--- title: Cybersecurity Governance description: Cybersecurity governance aligns security strategies with business objectives and regulatory requirements. You will understand risk management, policy formulation, compliance, and organizational roles, enabling you to oversee and direct an enterprise-wide information security program effectively. category: programming-tech subcategory: cybersecurity difficulty: beginner, intermediate, advanced url: /subject/cybersecurity-governance --- # Cybersecurity Governance Cybersecurity governance aligns security strategies with business objectives and regulatory requirements. You will understand risk management, policy formulation, compliance, and organizational roles, enabling you to oversee and direct an enterprise-wide information security program effectively. ## Available Resources 2 Books • 1 Courses • 5 Websites ## Websites ### 1. SANS Institute Governance Papers A searchable library of free SANS Institute white papers on cybersecurity governance topics such as policy development, risk management, and compliance frameworks, written by practitioners and reviewed through the SANS Reading Room submission process. **Difficulty:** Beginner | **Price:** Free **Link:** https://www.sans.org/reading-room/?search=cybersecurity+governance **Tags:** cybersecurity-governance, whitepapers, risk-management, compliance ### 2. ISACA Cybersecurity Resources ISACA's hub for cybersecurity governance resources, including white papers, the annual State of Cybersecurity workforce survey, training courses, and certification guidance for audit, risk, and information security professionals. **Difficulty:** Beginner | **Price:** Free **Link:** https://www.isaca.org/resources/cybersecurity **Tags:** cybersecurity-governance, isaca, certification, risk-management, audit ### 3. isaca.org ISACA is a global professional association focused on information governance, cybersecurity, risk management, and IT audit. It provides guidance, frameworks (notably COBIT), research, and training, plus certifications like CISA, CISM, and CGEIT to support cybersecurity governance and IT assurance. **Difficulty:** Intermediate | **Language:** English | **Price:** Free **Link:** https://isaca.org **Tags:** websites, technology-computer-science, cybersecurity ### 4. nist.gov/cyberframework Official NIST Cybersecurity Framework hub explaining the CSF and how to use it for risk-based cybersecurity programs. It provides the framework core (Identify, Protect, Detect, Respond, Recover), implementation guidance, profiles, mappings to other standards, and downloadable resources. **Difficulty:** Intermediate | **Language:** English | **Price:** Free **Link:** https://nist.gov/cyberframework **Tags:** websites, technology-computer-science, cybersecurity ### 5. sans.org Sans.org is the official site of the SANS Institute, a leading provider of cybersecurity training and certification. It offers training courses, GIAC certifications, security research, white papers, and various resources for security professionals. **Difficulty:** Intermediate | **Language:** English | **Price:** Free **Link:** https://sans.org **Tags:** websites, technology-computer-science, cybersecurity ## Podcasts ### 1. CISO Series Podcast **Author:** David Spark, Mike Johnson, and Andy Ellis Discussions, tips, and debates from security practitioners and vendors on how to work better together to improve security for themselves and everyone else. **Difficulty:** Beginner | **Language:** en | **Price:** Free **Link:** https://cisoseries.com/ **Tags:** cybersecurity-governance, ciso, podcast, security-leadership ## Books ### 1. Cybersecurity Program Development for Business **Author:** Chris Moschovitis Chris Moschovitis, a cybersecurity consultant, walks business executives through building a cybersecurity program from risk assessment to governance roles and responsibilities, using plain language and case studies. Readers learn to evaluate organizational risk and make practical mitigation decisions. **Difficulty:** Intermediate | **Language:** English | **Price:** Paid **Link:** https://www.amazon.com/dp/111942951X?tag=edmonddante07-20 **Tags:** books, technology-computer-science, cybersecurity ### 2. Managing Cyber Risk **Author:** Ariel Evans Ariel Evans presents a three-part framework covering understanding, quantifying, and mitigating cyber risk, using ROLF (reputational, operational, legal, financial) analysis. Readers learn quantitative and qualitative methods for corporate risk oversight, prioritization, and resilience planning. **Difficulty:** Intermediate | **Language:** English | **Price:** Paid **Link:** https://www.amazon.com/dp/0367177749?tag=edmonddante07-20 **Tags:** books, technology-computer-science, cybersecurity ## Courses ### 1. Identity Protection and Governance **Author:** Microsoft Second course in Microsoft's AZ-500 exam preparation series, covering Azure AD Identity Protection, Conditional Access, multifactor authentication, Privileged Identity Management, role-based access control, Azure Policy and resource locks. Learners finish able to secure and govern identities and access in Azure subscriptions. **Difficulty:** Intermediate | **Language:** English | **Price:** Free **Link:** https://www.coursera.org/learn/identity-protection-and-governance **Tags:** identity-and-access-management, azure, conditional-access, privileged-access-management, role-based-access-control, az-500 --- *This content is part of Dantes.io - Your Treasure Map to Knowledge* *Curated by humans at Dantes.io. Personal study use welcome; republishing this curation requires permission (team@dantes.io).* View this page online: https://dantes.io/subject/cybersecurity-governance