Opleidingen
55.846
resultaten
Foundation Security & Privacy: GDPR & ISO 27001
A practical introduction to two of the most influential frameworks in information security and data protection, designed for professionals who need to understand how GDPR and ISO 27001 work together to safeguard information and build trust. This course explains the purpose, structure, and core requirements of each framework, and shows how they complement one another in a well-run organization.
Participants will explore the key principles of the General Data Protection Regulation, including lawful bases for processing, data subject rights, the role of controllers and processors, international transfers, and breach notification obligations. The course also introduces ISO 27001 and its Information Security Management System, covering risk assessment, the Statement of Applicability, Annex A controls, internal audits, and continual improvement. Learners will see how ISO 27001 controls can support GDPR compliance and how both frameworks align with broader governance, risk, and compliance activities. By the end of the course, participants will be able to speak confidently about GDPR and ISO 27001 concepts, recognize common compliance obligations, and contribute effectively to privacy and security initiatives within their organization. Who it's for: Security, privacy, compliance, and operations professionals, as well as managers and founders who need a solid foundation in GDPR and ISO 27001 without prior specialist knowledge. Format: Short, self-paced modules with real-world examples, practical scenarios, and a closing knowledge check.
€189
E-Learning
Foundation Applying Generative AI in ITGC Assurance
A practical introduction to using generative AI in IT General Controls (ITGC) assurance work, designed for auditors and assurance professionals who want to strengthen their testing, documentation, and analysis with modern AI tools. This course explains how large language models work at a conceptual level, where they add value in an audit context, and how to use them responsibly within professional standards. Participants will explore practical applications of generative AI across the core ITGC domains, including access management, change management, computer operations, and system development. The course covers techniques such as prompt design, evidence summarization, control narrative drafting, sample selection support, exception analysis, and policy review. Learners will also examine the limits of generative AI, including hallucinations, bias, confidentiality risks, and data protection concerns, along with guidance on review, validation, and documentation to maintain audit quality and integrity. By the end of the course, participants will be able to identify suitable use cases for generative AI in their ITGC work, craft effective prompts, critically evaluate AI-generated output, and apply appropriate safeguards aligned with professional and regulatory expectations. Who it's for: Internal and external auditors, IT auditors, GRC professionals, and assurance practitioners who want to apply generative AI to ITGC engagements in a structured and responsible way. Format: Short, self-paced modules with hands-on examples, prompt templates, and a closing knowledge check.
€206
E-Learning
IT and IP Networking for Audit and Compliance | Foundation
A focused introduction to IP networking concepts for auditors, compliance professionals, and risk practitioners who need to assess network-based controls with confidence. This course bridges the gap between technical networking and audit practice, giving non-engineers the vocabulary and understanding required to evaluate infrastructure, review evidence, and ask the right questions during fieldwork.
Participants will explore the fundamentals of the TCP/IP model, IP addressing, subnets, ports, and protocols, along with core components such as routers, switches, firewalls, VPNs, and load balancers. The course also covers network segmentation, common security controls, logging and monitoring practices, and how these elements support frameworks like SOC 2, ISO 27001, PCI DSS, and NIST. By the end of the course, learners will be able to interpret network diagrams, understand configuration evidence, identify typical control weaknesses, and communicate effectively with IT and security teams during audits and compliance reviews. Who it's for: Internal and external auditors, GRC professionals, compliance analysts, and risk managers who need a solid grounding in networking fundamentals without a deep technical background. Format: Short, self-paced modules with practical examples, annotated diagrams, and a closing knowledge check.
€123
E-Learning
Foundation Linux Security for Audit and Compliance
A practical introduction to Linux security concepts for auditors, compliance professionals, and risk practitioners who need to evaluate Linux-based systems with confidence. This course demystifies the operating system that powers much of today's cloud and server infrastructure, giving non-administrators the knowledge required to review controls, interpret evidence, and engage meaningfully with technical teams.
Participants will explore the Linux file system, user and group management, permissions, authentication mechanisms, and privilege escalation through sudo. The course also covers key security topics such as SSH hardening, patch management, logging with syslog and journald, auditd, firewall configuration, and common hardening benchmarks like CIS and STIG, along with how these controls map to frameworks including SOC 2, ISO 27001, PCI DSS, and NIST. By the end of the course, learners will be able to navigate basic Linux environments, understand typical security configurations, identify common weaknesses, and request and interpret the right evidence during audits and compliance reviews. Who it's for: Internal and external auditors, GRC professionals, compliance analysts, and risk managers who need a solid grounding in Linux security fundamentals without a deep technical background. Format: Short, self-paced modules with practical examples, command walkthroughs, and a closing knowledge check.
