What you'll learn

Defining the scope of a system is a critical first step in any successful assessment and authorization effort, as it establishes the boundaries, information types, and security requirements that must be evaluated. In this course, Scope of the System for CGRC℠, you’ll gain the ability to determine and update the system documentation with the scope of the system subject to assessment and authorization. First, you’ll explore the boundaries of systems assessment. Next, you’ll discover the types of information processed by the system. Finally, you’ll learn how to determine the security requirements for the system according to international and national standards. When you’re finished with this course, you’ll have the skills and knowledge of determining scope and creating a system security plan needed to prepare for the ISC2 Certified in Governance, Risk, and Compliance certification.