GOVERNANCE RISK AND COMPLIANCE

Shows advanced technical skills and knowledge to protect, authorize and maintain information systems within various risk management frameworks.

WHAT TO EXPECT ON THE CGRC EXAM

Domain 1: Information Security Risk Management Program

Domain 2: Scope of the Information System

Domain 3: Selection and Approval of Security and Privacy Controls

Domain 4: Implementation of Security and Privacy Controls

Domain 5: Assessment/Audit of Security and Privacy Controls

Domain 6: Authorization/Approval of Information System

Domain 7: Continuous Monitoring