Skip to main content

Compliance in The IT Landscape: IT’s Role in Maintaining Compliance

Intermediate5 Hours 11 Minutes63 Lesson Videos75 Test Questions

$99.00

Compliance in The IT Landscape shows IT staff how to turn rules such as GDPR and HIPAA into working technical controls and audit-ready evidence. It has 63 videos and runs for 5 hours 11 minutes.

  • Login details sent straight after payment
  • Self-paced. Study on any device
  • StemBoss Certificate of Completion
  • 14-day refund promise

Secure checkout. Pay by card, Apple Pay or Google Pay.

Download the course outline (PDF)

Compliance in The IT Landscape: IT’s Role in Maintaining Compliance is a course about how IT teams keep an organisation within the law and industry rules. It is for IT staff, security analysts, compliance officers and auditors who need to turn rules such as GDPR and HIPAA into real, working controls. The course runs for 5 hours 11 minutes across 63 video lessons.

What you will learn

  • Understand the main laws and standards that apply to IT, such as GDPR, HIPAA and FISMA
  • Turn a written requirement into a technical control
  • Link each control to the evidence an auditor will ask for
  • Build processes that are ready for an audit at any time
  • Run access reviews and manage exceptions properly
  • Keep clear, useful compliance records
  • Know what can happen when an organisation fails to comply

Topics covered

  • Laws and frameworks: GDPR, HIPAA, FISMA, ISO 27001, NIST controls and industry rules.
  • Identity and access management: who can reach what, and how to prove it.
  • Logging and monitoring: recording activity and spotting problems.
  • Patch and vulnerability management: keeping systems up to date.
  • Change management: controlling changes to live systems.
  • Data handling and retention: storing and deleting data the right way.
  • Incident response: acting quickly when something goes wrong.
  • Third-party oversight: checking vendors meet your standards.

Who this course is for

  • System and network administrators
  • Help desk leads and IT managers
  • Security and compliance analysts
  • Technical project managers
  • Internal auditors and GRC specialists
  • Compliance officers and risk managers

Before you start

Practical IT experience is recommended, as the course shows how rules map onto real systems. You do not need any past compliance or legal knowledge. Each rule is explained in plain terms before the course shows what it means for IT teams.

Jobs this course supports

  • Compliance analyst
  • IT controls specialist
  • GRC coordinator
  • Technical risk analyst
  • Security operations lead
  • Data protection officer

Skill level

Intermediate
Duration

5 Hours 11 Minutes
Videos

63 Lesson Videos
Questions

75 Test Questions
Prerequisites

Practical IT experience recommended. No compliance background needed.
Best for

System and network administrators, security analysts, compliance analysts, IT managers, internal auditors, GRC specialists
Topics covered

GDPR, HIPAA, FISMA, ISO 27001, NIST frameworks, Access management, Logging and monitoring, Incident response
Format

Online video lessons, self-paced
Language

English
Closed captions

Yes
Certificate

StemBoss Certificate of Completion

What is inside this course

16 modules and 63 lessons. Here is the full outline.

