Prepare for GRC, IT audit, third-party risk, and security assurance interviews. Turn your experience into credible stories, explain risk and controls, handle realistic cases, and practice with structured mock interviews and scorecards. Includes 18 lessons, model answers, role-specific questions, and copyable preparation tools. Free for all members.

Free resources for GRC resumes, certifications, frameworks, interview preparation, and job searching. Start with the resume resource, then explore the sections that match your next career step. For complete study and preparation guides, open the CISA Prep Roadmap, GRC Interview Playbook, and GRC Networking Playbook in the Classroom.

Prepare for CISA with a clear 6-, 8-, or 12-week study plan. Work through all five domains, improve question reasoning, and prepare for exam day. Includes original practice questions with explanations, study tools, certification guidance, and career next steps. Free for all members. Independent preparation resource, not an official ISACA course.

Build relationships and create opportunities through friends of friends, former coworkers, creator communities, and useful work. Learn how to make introductions, follow up with purpose, ask for referrals, and turn a real need into a proposal. Includes 16 lessons, copyable messages, a 30-day plan, and practical templates. Free for all members.

Start here before beginning the GRC Career Path curriculum. This module explains how the program works, what you’ll build, how to use the community, and how to represent simulated work honestly. By the end, you’ll have a clear learning plan, a baseline assessment, and a practical outcome to work toward.

Learn what governance, risk, compliance, audit, and security assurance actually mean. This module explains the people involved, the business value of the work, and the common roles available across the field.

Learn the practical model that organizes GRC work. You’ll write clear risk statements, design controls, evaluate evidence, and distinguish exceptions from formal findings.

Learn how frameworks, standards, regulations, contracts, and assurance reports differ. You’ll examine major security references and understand how SOC 2 scope, criteria, and reporting work.

Learn how to plan, execute, document, and conclude a control test. You’ll work from the control objective through population validation, sampling, evidence review, exceptions, and remediation.

Apply the previous modules to a fictional SaaS company. You’ll scope the project, create core GRC documents, test a control, document an issue, and produce an executive summary.

Convert your simulated portfolio into honest, specific career evidence. You’ll create resume bullets, interview stories, LinkedIn positioning, and a clear explanation of your practical work.

Target roles, certifications, networking, and your 90-day plan Turn your new skills into a focused career strategy. Build a practical plan for entering or advancing within GRC. You’ll choose a target role, evaluate certifications, create a weekly job-search system, and establish a 90-day development plan.

Practice real-style GRC work through hands-on simulations. In Lab 1, you’ll test a quarterly user access review, reconcile the account population, evaluate evidence, document exceptions, reach a defensible control conclusion, and create an interview-ready portfolio project.