Learning Path

Security Foundations

Build a strong security foundation with Zero Trust architecture, third-party risk management, and shared responsibility. Learn the core concepts needed to understand risk, strengthen security, and make informed decisions.

Here's what you'll learn:

The fundamentals of zero trust as a basis for building a security program and a third-party risk management program.
How clarifying the shared responsibility between providers and public sector clients creates a stronger security foundation for both.
The basics of building an effective third-party risk management program that is robust and doable.

Start with Security Fundamentals and build towards the other learning paths.

6 Lessons

Zero Trust Fundamentals: From Internal to Third-Party Risk

A quick primer on zero trust: how "never trust, always verify" works inside an organization, its principles and pillars, and how the same logic extends to third-party risk and GovRAMP's verify-once, monitor-always shared-assurance model.

6 Lessons

Shared Responsibility - The "Yours, Mine & Ours" of Cloud Security

Understand how security responsibilities are divided between cloud service providers and government organizations. Learn how shared responsibility supports risk management, compliance, procurement, and the secure delivery of cloud services.

10 Lessons

A Guide to Third-Party Risk Management

Gain a foundational understanding of third-party risk management, including why it matters, common risk categories, and how organizations can make informed decisions about technology partners.

Earn your certificate

Complete all of the courses and unlock your certificate