Eighteen questions, eight domains, a prioritised list of gaps. Nothing leaves your browser.
Begin the assessmentNotice, consent, Data Fiduciary duties, SDF obligations and breach intimation, explained.
Open the guideWe scope against the laws that actually apply to you, then sequence the work by risk.
Start the assessmentAnswer 18 questions and get a prioritised control roadmap instantly.
Start the assessmentTrack 01 assumes no prior knowledge of governance, risk and compliance.
Start Track 01A structured route from GRC fundamentals to privacy operations, jurisdiction-specific implementation and ISO readiness. Learn the concept, see the control, and understand the evidence that proves it works.
Move in order if you are new, or enter at the track that matches your responsibilities. Each track connects obligations to operating practices, owners and evidence.
Understand how governance sets direction, risk prioritises attention, controls change outcomes and assurance tests whether the system works.
Turn privacy principles into repeatable lifecycle controls that product, HR, procurement, security and legal teams can operate.
Compare the laws that apply, identify the role your organisation plays, and adapt controls without rebuilding the programme country by country.
Learn how management systems are scoped, implemented, evidenced and tested before an independent certification audit.
The Academy is designed around the work practitioners actually perform, not memorisation alone.
Start with the purpose of a requirement before its terminology and exceptions.
Connect obligations to control owners, workflows, systems and escalation points.
Apply the concept to product launches, vendors, rights requests, incidents and audits.
Use checklists, templates, questions and evidence prompts to structure the next action.
The same requirement looks different to an executive, an engineer and an assurance professional. These starting points keep the learning relevant.
Focus on accountability, risk acceptance, metrics, resourcing, oversight and the evidence a board or regulator expects.
Explore leadership trainingBuild the operating model: inventories, assessments, rights, third parties, incidents, monitoring and assurance.
Choose a jurisdictionTranslate privacy by design into architecture, defaults, access, logging, retention, testing and release decisions.
Use practical toolsStart with Track 01, then see how people move into privacy, risk and audit roles from legal, IT, HR, finance and operations backgrounds.
Explore careers in GRCNo. Track 01 starts with the vocabulary of governance, risk, controls, policy and assurance. Experienced learners can move directly to privacy operations, jurisdictions or ISO readiness.
Yes. The learning tracks, guides and tools on this site are free to read and use. Facilitated workshops and tailored team programmes are scoped separately, so please confirm the format and any fees with Vedhacon before you enrol.
No. Academy material is general education. Apply it with qualified advice based on the law, facts and risk profile relevant to your organisation.
No. Vedhacon provides education and certification-readiness support. Independent accredited certification bodies conduct certification audits and issue certificates.
Yes. A team programme can be organised around roles, jurisdictions, existing controls, implementation priorities and practical exercises.
Start with the regime that applies to your organisation, then compare overlapping regimes to identify where one common control can satisfy several obligations.
Use the free readiness checker, the DPIA and RoPA templates and the regulatory tracker to apply each track to a real situation. The readiness checker runs in your browser, so your answers are not sent to Vedhacon.
Start with the learning tracks, explore the law that applies to you, or ask Vedhacon to shape a programme around your team.