The Certified in Governance, Risk and Compliance (CGRC) is an information security certification aligning with the Risk Management Framework (RMF). The CGRC recognizes your knowledge, skills and abilities to authorize and maintain information systems within the RMF. It proves you know how to formalize processes to assess risk a

Required Experience
Candidates must have at least two years of cumulative, paid work experience in one or more of the seven domains of the ISC2 CGRC Common Body of Knowledge (CBK). Earning a four-year college degree or regional equivalent or an additional credential from the ISC2 approved list will satisfy one year of the required experience. Education credit will only satisfy one year of experience. Part-time work and internships may also count towards your experience. Full-Time Experience: Your work experience is accrued monthly. Thus, you must have worked a minimum of 35 hours/week for four weeks in order to accrue one month of work experience.
o Part-Time Experience: Your part-time experience cannot be less than 20 hours a week and no more than 34 hours a week.
o 1040 hours of part-time = 6 months of full-time experience
o 2080 hours of part-time = 12 months of full-time experience and establish security documentation.
Training does not include exam

Associate of ISC2
A candidate who doesn’t have the required experience may become an Associate of ISC2 by successfully passing the CGRC examination. The Associate of ISC2 will then have three years to earn two years of cumulative, paid work experience in one or more of the seven domains of the ISC2 CGRC Common Body of Knowledge (CBK).

Domains
1. Information Security Risk Management Program
2. Scope of the Information System
3. Selection and Approval of Security and Privacy Controls
4. Implementation of Security and Privacy Controls
5. Assessment/Audit of Security and Privacy Controls
6. Authorization/Approval of Information Systems
7. Continuous Monitoring

About the exam
Length
Up to 3 hours
Items
125
Format
Multiple choice
Passing score
700 out of 1000 points
Testing center
Pearson VUE Testing Center www.pearsonvue.com/isc2