Compliance Programme Hub
Guide a business through ISO 27001, SOC 2, CMMC, PCI DSS, HIPAA, GDPR and AI governance with eight structured stages.
Build your compliance programme CYBERSECURITY · GOVERNANCE · EDUCATION
Stronger security.
More capable people.
I help organisations build practical cybersecurity and GRC programmes, design meaningful InfoSec curricula, and develop the people who put them to work.
Business-focused advicePractical learningUseful working tools
Curriculum developer · EducatorMeet Richea
19 yearsIT & information security experience
23,000+Learners across my Udemy courses
5,600+Reviews across my Udemy courses
View instructor profile (opens in a new tab)Public profile · checked October 2026
THE FREE CYBERJA TOOLKIT
Choose your goal.
Start with a practical tool.
Guided tools for organisations improving their security and practitioners building skills. Explore the full toolkit or choose a starting point below.
PRACTICAL CYBERSECURITY & GRCFREE TO USE
Twelve connected
business workspaces.
Assess access, vulnerabilities, suppliers, audits, privacy, cloud security and more. Follow professional guidance, link business evidence and download CyberJA-branded working documents.
Step-by-step guidanceWord · Excel · PDF downloads
Explore the connected workspaces Cybersecurity Practice Lab
Work through data security, impact analysis, network design, cloud protection, monitoring and forensic investigation.
Start your Cybersecurity JourneyTurn your work into a CV.
Bring documented completed tasks into your skills and project sections, then review and personalise your resume.
Build your professional CVKeep your business ready.
Use CyberJA Continuity to develop BCP and DR plans around your business processes and the systems they depend on.
RTO & RPO prioritiesProcess & system dependenciesPrivacy & reputation protectionPlaybooks & exercise schedules
Your FREE BCP & DR Tool (opens in a new tab)
Free to use. Your planning information stays in your browser.
Find your gaps.
Build your next move.
Practise twelve workplace decisions in governance, risk, compliance and leadership. Find your next step in Cybersecurity & GRC.
About 5 minutesNo email required
Take Your FREE Cyber Career Roadmap Assessment
WHAT YOU’LL TAKE AWAY
- A skills profile across governance, risk, compliance and leadership.
- Industry in-demand Learning priorities
- A relevant CyberJA course to explore at your own pace.
HOW I CAN HELP
Practical expertise.
Business impact.
For organisations building stronger security, institutions developing relevant curricula, and professionals growing their skills.
ADVISORY & CONSULTATIONSMake governance
Make governance
work for your business.
Connect security decisions to business objectives. Understand your risks, clarify accountability, and build governance practices your organisation can put to work.
Discuss your GRC priorities (opens in a new tab)Risk & readiness
Risk assessments, maturity reviews, and a clear view of your priorities.
IAM governance
Access approvals, lifecycle workflows, reviews, and accountability.
Policies & controls
Practical policies, procedures, and control guidance aligned to your context.
Audit & assurance
Evidence preparation, gap analysis, and prioritized remediation planning.
CYBERSECURITY PROGRAM DEVELOPMENTTurn security goals
Turn security goals
into a working program.
Build a program around your business assets, risks, and operational needs. Bring people, processes, and technology together with clear ownership and achievable priorities.
Discuss your security program (opens in a new tab)Understand your exposure
Identify critical assets, business dependencies, and security gaps.
Strategy & roadmap
Define objectives, responsibilities, and a phased implementation plan.
Build operational capability
Develop control practices, incident response plans, and awareness activities.
Measure & improve
Use reporting, reviews, and remediation tracking to guide ongoing improvement.
INFOSEC CURRICULUM DEVELOPMENTDesign learning
Design learning
that becomes capability.
Give learners a clear path from understanding concepts to applying them. Develop structured InfoSec curricula for educational institutions, training providers, and organisational teams.
Discuss a curriculum project (opens in a new tab)Learning architecture
Audience needs, learning outcomes, module sequencing, and delivery plans.
Instructor & learner resources
Lecture materials, workbooks, teaching guides, and supporting templates.
Business scenarios & labs
Hands-on activities that connect security concepts to real business problems.
