Compliance Courses

Dragos: ICS Cybersecurity

Achieving OT Network Visibility and Detective Controls for NERC CIP Compliance

Explore NERC CIP standards, balancing technology for resilient operations, cybersecurity, and compliance. Learn to choose optimal OT solutions and understand unique operating models for effective implementation.

• YouTube
• 1 hour 16 minutes
• On-Demand
• Free Video

Dragos: ICS Cybersecurity

NERC CIP Reliability Standards - New Requirements and Compliance Strategies

Explore NERC CIP Reliability Standards updates, including new incident reporting requirements, virtualization considerations, and control center communication changes for enhanced electric sector cybersecurity.

• YouTube
• 1 hour 4 minutes
• On-Demand
• Free Video

Compliance Audit - How to Make Your Next Audit Less Awful - Compliance by Default

Learn strategies to streamline compliance audits, reduce stress, and implement "Compliance by Default" practices for more efficient and effective security processes.

• YouTube
• 31 minutes
• On-Demand
• Conference Talk

Compliance Audit - Assessing POS Devices for Tampering

Learn to assess POS devices for tampering, understand skimming attacks, and implement effective tampering assessment programs to protect against breaches and ensure compliance with PCI standards.

• YouTube
• 40 minutes
• On-Demand
• Conference Talk

Compliance and Security - Building a Cybersecurity Risk Management Program

Develop a comprehensive cybersecurity risk management program balancing legal compliance, operational impact, and client needs through effective communication and strategic planning.

• YouTube
• 41 minutes
• On-Demand
• Conference Talk

Security vs Compliance in Healthcare

Explore healthcare security challenges, compliance issues, and practical solutions for protecting sensitive data and systems in medical environments.

• YouTube
• 47 minutes
• On-Demand
• Conference Talk

Future of Information Security Governance Risk and Compliance

Explore the future of InfoSec governance, risk management, and compliance with industry experts Max Aulakh and Bill Lisse, offering insights on emerging trends and best practices.

• YouTube
• 48 minutes
• On-Demand
• Conference Talk

OSPOs and Engineering Effectiveness - Beyond Compliance to Innovation

Explore how OSPOs at Amazon and Volvo go beyond compliance, creating opportunities for developers and enhancing engineering effectiveness through automation, innovation, and external engagement.

• YouTube
• 49 minutes
• On-Demand
• Free Video

InSpec Compliance as Code

Explore InSpec for compliance-as-code, learning how to automate security and compliance testing in infrastructure and applications.

• YouTube
• 35 minutes
• On-Demand
• Conference Talk

Amazon Web Services;  Amazon

Cloud for Risk and Compliance Executives

Explore cloud computing's impact on risk management and compliance, enhancing governance programs, adapting functions, and facilitating business transitions for executives in risk, compliance, and security roles.

• AWS Skill Builder
• On-Demand
• Free Certificate

Public Cloud PCI Compliance - Challenges and Solutions

Explore cloud security challenges, PCI compliance in public clouds, and innovative approaches to enhance security posture and meet regulatory requirements.

• YouTube
• 56 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

Enforcing Supply Chain Security and Simplifying Compliance Audit for ArgoCD Deployments

Explore techniques for securing supply chains and simplifying compliance audits in ArgoCD deployments using open-source tools like Guac, Sigstore, and in-toto.

• YouTube
• 20 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

Malicious Compliance Automated: Building Secure Containers and Obfuscating Content

Explore container image compression techniques, secure image building, and obfuscation methods to reduce attack surfaces and disrupt vulnerability scanners. Learn automation and Linux kernel interfaces for enhanced security.

• YouTube
• 33 minutes
• On-Demand
• Free Video

CNCF [Cloud Native Computing Foundation]

Cloud Native Governance, Risk, and Compliance - Policy-as-Code Applications

Explore policy-as-code's role in security, admission control, and automated compliance auditing. Learn how to implement governance across diverse environments for comprehensive risk management.

• YouTube
• 40 minutes
• On-Demand
• Free Video

Security BSides San Francisco

Startups: SOC 2 Now or Later - Evaluating Compliance Timing

Explore the strategic timing of SOC 2 compliance for startups, weighing immediate costs against long-term benefits in building trust and market credibility.

• YouTube
• 30 minutes
• On-Demand
• Free Video