€123
E-Learning
Foundation Windows Server Security Controls: Audit & Compliance
A practical introduction to Windows Server security for auditors, compliance professionals, and risk practitioners who need to evaluate Microsoft server environments with confidence. This course provides the knowledge required to review controls, interpret configuration evidence, and engage effectively with system administrators during audits and compliance reviews. Participants will explore core Windows Server concepts including Active Directory, domains, organizational units, user and group management, and Group Policy Objects (GPOs). The course covers key security topics such as authentication and authorization, privileged access, password and account policies, patching with WSUS, event logging, PowerShell auditing, BitLocker, Windows Firewall, and hardening benchmarks from CIS and Microsoft.
Learners will also see how these controls map to frameworks including SOC 2, ISO 27001, PCI DSS, NIST, and SOX. By the end of the course, participants will be able to navigate a Windows Server environment at a conceptual level, understand typical security configurations, identify common weaknesses, and request and interpret the right evidence during audit fieldwork. Who it's for: Internal and external auditors, GRC professionals, compliance analysts, and risk managers who need a solid grounding in Windows Server security without a deep technical background. Format: Short, self-paced modules with practical examples, annotated screenshots, and a closing knowledge check.
€231
E-Learning
Foundation COSO Framework
A practical introduction to the COSO Internal Control, Integrated Framework, designed for professionals who need to understand how organizations design, implement, and evaluate internal control.
This course explains the purpose, structure, and core concepts of COSO in clear, accessible terms, without assuming prior expertise in audit or risk management. Participants will explore the background and objectives of COSO, the three categories of objectives covering operations, reporting, and compliance, and the five components of internal control, including the control environment, risk assessment, control activities, information and communication, and monitoring activities. The course also introduces the 17 principles that underpin the framework, the role of entity-level and process-level controls, and how COSO supports financial reporting requirements such as SOX, as well as broader governance and risk initiatives. Learners will see how COSO relates to adjacent frameworks like COSO ERM, COBIT, ISO 31000, and ISO 27001, and how it is applied across different types of organizations. By the end of the course, participants will be able to speak confidently about COSO concepts, recognize how internal control components and principles work together, and contribute effectively to governance, risk, and control initiatives within their organization. Who it's for: Internal and external auditors, risk, compliance, and finance professionals, as well as managers and executives who need a solid foundation in the COSO framework without prior specialist knowledge. Format: Short, self-paced modules with real-world examples, practical scenarios, and a closing knowledge check.
€123
E-Learning
Expert Customer Focus & Client Management
Expert Customer Focus & Client Management An expert-level course for senior assurance, audit, and advisory professionals who are accountable for client relationships, engagement experience, and long-term account growth.
This program focuses on the advanced capabilities required to build deep, trusted partnerships with clients in complex, regulated environments where technical excellence alone is no longer enough to differentiate. Participants will work through the full client lifecycle from a relationship and experience perspective, including account planning, stakeholder mapping, value proposition design, scoping conversations, expectation management, delivery experience, and renewal and expansion. The course covers advanced topics such as managing multi-stakeholder environments with boards, executives, operational teams, and regulators, navigating competing interests across audit, advisory, and compliance mandates, handling difficult conversations on scope, fees, findings, and timelines, and building credibility with C-suite sponsors and technical owners alike. Learners will also explore client segmentation, voice-of-the-client programs, satisfaction and loyalty measurement, ethical boundaries and independence, and the use of data, automation, and generative AI to deliver more personalized and proactive client experiences. Through advanced case studies, role-play scenarios, and real-world engagement examples, participants will sharpen their ability to shape client strategy, coach their teams on client-centric behavior, recover challenging relationships, and turn strong delivery into lasting, profitable partnerships. Who it's for: Senior managers, directors, engagement partners, and practice leaders in assurance, audit, and advisory who own client portfolios and relationships and want to operate at the expert level in customer focus and client management. Format: Advanced, self-paced modules with complex case studies, role-play scenarios, templates, practical exercises, and a final capstone assessment.
€189
E-Learning
Expert SOC2 Audit
Expert SOC 2 Audit An expert-level course for senior service auditors, engagement leaders, and quality reviewers responsible for executing and signing off SOC 2 examinations.
