IT training built for financial services

• ✓PCI DSS: protecting cardholder data across networks, systems, and access, including the security awareness program it requires
• ✓SOC 2: security, availability, and confidentiality controls for service organizations
• ✓SOX (Sarbanes-Oxley): IT general controls and access management
• ✓GLBA (Gramm-Leach-Bliley): safeguarding customer financial information
• ✓ISO 27001: information security management systems

CBT Nuggets is a training platform. Our courses build the skills these frameworks depend on, and our completion records document the workforce training many of them require. Training supports a compliance program; it does not by itself make an organization compliant. Your compliance program and its assessors decide what counts as evidence.

• CompTIA

  CompTIA Security+ (SY0-701)

  This CompTIA Security+ (SY0-701) training prepares your team for a widely recognized entry-level cybersecurity certification. It covers network security fundamentals, cryptography basics, threat detection and mitigation, risk management, and compliance frameworks, and it builds the skills the SY0-701 exam tests: assessing the security posture of an enterprise environment and recommending solutions, monitoring and securing hybrid cloud and on-premises environments, responding to security incidents, and working within applicable regulations and governance policies. For an IT Director in a regulated industry, Security+ is the baseline many hiring rubrics and compliance programs expect of help desk analysts, network administrators, and security specialists alike. Individuals starting a security specialty earn the same credential on the same path.

  See the course

• ISC2

  (ISC)² CISSP – Certified Information Systems Security Professional

  Get ready to earn your ISC2 CISSP certification. This course covers all eight CISSP domains in clear, easy-to-follow lessons. Learn governance frameworks, secure design principles, and incident response while sharpening risk analysis, policy writing, and business continuity planning. Along the way, you’ll access unlimited CISSP practice exams and our downloadable CISSP study guide PDF to stay organized and on track. Whether you prefer a structured CISSP bootcamp-style, or flexible self-paced learning, this training helps you prepare smarter, stay focused, and get certified with confidence.

  See the course

• ISACA

  ISACA CRISC – Certified in Risk and Information Systems Control

  This ISACA CRISC training is designed to help you earn your Certified in Risk and Information Systems Control credential. This course helps you learn to identify IT risks, build threat models, and align technology with business goals. Once you've completed this course, you'll know how to design effective control frameworks, manage vendor risk, and handle data lifecycles from start to finish. You'll also gain the skills to analyze risk appetite, report metrics through heatmaps and dashboards, and lead disaster recovery efforts.

  See the course

• ISACA

  ISACA CISA – Certified Information Systems Auditor

  This CISA online training prepares you for the Certified Information Systems Auditor certification. The course follows ISACA’s exam blueprint: you’ll learn audit standards and risk‑based planning, manage IT governance and strategy, guide systems through acquisition, development and implementation, oversee operations and business resilience, and protect information assets. Build hands‑on skills in evidence collection, analytics and reporting through engaging videos, practice exams, and real‑world scenarios, all while preparing for the CISA exam.

  See the course

• ISACA

  ISACA CISM – Certified Information Security Manager

  This CISM training prepares IT professionals to manage enterprise-level security governance, risk, and incident response. This online, self-paced course aligns with ISACA's latest Certified Information Security Manager exam and is ideal for roles like Information Security Manager, GRC Lead, or Risk Officer. You'll build leadership skills in threat modeling, risk treatment, and post-incident review, making it perfect for both CISM certification prep and recertification.

  See the course

• Cybersecurity

  Enterprise GRC: Risk Management and Compliance Programs

  This Governance, Risk and Compliance training covers how to manage your organization's compliance-related requirements and balance them with operational risks to provide cost-efficient and in-compliance results. For systems administrators and security professionals, compliance is much more than ensuring that the right people are getting the right data — this training shows you how to prove your work, verify data integrity, and more.

  See the course

• Cybersecurity

  CompTIA Cybersecurity Analyst CySA+ (CS0-003)

  This intermediate-level CySA+ course prepares cybersecurity professionals to pass the CompTIA Cybersecurity Analyst (CySA+) CS0-003 exam. Learn how to proactively monitor systems, detect threats, and respond to incidents with confidence. This hands-on training dives into real-world tools and techniques used in vulnerability management, threat intelligence, and security operations. You’ll practice using SIEM tools, analyzing indicators of compromise (IoCs), performing risk assessments, and strengthening cloud and hybrid environments. Ideal for SOC analysts, security engineers, and IT pros looking to advance their careers, this course aligns with the official CompTIA exam blueprint and industry best practices.

