This five-day course prepares you for the ISC2 Certified in Governance, Risk and Compliance (CGRC) certification. You will learn how to apply risk management frameworks and authorize and maintain information systems within an organization. The course reviews all seven domains of the CGRC exam outline, from governance and risk management programs through system scoping, control selection and implementation, assessment, authorization, and continuous compliance.
Who Should Attend
IT, information security, and information assurance practitioners in governance, risk, and compliance roles, such as auditors, compliance officers, GRC analysts and managers, and risk managers.
Prerequisites
- Two years of paid work experience in one or more of the seven CGRC domains is required for certification
- Candidates without the experience can become an Associate of ISC2 by passing the exam
Course Objectives
- Establish a security and privacy governance, risk management, and compliance program
- Define the scope of an information system
- Select and approve frameworks and security and privacy controls
- Implement security and privacy controls
- Assess and audit controls
- Manage system compliance and ongoing compliance maintenance
