Governance, Risk, and Compliance

Learn NIST CSF 2.0 — the dominant cybersecurity framework for structuring and communicating security programs. By the end you can map Beacon Harbor's security program to CSF's 6 functions (Govern, Identify, Protect, Detect, Respond, Recover), understand profiles + tiers, and use CSF for executive communication.

Learn ISO 27001 (international standard, Information Security Management System) and SOC 2 (US auditor framework, Service Organization Controls). By the end you can distinguish when each applies, understand the audit cycle, and know what evidence auditors expect.

Learn to write security policies that drive behavior, pass audits, and don't become shelfware. Policy vs standard vs procedure, writing style, approval + review cycle, and the specific policies every Beacon Harbor should have.

Learn to prepare for a security audit — what evidence auditors expect, how to organize it, and how to avoid common audit failures. By the end you understand the audit cycle + can collect evidence efficiently.

Learn how CISOs communicate security to the Board — the metrics that matter, the narrative structure, and the tone that drives decisions. By the end you can draft a Board security briefing + know what NOT to include.