GRC Analyst Fundamentals: Controls to Evidence

Three weeks ago we sat in the SOC. Then we took a target from recon to shell, and last week we ran both sides of the same attack. Tonight we move to the seat that decides what all of that work has to prove.

GRC stands for governance, risk and compliance. It's where a requirement on paper turns into something a team actually does, and where somebody has to show the evidence that it got done. It's also a real way into cyber for people who don't want to live on the command line.

We'll take one control from NIST SP 800-171, the standard behind CMMC, and follow it all the way through: what it asks for, how a company puts it in place, what an assessor wants to see, and what happens when the evidence isn't there.

This one is network-wide. HQ in the DMV, Atlanta, and South Florida on the same call.

🎯 What We'll Cover
- What a GRC analyst and an ISSO actually do all day
- One control, start to finish: the requirement, the implementation, and the evidence
- The documents that run a security program: the SSP, the POA&M, and the risk register
- The certs on this path (CRISC, CGRC) and where to start without experience

Hosted by Tyrone E. Wilson, founder of Cover6 Solutions, 30 years in IT and cybersecurity.

📺 Watch live on YouTube: https://youtu.be/g9B6P_outYs
📝 Get a head start: read the companion article on our blog before the session: https://www.cover6solutions.com/grc-analyst-fundamentals/

🧭 Find your path
- Not sure GRC is your lane? Take the free career path assessment: https://www.cover6solutions.com/career-path/
- Prep for the certs on this path:
• CRISC: https://www.cover6solutions.com/product/isaca-crisc-certified-in-risk-and-information-systems-control-practice-exam/
• CGRC: https://www.cover6solutions.com/product/isc2-cgrc-certified-in-governance-risk-and-compliance-practice-exam/
- Browse every Cover6 course: https://www.cover6solutions.com/courses/

📬 Get The 6, our free weekly cybersecurity brief, every Monday: https://www.cover6solutions.com/the6/
🔗 Every Cover6 link in one place: https://www.cover6solutions.com/links/

🎤 Want to speak at a future meetup? https://sessionize.com/cover6community

Rep the community → https://www.cover6solutions.com/product/cover6-shield-unisex-t-shirt/
Grab a Cover6 Shield tee and show up repping the community that helped get you here.

🤝 Hiring entry-level security talent, or want your brand in front of people building into this field? Sponsorship and hiring conversations start at info@cover6solutions.com