Meaningful assessment
Quizzes, practical tasks, grading rubrics, and learner feedback tools.
PRACTICAL LEARNINGBuild skills you
Build skills you
can put to work.
Explore self-paced courses or discuss a workshop built around your team’s goals. Apply cybersecurity and GRC concepts through practical examples, assessments, and guided discussion.
IDENTITY & ACCESSEffective IAM Governance:
Practical Assessments for
Effective IAM Governance:
A Practical Approach
Workflows, lifecycle management, and governance in practice.
View course on Udemy (opens in a new tab)ASSESSMENTS & ASSURANCEPractical Assessments for
Cybersecurity & GRC Professionals
Develop a practical approach to assessing security and GRC.
View course on Udemy (opens in a new tab)SECURITY ARCHITECTUREPractical Zero Trust Implementation
Readiness, strategy, and implementation in cloud and on-premises environments.
View course on Udemy (opens in a new tab)Practical. Business-focused. Built around your context.
SELECTED WORK & APPROACH
See what practical
looks like.
Examples of the frameworks, learning materials and structured thinking I bring to an engagement.
01 / GOVERNANCE
Access requestApproval & least privilegeReview & revocation
IAM GOVERNANCE
Accountability across the access lifecycle.
A practical approach to onboarding, access approvals, role design, access reviews and offboarding.
Explore the sample approach
Illustrative teaching scenario
A new finance analyst needs access to financial reports. The manager confirms the business need; the data owner approves a suitable role; IT provisions access after policy checks.
- Record the request, approver, role and purpose.
- Check least privilege and conflicting duties.
- Review access when responsibilities change.
- Revoke access at departure and retain evidence.
02 / PROGRAM DEVELOPMENT
01Assess
02Prioritise
03Implement
CYBERSECURITY PROGRAMS
Business risk turned into a working roadmap.
Connect critical assets, risk decisions, control ownership and reporting in a manageable security program.
Explore the sample approach
Illustrative 90-day starting plan
- Days 1–30: agree scope, identify critical services, assess risks and assign owners.
- Days 31–60: prioritise controls, define responsibilities and address urgent gaps.
- Days 61–90: exercise response plans, review evidence and establish management reporting.
The schedule is adapted to each organisation’s risk, resources and starting point.
Discuss your program (opens in a new tab)03 / CURRICULUM DESIGN
Concepts22 hoursPractical labs8 hours
Understand · Apply · Assess
INFOSEC EDUCATION
From foundational concepts to practical judgement.
A 30-hour Cybersecurity Principles and Fundamentals learning plan built around business scenarios and practical tasks.
Explore the curriculum example
Teaching and curriculum example
Progress through cybersecurity fundamentals, threats, security principles, networks, operating systems, tools, risk and incident response, legal and ethical issues, and emerging technologies.
Learners connect assets, vulnerabilities, threats, business impact and controls through scenarios, guided labs, quizzes and assessment rubrics.
Discuss a curriculum project (opens in a new tab)These are sample approaches and teaching examples, rather than named client case studies.
HOW WE WORK TOGETHER
A clear path.
A useful outcome.
Whether we are shaping a security program or a learning experience, we start with what you need to achieve.
- 01
Understand your need
Discuss your business, audience, priorities and current challenges.
- 02
Agree the scope
Define the outcomes, deliverables, responsibilities and timeline together.
- 03
Develop the solution
Build practical guidance, program materials or learning resources around your context.
- 04
Support application
Walk through the deliverables and agree how progress and improvements will be reviewed.
COURSES & WORKSHOPS
Learn it.
Put it to work.
Build practical capability in governance, assessments and security implementation, at your own pace or with guided instruction.
Effective IAM Governance: A Practical Approach
Develop lifecycle workflows, access approvals and governance practices across cloud environments.
View course (opens in a new tab)Practical Assessments for Cybersecurity & GRC Professionals
Connect evidence, security gaps and business risk through structured assessment practice.
View course (opens in a new tab)Practical Zero Trust Implementation
Explore readiness, strategy and implementation in cloud and on-premises environments.
View course (opens in a new tab)LEARNING FOR YOUR TEAM
Discuss a workshop (opens in a new tab)A workshop built around your goals.
