Governance, risk & compliance Training Courses

Five-day bootcamp covering all ISACA CISA domains: IS audit, IT governance, systems lifecycle, IT operations, and asset protection. Delivered by practitioners involved in IT audits and standards work. Combines exam practice and structured review for first-attempt readiness.

ISO 37301 has shifted compliance from a legal function to a governance capability. This training prepares professionals to design, implement, and sustain a compliance management system that withstands regulatory scrutiny and operational reality.

This course prepares you for the PECB ISO 31000 Risk Manager certification exam, the globally recognised credential for risk management professionals.

Prepares professionals to lead digital operational resilience programs in financial entities under EU DORA. Covers ICT risk governance, incident reporting, third-party oversight, and demonstrating regulatory compliance. For financial sector leaders responsible for DORA implementation.

This three-day course teaches you how to conduct and manage management system internal audits in line with ISO 19011 guidance and related best practices. You learn internal audit concepts, auditor competence and behavior, and common requirements across management system standards.

This course equips compliance and governance professionals to manage the transition from ISO 37001:2016 to ISO 37001:2025 with precision and confidence. Rather than restating the standard, it focuses on what has materially changed and how those changes affect real ABMS implementations.

Prepares professionals to lead projects under the ISO 21502:2020 framework with clarity and accountability. Covers governance, stakeholder integration, risk, and steering projects from initiation to closure. For those responsible for outcomes in complex organizational environments.

This 5-day course prepares participants to perform the full operational role of a Data Protection Officer, from structuring a GDPR compliance program to managing personal data breach responses. European regulatory enforcement has intensified since 2023, with supervisory authorities issuing fines exceeding 4.2 billion EUR cumulatively, making formal DPO competence a measurable organizational risk control. Organizations frequently appoint DPOs who lack documented methodology for records of processing activities, DPIA triggers, or nonconformity treatment. Abilene's trainers hold active DPO mandates and bring real incident files into every session. Designed for compliance managers, privacy consultants, information security leads, and professionals transitioning formally into the DPO function.

This four-day course develops the skills needed to implement, manage, and improve SOC 2 compliance programs. It explains the SOC 2 framework and Trust Services Criteria, then guides participants through scoping, risk management, policy development, and control implementation.

This four-day course prepares you to plan, conduct, and lead audits of Compliance Management Systems (CMS) based on ISO 37301:2021. It builds audit competence using recognized principles and practices aligned with ISO 19011 and the certification process described in ISO/IEC 17021-1.

This course prepares experienced professionals to lead audits of Anti bribery Management Systems aligned with ISO 37001:2025. Participants develop the capability to evaluate real control environments, test anti bribery measures, and issue defensible audit conclusions.

This training prepares professionals to design and operationalize an Anti Bribery Management System aligned with ISO 37001:2025. Participants move beyond policy writing to address real bribery risks, third party exposure, and enforcement expectations.

This training prepares professionals to lead risk management as a decision-making discipline, not a compliance exercise. Grounded in ISO 31000, the course focuses on how organizations actually identify uncertainty, evaluate trade-offs, and protect value in complex environments.

This course prepares participants to establish, implement, and manage AI governance that complies with the EU AI Act and the data access and sharing rules of the EU Data Act. Organizations must classify each AI system by risk, document their assessments, and keep human oversight in place, yet many still cannot say whether the regulation applies to their own use cases. Abilene Academy links each obligation to a concrete deliverable, from system classification through to the compliance file. Participants work through the regulation in the order it applies, so every decision they make maps to a requirement a regulator can test. The course suits compliance leads, legal and data protection professionals, technical teams, and executives who must make AI systems compliant and defensible.

This course prepares participants to identify, assess, and treat emerging risks using ISO/TS 31050 guidance within the ISO 31000 risk management process. Traditional risk registers assume risks are known and quantifiable, yet emerging risks surface as weak signals with unclear probability, speed, and impact, leaving many risk functions unable to act before escalation. Boards increasingly ask risk and resilience teams to explain exposure to AI adoption, climate volatility, and geopolitical shifts before these risks materialize into losses. Abilene Academy trainers are active risk consultants who translate ISO/TS 31050 clauses into a working risk intelligence cycle rather than a compliance checklist. The course suits risk managers, resilience leads, and governance professionals who need a structured method for uncertain, evolving risk.