee a job or clients?
No. The Studio supports professional development and provides simulated work samples; employment and client engagements are not guaranteed.
What is the refund policy?
All sales are final because program access opens when you enroll. Review the program details and terms before purchasing.
GRC Build-and-Defend Studio
Build work you can show. Practice explaining your decisions.
Twelve simulated portfolio pieces, recorded lessons, written feedback, and group support.
$497
TechFlow Solutions is fictional. This program does not include PECB certification training or an examination and does not guarantee employment or client engagements. All sales are final. Applicable terms apply.
