Cybersecurity GRC Bootcamp
Become a GRC Analyst.
The live, instructor-led GRC bootcamp: twelve weekend modules from cybersecurity foundations through the NIST RMF, FedRAMP, third-party risk, SOC 2 and ISO 27001, ending in interview preparation. Built for career changers with no technical background.
Choose how you learn
One bootcamp. Three ways to take it.
3Same role-based outcome. Pick the format that fits your life. Read it at your own pace with graded feedback, watch the video track, or join the live quarterly cohort.
Instructor-led
Watch the instructor teach on video: a guided track with self-checks, per-module interview prep and a hands-on lab.
Available now in the Fourth Tech Hub
Self-paced
Read the full course in the portal at your own pace: lessons, graded quizzes and assignments your instructor reviews.
Available now in the Fourth Tech Hub
Live cohort
Real-time sessions with the practitioner on a quarterly schedule: accountable, interactive, and capped for attention. We open these as cohorts are scheduled.
Next cohort · Q1 2027
Roles this prepares you for
- GRC Analyst
- Compliance Analyst
- Information System Security Officer (ISSO)
- Third-Party Risk Analyst
- IT Auditor
Standards & references
You'll build a portfolio of
- Risk register & data classification scheme
- RMF artifacts across all seven steps
- Vendor risk assessment
- SOC 2 report review
- ISO 27001 Statement of Applicability
- Interview-ready portfolio walkthrough
The curriculum
The 12 modules
12Cybersecurity Foundations
The concepts and the landscape, assuming no technical background.
GRC and Risk Management
Governance, risk and compliance, with data governance and classification.
Compliance Landscape and Frameworks
How the frameworks relate, with FISMA and the NIST publications.
NIST RMF part 1
Prepare, Categorize and Select: boundaries, FIPS 199, 800-53 baselines.
NIST RMF part 2
Implement, Assess, Authorize and Monitor, and the artifacts each step produces.
Cloud Computing and FedRAMP
Shared responsibility, cloud boundaries, FedRAMP roles and baselines.
Third-Party Risk Management
Intake, tiering, assessing a vendor and deciding on the risk.
SOC 2 and SOC Reports
Reading a SOC 2, the trust services criteria, and what an exception means.
ISO 27001: Implementer
Scope, risk treatment, the Statement of Applicability and the controls.
ISO 27001: Auditor
Audit planning, evidence, findings and nonconformities.
Privacy and Payment Laws
GDPR, the US state patchwork and PCI DSS, and where they bite.
Interview Preparation
The language of the job, the questions, and walking through your portfolio.
Hands-on labs
You don't watch. You do.
8Next cohort · Q1 2027
Secure your seat for $3,000.
You're in as soon as you pay: the full program opens in your portal right away, to work through at your own pace. When a live cohort is scheduled you'll get its day-by-day plan and sessions as well, and cohorts are capped at 20 seats.