ALEXANDRIA, Va. — Aug. 26, 2025 — ISC2 – the world’s leading nonprofit member organization for cybersecurity professionals – today announced fourteen new Express Courses, which address emerging industry topics or trends in a one- to two-hour, self-paced format. The Express Courses make acquiring cybersecurity skills easier by providing professionals with in-depth learning experiences that fit their demanding schedules.
Recent research from ISC2 indicates that skills in cloud computing security and risk assessment, analysis and management are among the most in-demand technical capabilities needed in the cybersecurity profession. The Express Courses address this demand for new skills, focusing on these topic areas and more to help cyber professionals build and mature their expertise.
“These Express Courses are part of our commitment to empowering our members to stay ahead of trending topics and ensure they are advancing their own professional development,” said ISC2 Chief Operating Officer Casey Marks. “The flexibility of these courses enables cybersecurity professionals to continue their professional development by learning about new technologies and practices, and by identifying areas in which they require additional education.”
The new Express Courses include:
Security Education, Training and Awareness (SETA)
- Foundations of Engaging SETA: Skills for developing a robust security culture across an organization’s team beyond awareness into active learning.
- Planning a SETA Program: Considerations, resources and support structures needed to facilitate a strong security culture across an organization.
- Implementing and Reviewing SETA Programs: Ways to design, implement and assess the effectiveness of an organization’s security posture programs.
Cloud and Software Security
- Virtualization and Container Technologies in Cloud Security: A foundational course on cloud security designed for all levels of cyber professionals.
- Evaluating Cloud Service Provider Agreements and Service Level Agreements (SLAs): An exploration of how to evaluate cloud service agreements to ensure they support strategic objectives.
- Managing Stakeholders and Engaging Development Teams: An intermediate course on managing software security developers or designing cybersecurity strategy.
Governance, Risk and Compliance
- Translating Cyber Risk into Business Language for Effective Leadership: An overview of how to communicate with organizational leadership, including the board.
- Navigating Cybersecurity Frameworks: A course on understanding which cybersecurity frameworks are relevant for maintaining a particular organization’s security posture.
- CNI and OT Standards: A definition-based overview of Critical National Infrastructure (CNI) and Operational Technology (OT) and their security-related concerns.
Data Protection
- Complying with Regulations, Laws, Standards and Frameworks: A dynamic exercise to identify best practice when working toward regulatory compliance.
- Impact, Analysis and Management of Violations: An experiential look at a fictional company managing impacts of violating a privacy or data protection regulation.
- Classification, Categorization and Security of Data: Best practice for understanding data and its significance for ensuring regulatory compliance and resilience.
- Repairing Policies and Procedures: An interactive scenario of a cybersecurity team as they examine policies, procedures and documentation requirements post-breach.
- Building an Organizational Culture: Ways to secure buy-in from stakeholders across the organization, mitigate privacy risks and ensure ongoing compliance.
