Cyber Security Cohort

Cyber Security Cohort : Episode 006

Risk and Compliance

In today's episode Heather Holliday continues her exploration of the world of GRC, or Governance Risk and Compliance. Heather spoke about Governance in the previous episode, so today's podcast will cover Risk and Compliance.

Click here to download the full transcript

Resources mentioned in this episode:

Information shared in this episode came from the references below and more information on these topics can be found by searching these references.

• Governance, Risk, and Compliance for CompTIA Security+ by Christopher Rees: https://www.pluralsight.com/courses/governance-risk-compliance-comptia-security-plus
• AICPA on SSAE 18: https://www.aicpa-cima.com/resources/download/aicpa-statement-on-standards-for-attestation-engagements-no-18
• Sprinto Blog on SSAE 18: https://sprinto.com/blog/what-is-ssae-18/
• NIST Cybersecurity Risk definition: https://csrc.nist.gov/glossary/term/cybersecurity_risk
• NIST CSF: https://www.nist.gov/cyberframework