CGRC Training Course Outline

Official (ISC)² CBK Training Seminar for the CGRC

The Official (ISC)² Certified in Governance, Risk and Compliance (CGRC) Training Seminar provides a comprehensive review of information systems security concepts and industry best practices covering the seven domains of the CGRC: 

1. Information Security Risk Management Program 
2. Scope of the Information System
3. Selection and Approval of Security and Privacy Controls
4. Implementation of Security and Privacy Controls
5. Assessment/Audit of Security and Privacy Controls
6. Authorization/Approval of Information System
7. Continuous Monitoring 

This training course is structured around various risk management frameworks. This course will help students review and refresh their information security knowledge as they pursue the CGRC certification.

Who Should Attend

This course is ideal for IT, information security, and information assurance practitioners and contractors who use risk management frameworks in federal government, military, local governments, and private sector organizations. Roles include:

• Information security or information assurance practitioners focused on security assessment and continuous monitoring issues
• Auditors who perform independent reviews
• Program managers who develop or maintain IT systems
• IT professionals interested in improving cybersecurity and learning more about the importance of lifecycle cybersecurity risk management

Course Agenda

• Chapter 1: Prepare
• Chapter 2: Categorize
• Chapter 3: Select
• Chapter 4: Implement
• Chapter 5: Assess
• Chapter 6: Authorize
• Chapter 7: Monitor
• Chapter 8: CGRC Certification Information

Note: Throughout this course, exam domains may be covered over several chapters. Included in the course is a table indicating where the exam outline objectives appear in this course. Additionally, unique icons are used throughout the course materials to identify exam outline objectives.

Course Delivery Methods