SKILL ROADMAP 72 · ADVANCED AND EMERGING PATHS

Cybersecurity Compliance

Security basics → Legal duties → Sector rules → Standards → Incident response → Compliance programme

Track your progress

This roadmap has 6 steps, 3 checkpoints and 2 projects.
Open the interactive version to tick checkpoints and projects. Your progress is saved in your browser.

1 What this path is

Cybersecurity compliance is about the legal duties organisations have to protect their systems and data and to respond properly to incidents.

The work involves working with security teams, regulators and compliance documentation.

Learn security basics.
Learn: common threats such as phishing, ransomware and data leaks.
Practise: by explaining each to a non technical reader.
Learn legal duties.
Learn: the IT Act, the CERT-In directions of 2022 and security safeguards under the DPDP framework.
Practise: by charting reporting duties and timelines.
Learn sector rules.
Learn: cybersecurity frameworks issued by RBI, SEBI and IRDAI for regulated entities.
Practise: by comparing two sector frameworks.
Learn standards.
Learn: widely used standards such as ISO/IEC 27001.
Practise: by mapping one legal duty to a standard control.
Learn incident response.
Learn: the legal steps after an incident, from reporting to notifying affected people.
Practise: by preparing an incident response plan.
Build a compliance programme.
Learn: policies, audits and training.
Practise: by drafting an information security policy outline.

You advise on cybersecurity compliance and incidents independently.

These checklists are for honest self assessment. They are not an official certification.

Cybersecurity and privacy teams at firms and companies.

Plans and charts.