9 career paths, 12 bootcamps, and 50 courses & certification-prep programs. See what each one is, who it's for, and where it leads. Browse below, or download the full catalog to share or review offline.
The full catalog
9
Career paths
12
Live bootcamps
50
Courses & cert-prep
9 career paths · 12 bootcamps · 50 courses & cert-prep programs.
Guided, multi-course tracks that take you to a job-ready outcome.
Career-changers entering Cybersecurity through governance, risk & compliance, no technical background needed.
People who want to work in a Security Operations Center: monitoring, triaging alerts, and responding to incidents. A hands-on route into blue-team Cybersecurity, no prior experience needed.
Analysts, IT and audit staff who want to specialize in vendor and third-party risk management.
Those who want to build and audit an ISO 27001 ISMS: a globally recognized route into GRC and information-security management.
Those targeting federal information-system security roles, running the NIST RMF and assessing controls toward an authorization.
Analysts and audit staff who want to plan and run IT audits across NIST, ISO, SOX and COBIT.
Those targeting U.S. government and defense-contractor roles handling controlled information.
GRC professionals future-proofing into the fast-growing field of AI governance and risk.
People moving into cloud security and compliance, bringing security or IT awareness into AWS and Azure environments. A practical route that pairs cloud fundamentals with security and governance.
Cohort-based, instructor-led programs with labs and a portfolio.
A role-based bootcamp that walks you through the entire NIST Risk Management Framework, from Prepare to Monitor, building the real artifacts (SSP, SAP, SAR, POA&M) federal employers expect. Finish with a portfolio and the language of the job.
Portfolio: Mini SSP · Security categorization memo · POA&M
A hands-on bootcamp that takes you through building an ISMS end to end (scope, risk treatment, Statement of Applicability, policies and ISO 27002 controls), ready for certification and a real implementation role.
Portfolio: ISO scope statement · Risk assessment workbook · Statement of Applicability
Learn to plan and run ISO 27001 audits (clause-by-clause logic, evidence collection, finding writing and CAPA) and finish ready for internal and lead-auditor support roles.
Portfolio: Internal audit plan · Audit checklist · Findings report
Master the full third-party risk lifecycle (intake, inherent risk, vendor assessments, evidence review, decisions and monitoring) with a portfolio of real vendor work.
Portfolio: Inherent Risk Questionnaire · Vendor Risk Assessment · Vendor assessment summary
Learn IT audit end to end (planning, control testing, evidence review, findings and reporting across NIST, ISO, SOX and COBIT) and finish with an audit portfolio.
Portfolio: Audit plan · Test script · Findings memo
Prepare for defense-contractor compliance (DFARS, NIST 800-171, SSP and POA&M, the CMMC assessment process and SPRS), ready for CMMC analyst and CCP/CCA pathways.
Portfolio: CMMC readiness summary · SSP sample · POA&M sample
The bootcamp for the AI era: govern AI to NIST AI RMF, ISO/IEC 42001 and the EU AI Act, and actually use AI, hands-on, to do the work. You leave able to both certify and operate responsible AI.
Portfolio: AI system inventory · AI risk assessment (NIST AI RMF) · AI governance policy
A role-based bootcamp that takes you from cloud fundamentals to securing and governing real AWS and Azure environments: identity, posture management, encryption, logging, and mapping compliance frameworks onto the cloud. Finish with a portfolio and the language of the job.
Portfolio: Cloud architecture diagram · IAM & least-privilege design · CSPM posture review
Three flagship bootcamps in one self-paced, 6-week (42-day) program: run the full NIST RMF as an ISSO / security assessor, assess third-party vendors, then implement an ISO 27001 ISMS, with hands-on labs, three capstones, an integrated capstone, and a curated day-by-day plan.
Portfolio: ISMS package (risk register, SoA, control evidence) · SSP + POA&M + authorization summary · Vendor risk assessment + decision package
A 14-module, self-paced program covering the Epic EHR platform an Epic Analyst actually works in: clinical, revenue cycle, ancillary and pharmacy modules, the Tapestry payer side, security and access provisioning, interoperability and the interface engine, reporting, and full implementation methodology, with HIPAA and audit readiness built in throughout. Teaches Epic concepts and job-readiness skills; it does not grant official Epic Systems certification, which requires Epic-sponsored training.
