Certified in Governance, Risk and Compliance (CGRC)

CGRC overview

The Certified in Governance, Risk and Compliance (CGRC) is an information security certification aligning with the
Risk Management Framework (RMF). The CGRC recognizes your knowledge, skills and abilities to authorize and
maintain information systems within the RMF. It proves you know how to formalize processes to assess risk and
establish security documentation.

Target audience
The CGRC is ideal for IT, information security and cybersecurity professionals responsible for governance, risk and
compliance within an organization. Roles include:
• Authorizing Official
• Cyber GRC Manager
• Cybersecurity Auditor/Assessor
• Cybersecurity Compliance Officer
• Cybersecurity Architect
• GRC Architect
• GRC Information Technology Manager
• GRC Manager
• Cybersecurity Risk & Compliance Project Manager
• Cybersecurity Risk & Controls Analyst
• Cybersecurity Third Party Risk Manager
• Enterprise Risk Manager
• GRC Analyst
• GRC Director
• GRC Security Analyst
• System Security Manager
• System Security Officer
• Information Assurance Manager
• Cybersecurity Consultant

Required Experience
Candidates must have at least two years of cumulative, paid work experience in one or more of the seven domains of
the ISC2 CGRC Common Body of Knowledge (CBK). Earning a four-year college degree or regional equivalent or an
additional credential from the ISC2 approved list will satisfy one year of the required experience. Education credit will
only satisfy one year of experience. Part-time work and internships may also count towards your experience. Full-
Time Experience: Your work experience is accrued monthly. Thus, you must have worked a minimum of 35
hours/week for four weeks in order to accrue one month of work experience.
o Part-Time Experience: Your part-time experience cannot be less than 20 hours a week and no more
than 34 hours a week.
o 1040 hours of part-time = 6 months of full-time experience
o 2080 hours of part-time = 12 months of full-time experience

Once you have purchased the course you will be contacted with your registration code and link to take the course.