About
The Certified in Governance, Risk and Compliance (CGRC) from ISC2 is a risk management certification for information security practitioners who help organisations align information technology with business objectives while managing risk and meeting legal and regulatory compliance requirements. CGRC is a vendor-neutral cybersecurity credential that recognises your knowledge, skills and abilities to authorise and maintain information systems within a risk management framework, including formalising processes to assess risk and establish security documentation.
Why Take This CGRC Certification?
ISC2 CGRC helps you build vendor-neutral governance, risk and compliance skills that can be applied across different technologies and methodologies. It supports career opportunities and advancement by raising credibility and demonstrating a solid foundation to mitigate and respond to cyberthreats, plus it deepens your understanding of the CGRC exam outline. After certification, you become an ISC2 member with access to continuing professional education opportunities and a strong peer network.
Who is CGRC Certification for?
CGRC is particularly well suited to IT, information security and cybersecurity practitioners who manage risk in information systems or who are involved in authorising and maintaining information systems. Roles that typically use or require CGRC include Authorising Official, Cyber GRC Manager, Cybersecurity Auditor or Assessor, Cybersecurity Compliance Officer, Cybersecurity Architect, GRC Architect, GRC Information Technology Manager, GRC Manager, Cybersecurity Risk and Compliance Project Manager, Cybersecurity Risk and Controls Analyst, Cybersecurity Third Party Risk Manager, Enterprise Risk Manager, GRC Analyst, GRC Director, GRC Security Analyst, System Security Manager, System Security Officer, Information Assurance Manager and Cybersecurity Consultant.
Where is this CGRC course available?
This course is available online throughout the Middle East and North Africa.
It is available in person throughout the GCC and MENA region, including Qatar (Doha), Bahrain (Manama), Kuwait (Kuwait City), Oman (Muscat), Saudi Arabia (Riyadh, Jeddah, Dammam, Al Khobar) and the United Arab Emirates (Abu Dhabi, Dubai, Sharjah) as well as Jordan (Amman).
What language is this CGRC course available in?
We offer this course in Arabic and English.
Prerequisites
To qualify for the ISC2 CGRC certification, candidates must have at least two years of cumulative, paid work experience in one or more of the seven domains of the current ISC2 CGRC Exam Outline. If you do not yet have the required experience, you may become an Associate of ISC2 after passing the CGRC exam, then you have three years to earn the experience needed for CGRC certification.
Modules
Security and Privacy Governance, Risk Management and Compliance Program (16%)
Covers how to establish and manage security and privacy governance, risk management and compliance as a structured programme. Focuses on aligning security objectives with mission needs, risk tolerance and regulatory requirements.
Scope of the System (10%)
Covers defining the system boundary and understanding what is in scope for assessment and authorisation. Focuses on documenting scope clearly so risk and compliance activities are applied consistently.
Selection and Approval of Framework, Security and Privacy Controls (14%)
Covers selecting appropriate risk management frameworks and choosing security and privacy controls that meet organisational needs. Focuses on approval and documentation to support defensible decisions.
Implementation of Security and Privacy Controls (17%)
Covers putting selected controls into practice across people, process and technology. Focuses on implementing controls in a way that supports the documented framework and system scope.
Assessment and Audit of Security and Privacy Controls (16%)
Covers assessing whether controls are working as intended and preparing for audit activities. Focuses on testing, evidence collection and reporting to support assurance and authorisation decisions.
System Compliance (14%)
Covers demonstrating ongoing compliance of the system against required controls and obligations. Focuses on maintaining evidence, tracking gaps and supporting accountability for compliance outcomes.
Compliance Maintenance (13%)
Covers maintaining compliance over time as systems, risks and requirements change. Focuses on continuous monitoring, updates to documentation and sustaining the authorisation posture.
Gain an Official ISC2 Certificate
Share your credential on LinkedIn
Your certification.
Receive a verifiable certification from an accredited certifying body.
Showcase your achievement on LinkedIn and your CV.
Basic elements of AI and machine learning
AIGP Artificial Intelligence Governance Professional IAPP
Basic elements of AI and machine learning
AIGP Artificial Intelligence Governance Professional IAPP
AIGP Artificial Intelligence Governance Professional IAPP
AIGP Artificial Intelligence Governance Professional IAPP
AIGP Artificial Intelligence Governance Professional IAPP
AIGP Artificial Intelligence Governance Professional IAPP
Exam Details
The ISC2 CGRC exam evaluates expertise across seven domains and is designed to confirm you understand governance, risk and compliance and can authorise and maintain information systems using risk management frameworks and security best practices, policies and procedures.
Format: CGRC certification exam
Number of questions: 125
Duration: up to 3 hours
Passing score: 700 out of 1,000
Exam delivery: in-person at Pearson VUE testing centres only.
Course Study Options
You May Also Be Interested In
IAPP
AIGP Artificial Intelligence Governance Professional IAPP
Basic elements of AI and machine learning
AIGP Artificial Intelligence Governance Professional IAPP
.png)
