Certificate Overview
The Cybersecurity Governance, Risk, and Compliance Graduate Certificate develops your command of the policies, frameworks, and regulatory landscape that guide organizational cybersecurity strategy.
Designed for legal, compliance, and business leaders working in regulated environments, this fully online certificate gives you the frameworks to evaluate cyber risk, interpret evolving regulations, and align security strategy with organizational and legal objectives.
This graduate certificate is part of the optional Cybersecurity Certificate and Degree Pathway.
Skills You'll Gain
Through the Cybersecurity Governance, Risk, and Compliance (GRC) Graduate Certificate, you’ll learn to:
- Apply cybersecurity frameworks and governance models such as NIST, ISO 27001, and CIS Controls.
- Evaluate and communicate cyber risk in business and legal contexts.
- Interpret cybersecurity laws, regulations, and ethical responsibilities across industries.
- Develop and assess security policies and compliance controls.
- Align cybersecurity strategy with organizational goals and regulatory requirements.
- Translate technical security concepts for executive, legal, and business stakeholders.
Career Outlook
Organizations across industries are prioritizing cybersecurity governance, risk management, and regulatory compliance as threats grow and regulations evolve. This certificate equips you to work across a variety of sectors — including finance, healthcare, technology, and government — in roles like:
- Cybersecurity risk analyst
- GRC analyst
- Compliance manager
- Information security analyst
- Policy and governance specialist
Courses
The Cybersecurity Governance, Risk, and Compliance (GRC) Graduate Certificate includes four online courses:
- CSCI 159 Introduction to Cybersecurity
- CSCI 155 Networks and Cloud Security
- CSCI 142 Foundations of Technology Risk Management and Assessment
- CSCI 147A Fundamentals of Law and Cybersecurity
Selecting courses. Multiple course options are available during fall, spring, and summer terms. Offerings vary by term. Explore current options in the DCE Course Search & Registration platform.
Upcoming Term: Fall 2026
Enroll in your first certificate course this fall — no application required.
Pre-registration opens July 6. Registration opens July 20 at 9 a.m. ET.
Featured Faculty
David Cass
Vice President, Cyber and IT Risk, Supervision Group, Federal Reserve Bank of New York
Daniel B. Garrie
Founder and Managing Director, Law and Forensics, LLC and JAMS Neutral Mediator
David Malan
Gordon McKay Professor of the Practice of Computer Science, Harvard University
Kevin McKenzie
Vice President and Chief Information Security Officer, Ferguson Enterprises
Cybersecurity Certificate and Degree Pathway
The Cybersecurity Governance, Risk & Compliance (GRC) Graduate Certificate can be completed on its own or applied toward the Cybersecurity Master’s Degree Program.
Two courses for the certificate — CSCI 155 and 159 — enable you to:
- Fulfill the “earn your way in” admissions requirement.
- Earn the Cloud and Cybersecurity Foundations Microcertificate.
After admission, you can complete two additional courses to earn the graduate certificate while also applying them toward your master’s degree.
Learn more about degree admissions, requirements, and timeline.
Tuition
Support and Resources
Access to career resources, including webinars, advising, and career fairs
Weekly virtual office hours with the student advising team
Affiliate membership in the Harvard Extension Alumni Association
Earning Your Certificate
If you take two courses per semester, you can complete your certificate in 8 months. If you prefer a more flexible pace, you have up to three years to finish.
There is no formal application required. You simply register for each course.
To meet the requirements for the certificate:
- Complete the four certificate courses for graduate credit.
- Earn at least a B grade in each course.
- Complete all courses within three years of starting your first eligible certificate course.
Learn more about pursuing a certificate and the process of requesting your certificate.
