CGRC Certified in Governance, Risk, and Compliance

  • Overview: CGRC certifies professionals in governance, risk management, and compliance within an enterprise context.
  • Target Audiences: Risk management professionals, compliance officers, IT auditors, and security professionals.
  • Prerequisites: Experience in governance, risk, or compliance management is beneficial.
  • Course Content:
    • Governance and Management of IT:
      • IT governance frameworks (e.g., COBIT, ITIL).
      • Strategic alignment of IT with business goals.
      • IT performance management and measurement.
      • Resource management and optimization.
    • Risk Management:
      • Risk identification and assessment methodologies.
      • Risk response strategies (avoidance, mitigation, transfer).
      • Developing and implementing risk management frameworks.
      • Continuous risk monitoring and reporting.
    • Compliance and Control Frameworks:
      • Understanding and applying compliance frameworks (e.g., ISO, NIST).
      • Designing and implementing internal controls.
      • Managing regulatory compliance requirements.
      • Conducting compliance audits and assessments.
    • Audit Processes and Techniques:
      • Planning and conducting IT audits.
      • Gathering and analyzing audit evidence.
      • Reporting audit findings and recommendations.
      • Ensuring follow-up and implementation of audit recommendations.
  • Exam Details:
    • 150 multiple-choice questions
    • 4-hour duration
    • Passing score: 450 out of 800 points
  • Price: Approximately $750 USD for the exam; training costs typically range from $1,500 to $2,500 USD.