All The Tools You Need To Build A Successful Online Business

Kudzai Consulting Group is a PECB Authorized Partner. The Tech Academy is our education and training brand.

Live workshop · December 2026

Build It, Run It, Audit It

Your First ISO/IEC 27001 Work Samples

Draft your first GRC work samples so you can explain how you would apply what you’ve learned.

Join Dr. Rose Shumba for a 90-minute live workshop. Use a sample company’s case records to assess a risk, plan how a security control operates, and check evidence.

You’ll draft two pieces of work:

A risk and control worksheet: Describe a risk, choose a safeguard, and plan how it will operate.
An audit finding: Connect a requirement, evidence, and a conclusion.

Keep the templates to finish, improve, and practice explaining your work.

$97 USD · Live on Zoom · Templates included · Recording access for 7 days

Choose the Session That Works for You

TUESDAY · DECEMBER 1

Tuesday’s session starts in:

December 1 · 5:15 PM Eastern

90 minutes · 5:15–6:45 PM Eastern

SATURDAY · DECEMBER 5

Saturday’s session starts in:

December 5 · 12:00 noon Eastern

90 minutes · 12:00–1:30 PM Eastern

One registration gives you the flexibility to attend either date. Set aside 90 minutes to take part.

Build It, Run It, Audit It — In 90 Minutes

You’ll work through one connected example, using the same sample company throughout the workshop.

Build It

Write a risk entry and choose a safeguard, so that you can explain what could go wrong and how your choice helps reduce the risk.

Use the case records to describe one risk in a clear sentence. Score it using the supplied method and choose a suitable control—a safeguard that helps manage the risk.

Run It

Name who carries out the control, when it happens, and what evidence to keep, so that you can show how the work is carried out and documented.

Add the owner, timing, and expected record to your worksheet. Connect the safeguard to evidence that would show it was performed.

Audit It

Compare the case records with a requirement and draft an audit finding, so that you can explain how the evidence supports your conclusion.

Write the finding in three parts: requirement, evidence, and conclusion. Practice explaining what the records show and where further action may be needed.

The Two Work Samples You Will Draft

A risk and control worksheet

Your worksheet will include:

A risk description and score
A selected safeguard
The person responsible
When the safeguard operates
The evidence to collect

An audit finding

Your finding will include:

The requirement being checked
The evidence examined
A conclusion supported by that evidence

These are practice work samples based on a fictional company. You can finish and refine them after the workshop using the templates and recording.

Questions We Will Work Through

How can you write a risk in one sentence that another person can understand?
What makes a safeguard a sensible response to the risk you identified?
Why are an owner and a clear schedule important when putting a control into practice?
What record would show that the control was carried out?
What can an auditor conclude from the evidence, and what remains unproven?
How do you connect a requirement, evidence, and a conclusion in one finding?
How can you explain your decisions in an interview or professional conversation?
Which parts do you enjoy most: building, running, or auditing the work?

Read “Your First Year as a GRC Analyst”? This workshop lets you try three of the steps introduced through Ana’s story.

You can also attend if you have not read the guide. You’ll receive it when you register.

Hi, I’m Dr. Rose Shumba

I help people understand GRC and practice applying it through case records and guided exercises. I am a PECB Certified ISO/IEC 27001 Senior Lead Implementer and a former Cyber Science Professor at the U.S. Naval Academy. I wrote “Your First Year as a GRC Analyst” to show how GRC tasks connect. In this workshop, I’ll guide you through drafting and explaining two pieces of that work.

This workshop is for you if:

You are exploring a non-coding GRC role and want to try a small part of the work.
You have studied cybersecurity or GRC and want practice applying the concepts.
You hold Security+ or another credential and want to start developing work samples.
You want to explain how risk, controls, evidence, and audit findings connect.
You want a clearer sense of which parts of GRC you would like to study further.

You do not need an ISO/IEC 27001 certification to attend. Come ready to follow a case, ask questions, and write.

Choose a different starting point if:

You want a class on coding, penetration testing, or technical security tools.
You want completed work samples handed to you without doing the exercises.
You are looking for a full ISO/IEC 27001 implementation course or certification exam.

Register for the Workshop

Draft Your First Two GRC Work Samples

Spend 90 minutes applying the concepts to a sample company. Draft your risk and control worksheet, check evidence, and write an audit finding.

Leave with work you can continue improving and practice explaining.

$97 USD — One-Time Payment

Your registration includes:

A 90-minute live workshop with Dr. Rose Shumba
The flexibility to attend Tuesday or Saturday
Guided exercises using case records
Two work samples to draft during the session
Live Q&A
The workshop templates
The guide, “Your First Year as a GRC Analyst”
Seven days of access to a workshop recording made available after the Saturday session

Attend Either Session

Tuesday, December 1, 2026 5:15–6:45 PM Eastern

Saturday, December 5, 2026 12:00–1:30 PM Eastern

Both sessions are live on Zoom and cover the same material.

You do not need to select a date at checkout or request a date change. Your confirmation email will include calendar links and preparation instructions. Both Zoom links will be emailed closer to the workshop.

One payment. No date selection required.

How to Prepare

Join from a laptop or desktop computer so you can write during the session. Have the case records and editable templates ready, and set aside 90 minutes to take part.

You’ll receive the preparation materials after registration.

Recording Access

All registrants will receive access to a workshop recording after the Saturday session.

Access lasts 7 days from when the recording is made available. We’ll email the recording link and the exact access deadline.

You will receive recording access whether or not you attend live.

Refund Policy

You may request a refund up to 72 hours before the first live session.

Refund deadline: Saturday, November 28, 2026, at 5:15 PM Eastern.

Because registration lets you attend either date, this is the refund deadline for all registrations. Refunds are not available for requests received after this deadline.

To request a refund, reply to your registration confirmation email.

About the Workshop

This is a practical introductory workshop using a fictional company. The work samples are simulated exercises. Registration does not include a certification exam or professional certification.