Discuss instructor-led sessions in IAM governance, risk assessment, GRC or cybersecurity fundamentals, with relevant scenarios and practical activities.
CONNECT LEARNING TO YOUR NEXT CREDENTIAL
Explore certification pathways Explore your certification pathway.
See how CyberJA courses and tools support 17 certification options, with official guidance and clear additional study needs.
RESOURCES FOR YOUR NEXT STEP
Learn the ideas.
Put them into practice.
Download useful working resources, watch a practical introduction and explore the official frameworks behind your learning.
Build skills you can use at work.
Explore free practical tools to start your cyber journey or strengthen your existing expertise.
PDF guideCyber Career Guide
Understand common roles, essential skills and where to start.
Get the free resource
Excel workbookRisk Assessment Template
Practise identifying risks, assessing impact and recommending controls.
Get the free resource
PDF checklistIAM Governance Checklist
Review access approvals, excessive permissions and employee offboarding.
Get the free resource
PDF guide · Word edition10 Foundational Cybersecurity Tools
Build practical skills with ten tools, learning exercises and a CyberJA course catalogue with workplace context.
Download the free PDF guideDownload the Word edition
Practical learning with Richea
YouTubeFRAMEWORKS & STANDARDS TO KNOW
Explore the foundations behind practical Cybersecurity & GRC skills.
MEET RICHEA
Industry experience.
A teacher’s perspective.
I bring cybersecurity, governance and education together to help organisations and learners move forward with clarity.
My work spans IT and information security across the petroleum, hospitality and education sectors. I connect technical controls to business priorities, and make complex concepts accessible through practical scenarios and structured learning.
As a consultant, curriculum developer, instructor and CyberJA podcast host, I focus on useful outcomes: clearer accountability, stronger security programs and people who can apply what they learn.
Professional & teaching background
Background listed on my consultation profile (opens in a new tab) and instructor profile (opens in a new tab).
FEEDBACK & PUBLIC REVIEWS
Confidence through
practical guidance.
Consultation feedback and course reviews reflect different experiences. Explore each at its source.
Praised the professionalism and knowledge shared during the session.
Srinivas Bakki
Summary of publicly posted consultation feedback
Effective IAM Governance: A Practical Approach
Based on 10 public ratings, checked October 2026. Ratings apply to this course.
Read learner reviews (opens in a new tab) INSIGHTS & RESOURCES
Ideas to sharpen
your practice.
Read, listen and explore practical perspectives on cybersecurity, governance and professional growth.
MAGAZINE · 10-PAGE PDF
Identity, sessions and the risks beyond login.
A CyberJA edition exploring modern identity assurance, cloud risk and practical assessment questions.
Read the magazine (PDF, opens in a new tab)Download PDFFEATURED CONVERSATION · APRIL 2025
Courses, consulting and practical experience.
My conversation with Dejan Kosutic on the Secure & Simple podcast, covering course creation, communication and building a consulting practice.
Listen to the interview (opens in a new tab)PRACTITIONER PERSPECTIVE · LINKEDIN
Put security tools in business context.
A reflection on why understanding business risk should guide how we apply security controls.
Read the article (opens in a new tab) WEEKLY CYBERJA PUBLICATIONS
Keep learning.
Stay in the loop.
Get an alert when a new CyberJA cybersecurity and GRC publication is available. Choose the channels that suit you.
New insights in your inbox.
Subscribe to CyberJA publication alerts. Confirm your email to activate your subscription.
Used only for publication alerts. Confirmation may take up to an hour. Unsubscribe from any email.
A nudge when there’s something new.
Allow this browser to notify you when a new CyberJA publication is available. No email address required.
Availability depends on your browser, device and notification settings.
Join the conversation.
Follow Richea Perry on LinkedIn, then use the profile’s notification bell to choose how often you hear from me.
Follow on LinkedIn (opens in a new tab)LinkedIn manages these notifications through your account settings.
LET’S BUILD WHAT COMES NEXTWhat would you
What would you
like to strengthen?
Your security program. Your curriculum. Your team’s capability. Let’s start with your goals.
Discuss your goals (opens in a new tab)Consultation options on Topmate