Module 1 - IT Compliance Introduction2 lessons
  1. 1.1 Introduction to the IT Role in Compliance
  2. 1.2 Overview of Regulations
Module 2 - General Data Protection Regulation (GDPR)4 lessons
  1. 2.1 Overview of GDPR
  2. 2.2 Ensuring and Implementing GDPR Comp
  3. 2.3 - Penalties and Repercussions for GDPR Non-Compliance
  4. 2.4 - GDPR Extra References
Module 3 - Health Insurance Portability and Accountability Act (HIPAA)4 lessons
  1. 3.1 - Overview of HIPAA
  2. 3.2 - Ensuring and Implementing HIPAA Compliance
  3. 3.3 - Penalties and Repercussions for HIPAA Non-Compliance
  4. 3.4 - HIPAA Extra Resources
Module 4 - Federal Information Security Management Act (FISMA)4 lessons
  1. 4.1 - Overview of FISMA
  2. 4.2 - Ensuring and Implementing FISMA Compliance
  3. 4.3 - Penalties and Repercussions of FISM Non-Compliance
  4. 4.4 - FISMA Extra Resources
Module 5 - Sarbanes-Oxley Act (SOX)4 lessons
  1. 5.1 - Introduction to SOX
  2. 5.2 - Ensuring and Implementing SOX Compliance
  3. 5.3 - Penalties and Repercussions for SOX Non-Compliance
  4. 5.4 SOX Extra References
Module 6 - Payment Card Industry Data Security Standard (PCI DSS)4 lessons
  1. 6.1 - Overview of PCI DSS
  2. 6.2 - Ensuring and Implementing PCI DSS Compliance
  3. 6.3 - Penalties and Repercussions for PCI DSS Non-Compliance
  4. 6.4 - PCI DSS Extra References
Module 7 - Cybersecurity Maturity Model Certification (CMMC)4 lessons
  1. 7.1 Introduction to CMMC and Its Purpose
  2. 7.2 Ensuring and Implementing CMMC Compliance
  3. 7.3 Repercussions for CMMC Non-Compliance
  4. 7.4 CMMC Extra References
Module 8 - California Consumer Privacy Act (CCPA)4 lessons
  1. 8.1 Overview of CCPA
  2. 8.2 Ensuring and Implementing CCPA Compliance
  3. 8.3 Penalties and Repercussions for CCPA Non-Compliance
  4. 8.4 CCPA Extra References
Module 9 - ISO/IEC 27001 Compliance4 lessons
  1. 9.1 Overview of ISO/IEC 27001
  2. 9.2 Ensuring and Implementing ISO/IEC 27001 Compliance
  3. 9.3 Repercussions for ISO/IEC 27001 Non-Compliance
  4. 9.4 ISO/IEC 27001 Extra References
Module 10 - Children's Online Privacy Protection Act4 lessons
  1. 10.1 Children's Online Privacy Protection Act (COPPA)
  2. 10.2 Ensuring and Implementing COPPA Compliance
  3. 10.3 Penalties and Repercussions for COPPA Non-Compliance
  4. 10.4 COPPA Extra References
Module 11 - NIST Cybersecurity Framework (CSF)4 lessons
  1. 11.1 Overview of NIST CSF
  2. 11.2 Ensuring and Implementing NIST CSF Compliance
  3. 11.3 Repercussions for NIST CSF Non-Compliance
  4. 11.4 NIST CSF Extra References
Module 12 - Gramm-Leach-Bliley Act (GLBA)4 lessons
  1. 12.1 Overview of GLBA
  2. 12.2 Ensuring and Implementing GLBA Compliance
  3. 12.3 Penalties and Repercussions for GLBA Non-Compliance
  4. 12.4 GLBA Extra References
Module 13 - ISO 22301 Business Continuity Management4 lessons
  1. 13.1 Overview of ISO 22301
  2. 13.2 Ensuring and Implementing ISO 22301 Compliance
  3. 13.3 Repercussions for ISO 22301 Non-Compliance
  4. 13.4 BCM Extra References
Module 14 - Cloud Security Alliance (CSA) CCM4 lessons
  1. 14.1 Overview of CSA CCM
  2. 14.2 Ensuring and Implementing CSA CCM Compliance
  3. 14.3 Repercussions for CSA CCM Non-Compliance
  4. 14.4 CSA Extra References
Module 15 - Family Educational Rights and Privacy Act4 lessons
  1. 15.1 Overview of FERPA
  2. 15.2 Ensuring and Implementing FERPA Compliance
  3. 15.3 Penalties and Repercussions for FERPA Non-Compliance
  4. 15.4 FERPA Extra References
Module 16 - Digital Millennium Copyright Act (DMCA)5 lessons
  1. 16.1 Overview of DMCA
  2. 16.2 Ensuring and Implementing DMCA Compliance
  3. 16.3 Penalties and Repercussions for DMCA Non-Compliance
  4. 16.4 DMCA Extra References
  5. 16.5 - IT Compliance Course Closeout

Your learning path

Where Compliance in The IT Landscape: IT’s Role in Maintaining Compliance fits. Build your skills one step at a time.

Take firstData Security ComplianceTake firstMicrosoft SC-900: Security, Compliance & Identity Fundamentals
You are hereCompliance in The IT Landscape: IT’s Role in Maintaining Compliance
Next stepCertified Information Systems Auditor (CISA)Next stepCertified Information Systems Security Professional (CISSP)

Frequently asked questions

Which regulations does this course cover?

It covers GDPR, HIPAA and FISMA, along with standards and frameworks such as ISO 27001 and NIST controls, plus other industry rules.

Do I need a legal or compliance background?

No. Practical IT experience is recommended, but you do not need any prior compliance knowledge.

Will this help me prepare for an audit?

Yes. A core theme is building audit-ready processes and linking each control to the evidence an auditor will expect.

Does it lead to a certification?

It is not tied to one exam, but it is useful groundwork for certifications such as CISA, CISSP or CIPP.

How long is the course?

It has 63 video lessons with a total running time of 5 hours 11 minutes, plus 75 test questions.

Do I get a certificate?

Yes. You get a StemBoss Certificate of Completion when you finish the course.

Can I get a refund?

Yes, within 14 days if you have completed less than 20% of the course. See our refund policy for details. Read the refund policy.

Related courses

$99.00
Buy course