CGRC Certification
Certified in Governance, Risk and Compliance
Capitalise on the rising demand for GRC expertise. The CGRC is a proven way to demonstrate your skills to integrate governance, performance management, risk management and regulatory compliance within your organisation.
Be a governance, risk and compliance leader
Capitalise on the rising demand for Governance, Risk and Compliance (GRC) expertise by earning the CGRC certification. The CGRC is a proven way to demonstrate your knowledge and skills to integrate governance, performance management, risk management and regulatory compliance within your organisation.
CGRC professionals use frameworks to integrate security and privacy within organisational objectives, better enabling stakeholders to make informed decisions regarding data security, compliance, supply chain risk management and more.
Download the complete guide to the CGRC certification, exam and training pathways.
Guide to CGRC (PDF)What the CGRC represents
Shows advanced technical skills and knowledge to protect, authorise and maintain information systems within various risk management frameworks.
Learners who don't pass the exam on their first attempt may access the same training again at no cost within one year from the end of the initial training. The guarantee covers the cost of the second course.
What to expect on the CGRC exam
The CGRC exam covers seven domains.
Security and Privacy Governance, Risk Management, and Compliance Program
Scope of the System
Selection and Approval of Framework, Security, and Privacy Controls
Implementation of Security and Privacy Controls
Assessment / Audit of Security and Privacy Controls
System Compliance
Compliance Maintenance
Who earns the CGRC?
The CGRC is ideal for IT, information security and information assurance practitioners in Governance, Risk and Compliance roles who need to understand, apply or implement a risk management program for IT systems — including those in roles such as:
Required work experience
To qualify, you must pass the exam and have at least two years of cumulative, paid work experience in one or more of the seven domains of the ISC2 CGRC Exam Outline.
Get CGRC training that's right for you
With self-paced or online instructor-led training, there's an option to fit your schedule and learning style — reviewing the relevant domains and topics to prepare you for the rigorous CGRC exam.
CGRC Online Self-Paced Training
Official ISC2 online self-paced CGRC training uses artificial intelligence to customise your learning journey — pinpointing the areas that need additional focus and guiding your exam prep in a way that's truly personalised. It covers the skills and knowledge for integrating governance, performance management, risk management and regulatory compliance within an organisation.
- Self-paced online adaptive learning journey
- Data-driven analytics dashboard for real-time feedback
- Robust search functionality to narrow topics
- Pre- and post-course assessments
- Knowledge checks and end-of-domain quizzes
- Official ISC2 CGRC eTextbook
- Official ISC2 CGRC Study Questions eBook
- Interactive content
- Domain-by-domain study sheets with key points
- Email content support
- Online interactive flash cards
- Glossary of terms
- 24/7/365 chat technical support
To earn a Validation of Completion
- Complete and pass each domain with a score of 70% or higher (all knowledge checks and the end-of-domain assessment).
- Complete the Learner Acknowledgement, verifying you are enrolled and authorised to take the final assessment.
- Complete and pass the final assessment with a score of 70% or higher.
- Complete the course evaluation survey.
A Validation of Completion is issued on completion and remains valid for three years from the issue date. It may be used to prepare for professional certification, but does not demonstrate competency, establish expertise or imply licensing or accreditation in any field. To earn the CGRC certification, you must pass the exam and meet the experience requirements.
CGRC Online Instructor-Led Training
Live virtual learning led by an ISC2 Authorized Instructor — a CGRC-certified expert who brings the content to life through meaningful dialogue, real-world scenarios and integrated practice questions. Explore concepts and connect theory to real-world applications as you build the expertise required to design, implement and manage a best-in-class cybersecurity program.
- Instructor-led study plan
- Official ISC2 CGRC eTextbook
- Official ISC2 CGRC Study Questions eBook
- Live virtual learning led by an ISC2 Authorized Instructor
- Peer discussions
- Session recordings
- Applied scenarios and case studies
- Practice questions
- Glossary of terms
- Pre- and post-course assessments
- Technical support chat
*Access one week in advance of live virtual training to prepare.
Upcoming live virtual sessions
Choose the schedule that works best for you — full-time (5 days) or part-time (7 weeks).
Access duration & terms
Online Instructor-Led Training
Applies to instructor-led purchases without an exam.
- Course materials / videos: 180-day access from the date of your first live session (accessible up to one week before the first session).
- Digital eTextbook / Study Questions eBook: 365-day access from the date of first access.
Online Instructor-Led Training + Exam
- Course materials / videos: 180-day access from your first live session (accessible up to one week before).
- Digital eTextbook / Study Questions eBook: 365-day access from the date of first access.
- Exam: 365 days from the purchase date to sit your exam.
Ready to earn your CGRC?
"Demonstrate your GRC expertise and help your organisation make informed, risk-based decisions with confidence."
