Overview

Official ISC2® Training Seminar for the Certified in Governance, Risk and Compliance (CGRC) provides a comprehensive review of the knowledge required for authorizing and maintaining
information systems within the NIST Risk Management Framework. This training course will help students review and refresh their knowledge and identify areas they need to study for the CGRC exam.

Content aligns with and comprehensively covers the seven domains of the ISC2 CGRC Common Body of Knowledge (CBK®). Official courseware is developed by ISC2 – creator of the CGRC CBK – to ensure your training is relevant and up-to-date. Our instructors are verified security experts who hold the CGRC and have completed intensive training to teach ISC2 content.

Skills Covered

Identify and describe the steps and tasks within the NIST Risk Management Framework (RMF).
Apply common elements of other risk management frameworks using the RMF as a guide.
Describe the roles associated with the RMF and how they are assigned to tasks within the RMF.
Execute tasks within the RMF process based on assignment to one or more RMF roles.
Explain organizational risk management and how it is supported by the RMF.

Who Should Attend

This course is for individuals planning to pursue the CGRC certification. The CGRC is ideal for IT, information security and information assurance practitioners and contractors who use the RMF in federal government, military, civilian roles, local governments and private sector organizations. Roles include:

ISSOs, ISSMs and other infosec/information assurance practitioners who are focused on security assessment and authorization (traditional C&A) and continuous monitoring issues.
Executives who must “sign off” on Authority to Operate (ATO).
Inspector generals (IGs) and auditors who perform independent reviews.
Program managers who develop or maintain IT systems.
IT professionals interested in improving cybersecurity and learning more about the importance of lifecycle cybersecurity risk management.