Portfolio: Epic security and access-provisioning plan mapped to the HIPAA Security Rule · Interoperability (HL7/FHIR) memo · Go-live readiness checklist and post-go-live optimization plan
A 14-module, self-paced program covering all ten project management knowledge areas, the People, Process and Business Environment domains, and agile and hybrid delivery, with worked math for schedule, cost and risk and a full mock project capstone. Prepares you for the PMP exam; it does not grant the PMP credential, which is issued only by PMI after you meet their eligibility requirements and pass their exam.
Portfolio: Project charter and stakeholder register · Schedule network diagram with critical path · Earned value cost analysis
A 15-module, self-paced program covering privacy law and practice across three jurisdictions: EU GDPR in depth, UK GDPR with the Data Protection Act 2018 and the ICO, US CCPA/CPRA and the state patchwork, plus privacy program management, privacy engineering, breach response, and IAPP exam preparation. Prepares you for the IAPP exams (CIPP, CIPM, CIPT); it does not grant those credentials, which are issued only by the IAPP after you pass their exam.
Portfolio: Global privacy compliance map · Full Data Protection Impact Assessment · Cross-border transfer analysis
Short, focused certifications grouped by track. Filter by entry level or search to jump to one.
Start here, no background needed
Beginner
The core concepts, threats and defenses: your on-ramp into a Cybersecurity career.
Beginner → Intermediate
Governance, risk & compliance from the ground up: policies, risk registers, control mapping, audit readiness.
Beginner
The full 9-week, job-focused GRC bootcamp, self-paced: frameworks, RMF, IT auditing, TPRM, SOC 2, ISO 27001, a portfolio and interview prep. No technical background needed.
Specialize in the core frameworks
Intermediate
Plan and run internal audits against Annex A: scoping, evidence, findings and reporting.
Intermediate
Take an organization from gap assessment to audit-ready against the Trust Services Criteria.
Beginner → Intermediate
Control design and testing, evidence collection, and working effectively with auditors.
Intermediate
The 12 requirements, scoping a cardholder data environment, and maintaining compliance.
Beginner
Write the policies, standards and procedures that pass audits and actually get used.
Advanced
Advanced controls testing and assurance across multiple frameworks for senior audit roles.
Intermediate
The HIPAA Security and Privacy Rules in practice: safeguards, risk analysis, BAAs and breach notification for healthcare data.
Beginner → Intermediate
Use CSF 2.0 to assess and improve a security program (Govern, Identify, Protect, Detect, Respond, Recover) and build a profile and roadmap.
Manage vendors, continuity and incidents
Beginner → Intermediate
The full vendor lifecycle: due diligence, SIG/CAIQ, SOC 2 review, scoring and monitoring.
Intermediate
Design, complete and analyze security questionnaires, and turn answers into real risk decisions.
Intermediate
Build and test BCP/DR plans: business impact analysis, RTO/RPO, and recovery strategies.
Intermediate
Detection-to-reporting workflows, regulatory notification, and post-incident governance.
Data protection and securing the cloud
Intermediate
Lawful processing, data subject rights, DPIAs and building a working privacy program.
Intermediate
Shared-responsibility, cloud controls and mapping compliance across the major providers.
Intermediate
Bake security and governance into the software lifecycle, from design to deployment.
Intermediate
Meet the EU's tightening cyber rules: NIS2 for essential entities and DORA for financial services, covering scope, obligations and incident reporting.
Government and defense-contractor pathways
Intermediate
Protect CUI and prepare defense contractors for CMMC assessment against NIST 800-171.
Intermediate → Advanced
The day-to-day ISSO role: system security plans, POA&Ms, continuous monitoring.
Intermediate
Run the Risk Management Framework end to end: categorize, select, implement, assess, authorize, monitor.