  See the course

• Cybersecurity

  Microsoft Certified: Identity and Access Administrator Associate (SC-300)

  This Microsoft Identity and Access Administrator (SC-300) training prepares you to become a Microsoft identity and access admin. Expert-led training will teach you to implement and manage secure identity solutions using Microsoft Entra ID (Azure AD) and hybrid identities. You’ll set up and manage users, groups, devices, and custom roles. You’ll learn to configure passwordless and multifactor sign-in, apply conditional access policies, and use tools like PIM to support a zero-trust strategy. You’ll also manage app access with registrations, service principals, and entitlement controls. Bring on-prem and cloud together using Azure AD Connect and Active Directory Federation Services, and monitor and protect identities using Defender for Cloud Apps, Sentinel, Identity Protection and Identity Secure Score. With practice exams and real‑world scenarios, this course maps to the SC‑300 exam blueprint, giving you the skills and confidence to get certified and secure access to your organization’s cloud resources.

  See the course

• Cybersecurity

  Microsoft Certified: Security, Compliance, and Identity Fundamentals (SC-900)

  Cloud adoption spreads security, identity, and compliance work across help desk staff, sysadmins, and compliance stakeholders who often lack a shared vocabulary. When terms like Zero Trust, least privilege, and the shared responsibility model mean different things to different people, risk discussions stall and audit conversations take longer than they should. This entry-level SC-900 course gives IT Directors and Training Managers a single baseline to assign across the team. Learners cover Microsoft Entra ID (Azure AD) identity concepts, authentication and self-service password reset, Microsoft Defender threat protection, Intune endpoint security, and Microsoft Purview capabilities such as sensitivity labels, DLP, eDiscovery, audit, data lifecycle management, and insider risk. The course stays conceptual, with walkthroughs in Azure, Microsoft 365, Intune, and Purview, so new hires, help desk technicians, and non-technical risk stakeholders can all take part. After completion, your team can explain Microsoft security terminology to technical and non-technical audiences, identify which Microsoft tool fits a given identity, threat, or compliance use case, and route questions to the right platform capability or specialist team. The course also provides a structured review of the fundamentals covered by the SC-900 certification exam. At about 21.7 hours across 25 skills, the course fits an onboarding cohort or a team certification push. Team Leads can bundle it into Playlists, and Training Managers can track per-learner progress and completion with Team Reporting before moving the team on to role-based Microsoft security training.

  See the course

• AWS

  AWS Certified Security – Specialty (SCS-C03)

  Prepare for the AWS Certified Security Specialty (SCS-C03) certification with expert-led training. Learn to secure AWS environments by managing access controls with IAM Roles Anywhere, protecting data through Amazon Security Lake, and responding to threats using Amazon CodeGuru Security. In this course, you'll cover securing GenAI applications and leveraging Amazon Q Developer alongside advanced networking like AWS Verified Access and Layer 3-7 firewall rules. This course covers essential tools and techniques, including AWS Verified Permissions, to safeguard cloud systems and make you stand out as a candidate for cloud security roles. This AWS training is ideal for cloud administrators and teams looking to enhance security skills or onboard new team members.

  See the course

• Azure

  Microsoft Certified: Azure Security Engineer Associate (AZ-500)

  This intermediate Microsoft Azure Security Engineer Associate training prepares you for the AZ-500 exam, which is required to earn the Microsoft Certified: Azure Security Engineer Associate certification. Become an Azure security engineer associate by learning the skills needed to secure Azure-based networks by implementing security controls.

  See the course

• ISACA

  ISACA Cybersecurity Fundamentals (ITCA)

  This ITCA - Cybersecurity Fundamentals training covers how to perform the basic, professional tasks required of an entry-level IT professional in a cybersecurity capacity. Although earning the ITCA Cybersecurity Fundamentals certification is valuable for cybersecurity hopefuls, the training is also excellent for non-IT professionals and teams who need a well-rounded understanding of the threats that exist in the modern world, how best to avoid them, and what to do if there is a successful attack against your network.

  See the course

9 more courses in this path. Every one is included in a team subscription. Browse all training

• Cybersecurity training path
• Cloud Platforms training path
• Networking training path