Description
Exam prep for the ISC2 Certified in Governance, Risk and Compliance (CGRC) certification. Self-paced preparation covering the seven CGRC domains: information security risk management programs, scope of the information system, selection and approval of security and privacy controls, implementation of controls, assessment and audit, authorization/approval of the information system, and continuous monitoring.
What this course covers
- Building and running an information security risk management program
- Categorizing systems and defining the authorization boundary
- Selecting, tailoring and documenting security and privacy controls
- Implementing controls and writing the control implementation narrative
- Planning and executing control assessments, and handling assessment findings
- Preparing the authorization package and the risk-based authorization decision
- Running continuous monitoring, change control and ongoing authorization
Who it is for
Security practitioners working in governance, risk and compliance roles, system owners, ISSOs and ISSMs, and anyone preparing to sit the ISC2 CGRC exam.
Important
This is independent exam preparation. It does not issue the CGRC certification. The certification is awarded by ISC2 after you pass their exam and meet their experience requirements. Course completion earns a Certificate of Completion only.