Calm Resilience Security Ltd
Calm under pressure. Security by design.
GRC Analyst Launchpad
Learn ISO 27001, risk management, vendor risk, and audit by doing real-world work instead of just watching lectures.
GRC Analyst Launchpad is a hands-on training programme for entry-level cybersecurity professionals who want to become useful in Governance, Risk & Compliance from day one.
A lot of entry-level cybersecurity training still leans too hard on theory, light on real work, and leaves people unable to explain risk, support audits, or maintain useful security artefacts inside a real business.
You will practise the tasks junior GRC analysts are expected to handle in growing organisations and leave with work you can discuss credibly in interviews.
Outcomes
Why This Is Different
You work inside the fictional but realistic FinSure Payments Ltd scenario and respond to incidents, assess risks, review controls, evaluate vendors, and prepare for audit.
Every major week produces artefacts you can keep and discuss in interviews, including a risk register, SoA, policy, audit findings, and a full capstone assessment pack.
You do not need to be a penetration tester, cloud engineer, or compliance specialist to start. The structure is built for people entering GRC for the first time.
Audience
Curriculum
Understand governance, risk, compliance, and how to write clear risk statements.
Break down incidents, control failures, and real business impact.
Understand how organisations structure security through an ISMS and what ISO 27001 is asking for.
Learn how risks connect to controls, policies, and the Statement of Applicability.
Build one of the most important artefacts in GRC: a practical risk register.
Assess vendors, identify external risk, and make risk-based decisions.
Learn how controls are tested, how evidence works, and how findings are written.
Bring everything together in a full GRC assessment for FinSure Payments Ltd.
Deliverables
A professional risk register, a Statement of Applicability, a short security policy, and audit findings with recommendations.
Outputs designed to help you speak credibly about entry-level GRC work and show employers how you think.
Practical understanding of business risk, audit support, ISO 27001 readiness, and security governance delivery.
Employer Value
Employers need junior analysts who can communicate clearly, organise evidence, understand risk in business terms, support audits, and contribute to ISO 27001 and governance work. That is exactly what this programme is designed to develop.
Featured Public Work
A governance engineering prototype that turns infrastructure findings into control outcomes, risk scoring, evidence, and executive reporting.
Calm Resilience Security Ltd is positioned around practical assurance, resilient security design, and governance that holds up in real operations.
Curriculum, templates, capstones, and learner materials are intentionally separated into a private repository.
Public-safe company summaries live here. Delivery assets stay private
in grc-analyst-launchpad.
Instructor
Built by a cybersecurity and GRC practitioner with real-world experience across ISO 27001, cloud security, enterprise risk, audit support, and third-party risk in modern technology environments. This is not generic course content. It is designed around how security governance actually operates inside growing companies.
Pricing
For a limited time, the Guided programme is available at the Self-Paced price.
This is an early cohort offer as we refine the programme with our first group of learners.
Access the full 8-week programme, templates, and capstone materials.
Everything in Self-Paced, plus structured feedback on your work.
Launch Offer: £99 (normally £249)
Available for the first cohort only.
Everything in Guided, plus direct review, coaching, and interview support.
Frequently Asked Questions
No. This programme is designed to be accessible to beginners and career switchers.
No. It is broader than ISO and prepares you for junior GRC, security analyst, risk, audit-adjacent, and ISMS support roles.
Yes. Templates and structured materials are built into the programme so you can produce professional outputs.
Yes. The capstone is a full GRC simulation based on FinSure Payments Ltd.
Yes. The programme is designed to give you portfolio-quality outputs you can discuss with employers.
Final Call To Action
Learn the fundamentals, build real artefacts, and develop practical skills that employers actually value.
Enrolment
Email james.omorogbe@calmsecurity.uk to enrol or join the waitlist.
If your browser does not open an email app automatically, copy the address above and send your enquiry directly.