CGRC – Governance, Risk and Compliance Certification

CGRC – Governance, Risk and Compliance Certification

The Certified in Governance, Risk and Compliance (CGRC) exam is developed for candidates working as information security practitioner. They serve as advocates for security risk management, aiming to secure information system authorization to uphold an organization's mission and operations while adhering to legal and regulatory standards. 

Experience Required

The candidates taking the CGRC – Governance, Risk and Compliance Certification exam are required to have at least 2 years cumulative work experience in one or more of the seven domains of the CGRC CBK.

Course Outline

The CGRC – Governance, Risk and Compliance Certification exam covers the following topics

• Domain 1: Understanding Security and Privacy Governance, Risk Management, and Compliance Program
• Domain 2: Learn the scope of the System
• Domain 3: Overview of the Selection and Approval of Framework, Security, and Privacy Controls
• Domain 4: Explain the implementation of Security and Privacy Controls
• Domain 5: Understanding Assessment/Audit of Security and Privacy Controls
• Domain 6: Overview of the system Compliance
• Domain 7: Explain compliance Maintenance