This course has been certified by the CPD Certification Service as conforming to continuing professional development principles. Find out more.

Integrate NIST and ISO standards into cyber governance programmes

Managing multiple cybersecurity standards doesn’t have to be overwhelming. This course shows you how to integrate NIST and ISO cybersecurity standards into one cohesive, practical governance strategy that actually works.

You’ll develop hands-on experience creating risk registers, control mappings, incident response playbooks, and audit documentation that meet global compliance needs. You’ll follow a structured 16-step blueprint that takes the complexity out of cybersecurity governance.

Plan your governance programme and assessing risks

Understand how to scope your organisation’s cybersecurity governance, identify risks, and tailor controls based on ISO and NIST frameworks. You’ll learn to map governance gaps and priorities using hands-on tools and templates you can take back to your workplace.

Implement cybersecurity controls that maintain resilience

Explore the step-by-step process for deploying technical controls, business continuity plans, and privacy safeguards that maintain security resilience and compliance. You’ll gain practical skills in documenting workflows, automating processes, and planning incident responses.

Level up your programme

Learn to evaluate how effective your governance programme really is through audits, incident reviews, and metrics. Discover how to automate compliance workflows and continuously improve your security posture to meet evolving challenges and emerging threats.

You may like to undertake more sustained study on this topic through our ExpertTrack: Cyber Governance, Risk, Law & Leadership Pathway.

Syllabus

Week 1
Governance Planning & Scoping
- Lesson 1: Course Introduction
  Learn a 16-step blueprint to unify ISO and NIST standards. Gain skills in risk assessment, control mapping, cloud/privacy safeguards, and incident response to build an audit-ready governance program.
- Lesson 2: Purpose-Driven Governance
  Define ISMS success criteria, align cybersecurity goals with business strategy, and select governance tools. This lesson sets the foundation for a structured and measurable program.
- Lesson 3: Scoping and Context Definition
  Learn to define ISMS boundaries and organisational context by analysing processes, documents, and external drivers to ensure accurate, standards-aligned scoping.
- Lesson 4: Leadership Engagement & Role Assignment
  Explore how to gain executive sponsorship, build strong communication, and assign roles using RACI matrices to embed governance accountability across teams.
Week 2
Risk Assessment & Control Tailoring
- Lesson 5: Risk Identification and Prioritisation
  Master ISO 27005 and NIST SP 800-30 methods to identify threats and conduct risk analysis. Learn to define risk thresholds, categorise vulnerabilities, and develop registers aligned with governance objectives.
- Lesson 6: Control Selection and Mapping
  Use mapping tools to customise ISO Annex A and NIST CSF controls based on organisational risks. Learn how to justify selected controls for audit readiness and regulatory alignment.
- Lesson 7: Cloud and Privacy Integration
  Understand how to integrate cloud security (ISO 27017, NIST 800-144) and privacy safeguards (ISO 27701, NIST Privacy Framework) into governance structures. Learn to document and apply control mappings effectively.
Week 3
Governance Implementation
- Lesson 8: Continuity & Recovery Planning
  Develop skills to create and implement business continuity and disaster recovery plans. Learn to align organisational recovery capabilities with ISO 22301 and NIST CSF Recover for enhanced incident preparedness.
- Lesson 9: Technical & Awareness Controls
  Implement technical security frameworks using ISO/NIST standards. This lesson also covers security awareness training programs to build a security-conscious culture.
- Lesson 10: Patch & Vulnerability Management
  Establish a vulnerability and patch management program that ensures timely identification and remediation of security flaws using ISO 30111 and NIST SP 800-40.
Week 4
Monitoring, Auditing & Continuous Improvement
- Lesson 11: Incident Response Readiness
  Build your IR program using ISO 27035 and NIST SP 800-61. This lesson guides learners in planning response roles, escalation paths, and execution protocols.
- Lesson 12: Performance Monitoring & Auditing
  Establish performance metrics using ISO 27004 and NIST tiers. Learn to build audit-ready dashboards and evidence repositories to validate ISMS compliance.
- Lesson 13: Governance Automation & Optimisation
  Use AI to automate evidence collection and monitoring. Learn to reuse control outputs and embed continuous improvement into your ISMS.
- Lesson 14: Course Conclusion
  Apply risk-driven controls, integrate safeguards, and ensure audit readiness while driving continuous improvement in cybersecurity governance.

Who is this accredited by?

The CPD Certification Service:

The CPD Certification Service was established in 1996 and is the leading independent CPD accreditation institution operating across industry sectors to complement the CPD policies of professional and academic bodies.

When would you like to start?

Start straight away and join a global classroom of learners. If the course hasn’t started yet you’ll see the future date listed below.

Available now
Join - $69

Learning on this course

On every step of the course you can meet other learners, share your ideas and join in with active discussions in the comments.

What will you achieve?

By the end of the course, you‘ll be able to...

Analyze your organization’s risk landscape to scope and map controls, governance gaps and priorities.
Implement automated workflows using a 16-step blueprint to integrate cloud security and privacy safeguards. 
Evaluate control effectiveness by applying incident response and continual improvement. 
Create a fully audit-ready cybersecurity governance program.

Who is the course for?

This course is ideal for CISOs, cybersecurity managers, governance, risk and compliance officers, IT governance architects, and privacy specialists who want to enhance their organisation’s governance maturity.

Who will you learn with?

Paul Siegel

Who developed the course?

Starweaver

Starweaver is a next generation platform that engages your workforce as no other. Combining business and technical skills, Starweaver provides real-time skill building that is in line with your business objectives and strategies, and in your associates day to day tasks and jobs.

What's included?

This is a premium course. These courses are designed for professionals from specific industries looking to learn with a smaller group of like-minded individuals.

Unlimited access to this course
Includes any articles, videos, peer reviews and quizzes
Certificate of Achievement to prove your success when you're eligible
Download and print your Certificate of Achievement anytime

Join - $69

Still want to know more? Check out our FAQs

Learning on FutureLearn

Your learning, your rules

Courses are split into weeks, activities, and steps to help you keep track of your learning
Learn through a mix of bite-sized videos, long- and short-form articles, audio, and practical activities
Stay motivated by using the Progress page to keep track of your step completion and assessment scores

Join a global classroom

Experience the power of social learning, and get inspired by an international network of learners
Share ideas with your peers and course educators on every step of the course
Join the conversation by reading, @ing, liking, bookmarking, and replying to comments from others

Map your progress

As you work through the course, use notifications and the Progress page to guide your learning
Whenever you’re ready, mark each step as complete, you’re in control
Complete 90% of course steps and all of the assessments to earn your certificate

Want to know more about learning on FutureLearn? Using FutureLearn