NIST Policy, Compliance, Security. Ready for GRC!

SEC310 Principles and Theory of Security Management is a great course along the trajectory and process that DeVry offers for the IT and Cybersecurity program. My professor Michael Cianciotta was amazing to say the least. He is definitely on the stricter side of being sure discussion posts are met and work is completed correctly and on time. Our discussion posts are very engaging in fact the Professor himself was very active in the discussions. He is adamant about the use of AI and plagiarizing by copy posting into the work and discussions. Lets be real, AI use and ChatGPT is amazing and by no means will I downplay the advantages. However, we should be doing this work ourselves to get hands on experience. I myself do use ChatGPT and pay monthly for GPT4 benefits. My work however, is my own thoughts, conclusions, summaries and done on my own, research with references.

Moving on from this, the NIST Cybersecurity Framework is provided to us to use side by side on weekly projects. These projects come with a set of questions and there are a total of 7 weekly projects with two policies to investigate with policies that are implemented today by various Government and Education organizations. Fair warning, you can do the bare minimum but what benefit will that get you?

If you are like me, you like the work provided and can find joy and meaning behind why we are doing these weekly projects. Then, you will feel like an information security policy auditor, maker, officer. By putting this thinking cap on, by all means, dive into the world of GRC. This was a great addition to my education and I am ever thankful to Professor Cianciotta for truly giving us a challenge to explore our thoughts, methods and align our mindset into the immersive world of information security. My work is on my portfolio and can be read through to give you a real feel for what challenges you are up against in taking Principles and Theory Security Management.