Srida IT Consulting & Services · Live Online · Weekend Batch · Starts 21 November 2026

GRC 22-Day Mastery Program — Weekend Batch

Five frameworks, one spine. Master GRC, ISO/IEC 27001, NIST CSF 2.0, GDPR and ITGC in 22 live weekend sessions — built for people who work weekdays.

GRC → ISO 27001 → NIST CSF → GDPR → ITGC

22 live sessions · weekendsSat & Sun · 2 hours a day100% Remote · live on Zoom5 frameworks, one spineVerifiable certificate

₹25,000₹7,500

All-inclusive · 22 sessions + certificate

Enrol & Pay ₹7,500 →Join the WhatsApp group

The batch begins 21 November 2026 (Saturday & Sunday, 2 hours a day). Join the WhatsApp group for the schedule, updates and to ask questions before you enrol.

Why this program

Five frameworks that finally fit together

Most courses teach one framework in isolation. GRC works the other way: the same risks and controls run under ISO 27001, NIST CSF, GDPR and ITGC. This program teaches that one spine first, then shows how each framework expresses it — so you stop memorising and start connecting, and you can hold a conversation across all of them.

One risk-and-controls spine

Governance, risk assessment and control testing — the ideas every framework shares.

Five frameworks, connected

GRC, ISO 27001, NIST CSF 2.0, GDPR and ITGC — enough of each to apply and audit the basics.

Built for working weekends

Two focused sessions a week, live and recorded, with a capstone and interview readiness.

The 22-session journey

From GRC foundations to an integrated audit

Module 1 · GRC Core (Sessions 1–4)

S1	What GRC really is	Governance, risk and compliance as one operating model; the three lines; roles and accountability.
S2	Risk fundamentals	Assets, threats, vulnerabilities and exposure — the language every framework shares.
S3	Risk assessment & registers	Run an assessment and build asset-based and process-based risk registers.
S4	Controls, treatment & compliance	Preventive/detective/corrective controls, treatment decisions, monitoring and the compliance view.

Module 2 · ISO/IEC 27001 (Sessions 5–9)

S5	The ISMS	Context, scope, leadership and objectives — the management system itself.
S6	Risk assessment & the SoA	ISO risk assessment and treatment, and the Statement of Applicability.
S7	Annex A — organisational & people	The governance, HR and supplier control themes, in practice.
S8	Annex A — physical & technological	Access, cryptography, logging, change and the technical control set.
S9	Audit & certification	Internal audit, management review and the road to certification.

Module 3 · NIST CSF 2.0 (Sessions 10–13)

S10	CSF 2.0 + the Govern function	The framework's structure and the new Govern function at its centre.
S11	Identify & Protect	Asset, risk and supply-chain visibility; the safeguards that reduce exposure.
S12	Detect & Respond	Finding events quickly and running an effective response.
S13	Recover + Profiles & Tiers	Restoring capability, and using Profiles and Tiers to drive improvement.

Module 4 · GDPR (Sessions 14–18)

S14	Scope, principles & lawful bases	Who GDPR binds, the processing principles and the lawful grounds.
S15	Data-subject rights	Access, erasure, portability and the rest — handled operationally.
S16	Controller/processor duties & RoPA	Obligations, data-processing agreements and the record of processing.
S17	DPIA, privacy by design & the DPO	Running a DPIA, building protection in, and the DPO role.
S18	Transfers, breaches & the DPDPA crosswalk	International transfers, breach response, and how GDPR maps to India's DPDPA.

Module 5 · ITGC & Integrated Audit (Sessions 19–22)

S19	ITGC overview + access management	What IT general controls are, and the access controls auditors test first.
S20	Change management & SDLC	Controlled change and secure development controls.
S21	IT operations, backup & incident	Operations, job scheduling, backup/recovery and incident handling.
S22	Testing ITGC + capstone	Test controls, gather evidence, run a mock integrated audit — then your certificate.

22 sessions · two 2-hour live sessions each weekend · Saturday & Sunday, from 21 November 2026. (Order may adjust for public holidays.)

Who it’s for

Weekend learners building GRC mastery

✓Working professionals who can only learn on weekends
✓IT, security, audit and operations staff moving into GRC
✓Compliance, risk and privacy professionals widening their range
✓Graduates and career-changers building a strong GRC foundation
✓Anyone preparing for GRC, ISO or privacy roles and interviews

What you’ll be able to do

Outcomes by the end

✓Explain governance, risk and compliance as one connected discipline
✓Run a risk assessment and build a defensible risk register
✓Navigate an ISO/IEC 27001 ISMS and read a Statement of Applicability
✓Apply the NIST CSF 2.0 functions (Govern, Identify, Protect, Detect, Respond, Recover)
✓Apply GDPR principles, rights and obligations — with the India / DPDPA lens
✓Recognise and test IT general and application controls
✓Gather evidence and run a mock integrated audit
✓Speak confidently across five frameworks in interviews and audits

Weekend Batch · Starts 21 November 2026

One fee. Five frameworks. 22 sessions.

₹25,000₹7,500

all 22 live sessions · recordings · a verifiable certificate on completion

Enrol & Pay ₹7,500 Join the WhatsApp group

Saturday & Sunday · 2 hours a day · Live on Zoom · from 21 November 2026

Good to know

Questions

How do I enrol, and what's the fee?

The all-inclusive fee is ₹7,500 (regular ₹25,000) for all 22 live sessions plus a verifiable certificate. Enrol and pay on the enrolment page, or join the WhatsApp group and our team will help you.

Do I need a background in GRC or IT?

No. We build the context as we go. Some IT, audit or compliance familiarity helps, but it isn't required.

Is it live, and are sessions recorded?

Every session is live on Zoom and recorded. Recordings are shared so you can catch up and revise anytime.

Five frameworks in 22 sessions — how deep does it go?

This is a connected practitioner foundation: enough of GRC, ISO 27001, NIST CSF 2.0, GDPR and ITGC to apply the basics, pass interviews and know where to go deeper. They're taught on one shared risk-and-controls spine, so they reinforce each other.

What certificate do I get?

A verifiable Certificate of Achievement from Srida IT Consulting and Services Pvt. Ltd. on completion. It recognises practical capability; it is not a government or accredited certification, and it is not legal advice.

Program content is educational and does not constitute legal advice. Frameworks (ISO/IEC 27001, NIST CSF 2.0, the EU GDPR, and IT general controls) are referenced for teaching; confirm the current text and your specific applicability before relying on anything for compliance. Certificate of Achievement issued by Srida IT Consulting and Services Pvt. Ltd.