CGRC – Governance, Risk and Compliance Certification

Prepare for the ISC2 CGRC exam and learn to authorize and maintain information systems using risk management frameworks such as NIST RMF.

What you'll learn

• Build an information security risk management program
• Define system scope
• Select and implement security and privacy controls
• Assess controls
• Authorize systems
• Monitor continuously

Course outline

1. Information Security Risk Management Program
   • Risk management program
2. Scope of the Information System
   • System scope
3. Selection and Approval of Security and Privacy Controls
   • Control selection
4. Implementation of Security and Privacy Controls
   • Control implementation
5. Assessment and Audit of Controls
   • Control assessment
6. Authorization of the Information System
   • Authorization
7. Continuous Monitoring
   • Monitoring