Building on mastery of the framework, this program focuses on the advanced technical judgment, risk assessment, and engagement leadership required to deliver SOC 2 Type I and Type II reports that withstand scrutiny from user entities, user auditors, and regulators. Participants will work through the most challenging aspects of the SOC 2 lifecycle, including risk-based scoping of the system description, refining the selection and mapping of Trust Services Criteria, designing test strategies for complex cloud-native and multi-tenant environments, and evaluating the design and operating effectiveness of automated, hybrid, and manual controls. The course addresses advanced topics such as subservice organizations and carve-out versus inclusive methods, complementary user entity and subservice organization controls, sampling in high-volume and continuous control environments, evaluation of deviations and deficiencies, report modifications, and the interplay between SOC 2 and SOC 1, ISAE 3000, ISO 27001, HITRUST, and emerging AI and privacy frameworks. Learners will also examine engagement economics, quality control under AICPA and IAASB standards, independence, documentation expectations, and the leadership skills required to manage difficult client conversations and technical disagreements. Through advanced case studies, sample reports, and real-world engagement scenarios, participants will sharpen their ability to lead complex examinations, make defensible professional judgments, and mentor teams toward consistent, high-quality SOC 2 delivery. Who it's for: Senior SOC 2 practitioners, engagement partners and managers, quality reviewers, and experienced IT audit leaders who have mastered the fundamentals and want to operate at the expert level in SOC 2 examinations. Format: Advanced, self-paced modules with complex case studies, sample reports and workpapers, scenario-based exercises, and a final capstone assessment.
€206
E-Learning
Expert DORA Advisory
Expert DORA Advisory An expert-level course for senior advisors, consultants, and in-house leaders who guide financial entities and ICT providers through Digital Operational Resilience Act (DORA) implementation and ongoing compliance.
Building on mastery of the regulation, this program focuses on the advanced judgment, strategic design, and stakeholder management skills required to deliver high-impact DORA advisory work in complex, regulated environments. Participants will work through the most challenging aspects of DORA advisory engagements, including enterprise-wide scoping, proportionality assessments, and integration of DORA with existing frameworks such as NIS2, ISO 27001, NIST CSF, SOC 2, GDPR, and local supervisory expectations. The course covers advanced application of the five core pillars, including the design of mature ICT risk management frameworks, incident classification and reporting playbooks, threat-led penetration testing (TLPT) programs, third-party risk management across complex supply chains, oversight of critical ICT third-party providers, and information and intelligence sharing arrangements. Learners will also examine board and executive engagement, regulator interaction, remediation of findings, contractual negotiations with ICT providers, and the use of automation, GRC platforms, and generative AI to scale advisory delivery. Through advanced case studies, sample deliverables, and real-world engagement scenarios, participants will sharpen their ability to shape DORA strategy, lead multi-disciplinary teams, make defensible judgment calls under regulatory scrutiny, and position resilience as a driver of trust and competitive advantage. Who it's for: Senior GRC consultants, risk and resilience advisors, virtual CISOs, compliance directors, and audit professionals advising financial entities and ICT providers on DORA who want to operate at the expert level in DORA advisory and implementation. Format: Advanced, self-paced modules with complex case studies, templates, sample deliverables, scenario-based exercises, and a final capstone assessment.
€231
E-Learning
Expert ISAE 3402 Audit
An expert-level course for senior service auditors, engagement partners, and quality reviewers responsible for executing and signing off ISAE 3402 examinations. Building on mastery of the standard, this program focuses on the advanced technical judgment, risk assessment, and engagement leadership required to deliver Type I and Type II reports that withstand scrutiny from user entities, user auditors, and regulators. Participants will work through the most challenging aspects of the ISAE 3402 lifecycle, including risk-based scoping of the system description, refining control objectives and control activities, designing test strategies for complex financial reporting processes, and evaluating the design and operating effectiveness of automated, hybrid, and manual controls. The course addresses advanced topics such as multi-location and multi-service engagements, cloud-native and outsourced environments, subservice organizations and carve-out versus inclusive methods, complementary user entity controls, sampling in high-volume and continuous control environments, evaluation of deviations and deficiencies, report modifications, and the interplay between ISAE 3402 and SOC 1, SOC 2, ISAE 3000, SOX, and ISO 27001. Learners will also examine engagement economics, quality control under IAASB standards, independence, documentation expectations, and the leadership skills required to manage difficult client conversations and technical disagreements. Through advanced case studies, sample reports, and real-world engagement scenarios, participants will sharpen their ability to lead complex examinations, make defensible professional judgments, and mentor teams toward consistent, high-quality ISAE 3402 delivery. Who it's for: Senior ISAE 3402 practitioners, engagement partners and managers, quality reviewers, and experienced IT and financial audit leaders who have mastered the standard and want to operate at the expert level in service organization assurance. Format: Advanced, self-paced modules with complex case studies, sample reports and workpapers, scenario-based exercises, and a final capstone assessment.
€206
E-Learning