Skill

Compliance

Compliance ensures your organization meets regulatory and industry requirements. You'll work with frameworks like GDPR, HIPAA, PCI-DSS, and SOC 2.

Governance

Learning path

Learn major compliance frameworks, practice auditing, understand policies.

Critical for compliance officers, auditors, GRC analysts.

Map controls across two frameworks
Take ten CIS Controls safeguards and map each to ISO/IEC 27001:2022 Annex A, noting where the two don't line up. ISO/IEC 27001 is a paid standard, so check whether a library or employer can give you access.
What you'll have: A reusable crosswalk table with notes on the mismatches.
Prepare evidence for one control
Pick one control, such as quarterly access reviews, describe the evidence an auditor would ask for and produce it from your lab.
What you'll have: A small evidence pack for a single control.

ISACA

Advanced

Shows you can identify, assess and treat IT risk and design controls, with three verified years in both risk assessment and response

ISC2

Expert

Proves five years of security experience across eight broad domains, endorsed by a peer and tested on an adaptive exam of up to 150 items

ISACA

Expert

Verifies that you can run an information security program, and ISACA checks five years of security management experience before granting it

ISACA

Expert

Proves you can plan and run risk-based IT audits, and it is granted only after five years of verified audit, control or security work