Intermediate
How cloud services earn and keep a FedRAMP authorization: baselines, the SSP, 3PAO assessment, the ATO and continuous monitoring.
The future-facing and leadership tracks
Intermediate
Govern AI systems: risk, regulation, and controls for responsible, compliant AI.
Executive
Board-level cyber governance and strategic risk, for leaders accountable for security.
Beginner → Intermediate
Design awareness and phishing-simulation programs that actually change behavior.
Beginner
What LLMs really are and how to use them well: a practical, hands-on intro for non-engineers who want to work confidently with AI.
Beginner → Intermediate
Write prompts that get reliable results: draft policies, summarize evidence, and accelerate GRC work with AI, safely and repeatably.
Intermediate
Put AI to work in the real workflow: accelerate risk assessments, control mapping, audit prep and evidence review with the tools, guardrails and prompts that hold up.
Intermediate
Secure AI systems against prompt injection, data leakage, model and supply-chain risk: the practical threats behind every LLM deployment.
Intermediate
Stand up an AI Management System (AIMS) to ISO/IEC 42001: scope, AI risk, controls and the documentation an auditor expects.
Intermediate → Advanced
Assess and audit AI systems using the NIST AI Risk Management Framework: model cards, bias and robustness checks, and an AI governance evidence pack.
AWS, Azure, and securing the cloud
Beginner
What the cloud really is: the shared-responsibility model, core compute, storage and networking, and how AWS and Azure compare. No background needed.
Beginner
Prepare for the AWS Certified Cloud Practitioner exam: core AWS services, pricing, security, and the well-architected basics employers expect.
Intermediate
Design resilient, secure and cost-effective AWS architectures, and prepare for the Solutions Architect Associate exam.
Beginner
Prepare for the Azure Fundamentals exam: core Azure services, governance, pricing and cloud concepts on Microsoft's platform.
Intermediate
Manage Azure identities, governance, storage, compute and networking, and prepare for the Azure Administrator exam.
Intermediate
Secure and govern AWS and Azure: IAM, posture management (CSPM), encryption and key management, logging, CIS Benchmarks, and mapping NIST, CMMC, FedRAMP and ISO 27001 controls onto the cloud.
Beginner
Prepare for the Google Cloud Digital Leader exam: cloud value, infrastructure and app modernization, data and AI, and trust and security on Google Cloud.
Intermediate
Prepare for the Google Associate Cloud Engineer exam: deploying and managing Google Cloud resources across compute, storage, networking, IAM and operations.
Cyber investigations, OSINT, forensics and intelligence
Beginner
Your entry point into cyber investigations: lawful online research, digital evidence, OSINT and social media intelligence, and building a well-documented case. No coding required.
Intermediate
Trace illicit cryptocurrency: how blockchains and wallets work, following the money on a public ledger, lawful seizure and chain of custody, and courtroom-ready reporting.
Intermediate
A victim-centered, trauma-informed grounding in recognizing, lawfully investigating, and responding to human trafficking, with legal frameworks and victim support.
Intermediate
Prevent, assess, and respond to workplace violence: build a program, run behavioral threat assessments, investigate incidents, and meet employer legal duties.
Advanced
Use AI in investigative work responsibly: what the tools really do, where they help and fail, verifying outputs, and staying lawful and bias-aware.
Intermediate
Turn raw information into defensible intelligence: the intelligence cycle, collection disciplines, OSINT tradecraft, structured analysis, and clear reporting.
Advanced
Investigate lawfully across the open web and social platforms: OSINT and SOCMINT fundamentals, search and monitoring, safe research hygiene, and defensible documentation.
Advanced
The full craft of professional investigation: methodology, evidence and chain of custody, interviewing, specialized cases, digital tools, and courtroom readiness.
Intermediate
Read behavior to support investigations the right way: crime scene and behavioral analysis, victimology, interviewing, and expert testimony, grounded in ethics.
Beginner
Lead with integrity and influence: self-leadership, trust and credibility, developing people, sound decisions, and building a lasting, service-oriented legacy.