Certification Path

Libraries: This path is only available in the libraries listed. To access this path, purchase a license for the corresponding library.

Security

ISC2 Certified in Governance, Risk and Compliance

1 Course

2 Hours

Practice exam

This path can be used to prepare for the (ISC)²® CGRC (Certified Governance, Risk and Compliance) examination effective June 15, 2024.

A professional earning the Certified in Governance, Risk and Compliance (CGRC) is an information security practitioner who advocates for security risk management in pursuit of information system authorization to support an organization’s mission and operations in accordance with legal and regulatory requirements.

Get started

Content in this path

Path Courses

This path can be used to prepare for the (ISC)²® CGRC (Certified Governance, Risk and Compliance) examination effective June 15, 2024.

Course

Security and Privacy Governance, Risk Management, and Compliance Program for CGRC℠

by Kevin Henry
1h 38m
Jun 13, 2026

Try this certification path for free

Access this certification path and other top-rated tech content with a free trial.

Free individual trial

Free team trial

Build confidence to ace your certification exam with a variety of prep tools, including video courses, labs, and practice exams.

What You'll Learn

###What You Will Learn##
Security and Privacy Governance, Risk Management, and Compliance Program for CGRC℠
Scope of the System for CGRC℠
Selection and Approval of Framework, Security, and Privacy Controls for CGRC℠
Implementation of Security and Privacy Controls for CGRC℠
Assessment/Audit of Security and Privacy Controls for CGRC℠
System Compliance for CGRC℠
Compliance Maintenance for CGRC℠

Prerequisites

Please check with ISC2 to explore more about the prerequisites for this certification.
From the vendor: candidates must have a minimum of two years cumulative, full-time experience in one or more of the domains of the current CGRC Exam Outline. Part-time work and internships may also count towards the experience requirement.
If you do not have the required experience to earn the CGRC, you may become an Associate of ISC2 by successfully passing the CGRC examination. As an Associate of ISC2, you will then have three years to earn the two years of required, relevant experience.

Security Compliance
Risk Management
IT Audit
Governance
Risk
and Compliance

Explore practice exams

Learn with the best

Kevin Henry

Kevin Henry is a well-known and respected educator and lecturer in the fields of information security and audit. Kevin uses his more than 30 years of practical experience as a network technician, computer programmer, and information systems auditor to deliver outstanding presentations that make each topic interesting, relevant, and useful. Often described by students as "The best instructor I have ever had," Kevin has the ability to provide quality instruction that engages the audience and provi...

View profile