Foundational courses in governance, risk and compliance (GRC) and secure software development help professionals build essential knowledge and context for integrating security into organizational decision-making and the software lifecycle

Alexandria, Va., May 6, 2026 ISC2 – the world’s leading nonprofit member organization for cybersecurity professionals – today announced the launch of two foundational courses, Foundations of Governance, Risk and Compliance (GRC) and Foundations of Software Lifecycle Development and Security, available exclusively on Coursera. Designed for current and aspiring IT and cybersecurity professionals, as well as those new to the field, the courses establish a shared foundation of concepts, objectives and frameworks, helping learners understand how organizational needs drive governance and compliance decisions and how security and privacy are incorporated throughout the software development lifecycle.

The latest ISC2 Cybersecurity Workforce Study found that 95% of organizations report at least one cybersecurity skills need, with governance, risk and compliance (GRC) ranking among the top 10 cybersecurity skills needs. At the same time, ongoing skills shortages are compounding organizational risk, driving misconfigured systems (24%), assigning security responsibilities to underqualified staff (25%) and leaving parts of organizations under secured (24%).

Delivered through a flexible, global platform, the beginner-level courses require no prerequisites and help professionals build a solid baseline understanding of how security and privacy align to business objectives, enabling employers to develop stronger, more security-aware teams.

Through the Governance, Risk and Compliance course, ISC2 helps professionals learn how:

  • Relate GRC principles, responsibilities, and activities to frameworks, regulations and organizational requirements
  • Identify the purpose and components of scoping and connect requirements, policies, management practices and systems capabilities that influence control decisions
  • Identify key steps and best practices for implementing security and privacy controls
  • Summarize elements of controls assessment and audit controls, including documentation, monitoring and activities that support ongoing compliance

The Software Lifecycle Development and Security course helps professionals:

  • Connect core security concepts and objectives to software development, including frameworks that support secure software architecture and design
  • Explain how security practices, as well as security and privacy requirements, are incorporated throughout the software development lifecycle, including managed development processes
  • Identify common techniques and considerations for secure testing deployment, operations and maintenance, as well as software acquisition and supply chain security

ISC2 offers several courses via Coursera and its global network of partners, ensuring cybersecurity professionals at all stages of their careers have convenient access to the most relevant, up-to-date course content developed by ISC2.

For more information on ISC2 courses, visit here.

+++

About ISC2

ISC2 is the world’s leading member organisation for cybersecurity professionals, driven by our vision of a safe and secure cyber world. Our more than 265,000 certified members, and associates, are a force for good, safeguarding the way we live. Our award-winning certifications – including cybersecurity’s premier certification, the CISSP® – enable professionals to demonstrate their knowledge, skills and abilities at every stage of their careers. ISC2 strengthens the influence, diversity and vitality of the cybersecurity profession through advocacy, expertise and workforce empowerment that accelerates cyber safety and security in an interconnected world. Our charitable foundation, the Center for Cyber Safety and Education, helps create more access to cyber careers and educates those most vulnerable. Learn more, get involved or become an ISC2 Candidate to build your cyber career at ISC2.org. Connect with us on XFacebook and LinkedIn.

© 2026 ISC2 Inc., ISC2, CISSP, SSCP, CCSP, CGRC, CSSLP, HCISPP, ISSAP, ISSEP, ISSMP, CC, and CBK are registered marks of ISC2, Inc.

Media Contact

Amanda Steinman
Senior Corporate Communications Manager
ISC2
asteinman@isc2.org