Cover image for Introduction to Information Security: The Security Umbrella

Introduction to Information Security: The Security Umbrella

Understand how governance, risk, assets, and controls form a security program

Wes BryanSophie GoodwinDM

Created by Wes Bryan, Sophie Goodwin, Deidre Melton

Build a clear understanding of how information security programs are structured and why each element matters. Explore governance, risk, asset protection, and controls to see how they work together to support business resilience. Gain practical insight into stakeholder roles and security strategy.

ACI | 200 min

What You Will Learn

You will start by exploring the main domains of information security and how they fit into a broader framework. Each section connects real-world responsibilities, risk management, and control design. Guided examples help you apply concepts and see how each part supports organizational goals.

Key Features

  • Recognize how governance, risk, and controls shape a security program's foundation
  • Identify key stakeholder roles and connect them to security responsibilities and oversight
  • Assess how security controls and frameworks align with business objectives and risk

Target Audience

Ideal for auditors, security professionals, compliance practitioners, and managers who want a practical foundation in information security. If you are new to security auditing or need to understand how governance, risk, and controls fit together, you will benefit from this structured, accessible overview.

Related courses

Cover image for Introduction to Information Security: Risk Management and Assurance
Cover image for Introduction to Information Security
Cover image for Introduction to Information Security: Communication
Cover image for Introduction to Information Security: Threats, Vulnerabilities, and the Security Policy
Cover image for Intermediate IT Audit School: Business Continuity, Disaster Recovery, Governance
Cover image for Cybersecurity Audit School: Auditing Cybersecurity