What you'll learn

The security of an information system requires the selection of controls to mitigate risk and meet the defined security requirements. In this course, Selection and Approval of Framework, Security, and Privacy Controls for CGRC℠, you’ll gain the ability to select appropriate controls that will satisfy the requirements of the authorizing official. First, you’ll explore the allocation of all security requirements to either internal or external systems. Next, you’ll discover the use of common controls to leverage existing investment. Finally, you’ll learn how to select controls specific to the information system. When you’re finished with this course, you’ll have the skills and knowledge of control selection needed to prepare for the CGRC examination.