Training
Featured CourseView All Courses

SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals

SEC595Cyber Defense, Artificial Intelligence
SEC595: Applied Data Science and AI/Machine Learning for Cybersecurity Professionals
View course detailsRegister
Get a Free Hour of SANS Training

Experience SANS training through course previews.

Learn More
Learning Paths
FeaturedView all Focus Areas
NEW - AI Security Training
Can't find what you are looking for?

Let us help.

Contact us
Free Resources

SANS Community Benefits

Connect, learn, and share with other cybersecurity professionals

Customer Case Studies

Discover how organizations and individual cyber practitioners use SANS training and GIAC certifications

AI Risk & Readiness

Explore expert-driven guidance, training, and tools to help defend against AI-powered threats and adopt AI securely

Join the SANS Community

Become a member for instant access to our free resources.

Sign Up
For Organizations

Public Sector

Mission-focused cybersecurity training for government, defense, and education

Partnerships

Explore industry-specific programming and customized training solutions

Sponsorship Opportunities

Sponsor a SANS event or research paper

Interested in developing a training plan to fit your organization’s needs?

We're here to help.

Contact Us
Contact Sales
Contact Sales

Security Compliance

Return To SAP HomepageJoin The SANS Community
SAP

Role Description 

The Security Compliance role ensures the confidentiality, integrity, and availability of SAP systems and data, protecting critical business processes and maintaining organizational reputation. Compliance professionals safeguard against legal, regulatory, and reputational risks by conducting audits, monitoring controls, and communicating compliance posture effectively.

BLUF 

Security Compliance professionals require a progression from foundational security knowledge (T1) through applied auditing and reporting (T2–T3), and ultimately into strategic oversight of compliance frameworks and risk communication (T4–T5). This roadmap provides a clear path to develop the skills necessary to protect both systems and business trust.

Development Roadmap with TKS Alignment

T1 – Novice (Foundations)

Course: SEC275 / SEC401. Aligned TKSs: 101 Security Fundamentals, K0104 NIST Cybersecurity Framework (introductory), K0676 Cybersecurity Laws & Regulations (awareness level), K0705 Policy Development (basic awareness)

  • Slide 1 of 2

    SEC275: Foundations: Computers, Technology, & Security

    Beginner
    SEC275Cyber Defense
    SEC406: Linux Security for InfoSec Professionals
    • GIAC Foundational Cybersecurity Technologies (GFACT)
    • 38 CPEs / 38 Hours (Self-Paced)
    • Labs: 90 Hands-On Labs

    View course detailsRegister
  • Slide 2 of 2

    SEC401: Security Essentials - Network, Endpoint, and Cloud

    Essentials
    SEC401Cyber Defense
    SEC401: Security Essentials - Network, Endpoint, and Cloud
    • GIAC Security Essentials (GSEC)
    • 6 Days (Instructor-Led)
    • 46 CPEs / 46 Hours (Self-Paced)
    • Labs: 20 Hands-On Labs

    View course detailsRegister

T2 – Practitioner (Applied Knowledge)

Course: LDR433. Aligned TKSs: K0087 Audit Standards & Frameworks (applied awareness), K0701 GRC Frameworks, S0375 Support Regulatory Reporting, T0175 Prepare Technical Reports, T0322 Conduct Audits of Information Systems (introductory level)

LDR433: Managing Human Risk

Beginner
LDR433Cybersecurity Leadership
LDR433: Managing Human Risk
  • SANS Security Awareness Professional (SSAP)
  • 3 Days (Instructor-Led)
  • 18 CPEs / 18 Hours (Self-Paced)
  • Labs: 6 Hands-On Labs

View course detailsRegister

T3 – Advanced (Specialized Knowledge)

Course: LDR514. Aligned TKSs: K0087 Audit Standards & Frameworks (advanced application), T0323 Develop & Manage Audit Programs, T1450 Interpret Regulatory Requirements, S0058 Skill in Preparing Findings Documentation

LDR514: Security Strategic Planning, Policy, and Leadership

Advanced
LDR514Cybersecurity Leadership
LDR514: Security Strategic Planning, Policy, and Leadership
  • GIAC Strategic Planning, Policy, and Leadership (GSTRT)
  • 5 Days (Instructor-Led)
  • 30 CPEs / 30 Hours (Self-Paced)
  • Labs: 32 Hands-On Labs

View course detailsRegister

T4 – Expert (Enterprise Integration)

Course: SEC566. Aligned TKSs: T1451 Audit Security Controls, T1453 Monitor Compliance Posture, T1396 Oversee Independent Cybersecurity Audits (applied at enterprise level), K0701 GRC Frameworks (enterprise integration)

SEC566: Implementing and Auditing CIS Controls

MAJOR UPDATES
AI SKILLS
Intermediate
SEC566Cybersecurity Leadership
SEC566: Implementing and Auditing CIS Controls
  • GIAC Critical Controls Certification (GCCC)
  • 5 Days (Instructor-Led)
  • 30 CPEs / 30 Hours (Self-Paced)
  • Labs: 23 Hands-On Labs

View course detailsRegister

T5 – Expert / Mentor (Strategic Oversight & Defense Leadership)

Course: SEC566. Aligned TKSs: T1451 Audit Security Controls, T1453 Monitor Compliance Posture, T1396 Oversee Independent Cybersecurity Audits (applied at enterprise level), K0701 GRC Frameworks (enterprise integration)

SEC566: Implementing and Auditing CIS Controls

MAJOR UPDATES
AI SKILLS
Intermediate
SEC566Cybersecurity Leadership
SEC566: Implementing and Auditing CIS Controls
  • GIAC Critical Controls Certification (GCCC)
  • 5 Days (Instructor-Led)
  • 30 CPEs / 30 Hours (Self-Paced)
  • Labs: 23 Hands-On Labs

View course detailsRegister