DTF-120Digital Trust Foundations

Reading a Regulation Without a Lawyer

You don't need a law degree to work out what a regulation asks of you. Turn articles into obligations, owners and evidence you can act on.

6 lessons About 2.5 hours 2 ALCs Certificate on completion Free for Associates

Prepares you for: CISA · CGRC · ISO/IEC 27001 Lead Implementer · ISO/IEC 27001 Lead Auditor · CIPP/E

What you'll be able to do

  • Read a regulation's structure and find the parts that matter to you
  • Turn legal text into specific obligations
  • Assign an owner and the evidence that proves each obligation
  • Know when a question genuinely needs a lawyer
You finish with

An obligation register from one regulation

What's in it. Article to obligation to owner to evidence.

You build it lesson by lesson, using your own organization, and submit it for your certificate. It's yours to keep and adapt.

Who it's for

Security, privacy and compliance practitioners who have to act on regulations without always having counsel on hand.

What's inside

  1. Part 1Where the requirement comes from 16 min
  2. Part 2How small teams and enterprises meet it 14 min
  3. Part 3The method, step by step 20 min
  4. Part 4Hands-on lab: small team choose one 60 min
  5. Part 5Hands-on lab: enterprise choose one 90 min
  6. Part 6Finish and submit your deliverable 18 min

Built for your size

The requirement is the same everywhere. How you meet it depends on who you have. You pick the lab that matches your organization.

Small team or early-stageYou build the register.
EnterpriseYou reconcile it with counsel's version and the control library.

How you earn the certificate

Submit your finished deliverable, which is scored against a published rubric, and pass a short scenario quiz. Your certificate goes to your wallet and can be checked by anyone on the public register.

Ready to build an obligation register from one regulation?6 lessons, about 2.5 hours. Start whenever you're ready.
Join and enroll