Governance & Risk

Certified in Governance, Risk and Compliance (CGRC)

As a Certified in Governance, Risk and Compliance (CGRC ), you are considered a cybersecurity professional and have the knowledge and skills in governance, performance management, risk management under compliance.

CGRC professionals align IT goals with business objectives while managing cyber risks and integrating security and privacy into the overall goals of the organization.

On-Site/Virtual

Preise ab€ 4.190 zzgl. 19% Ust

duration: 5 days

Level: Fortgeschrittene

Code: CGRC

CPEs: 56

The training courses are carried out in cooperation with Information Security Academy IS@R2, an official training partner of ISC2. This provides access to authorized trainers and the official training material.

Buchen Sie noch heute online oder rufen Sie uns an unter +49 7031 2024742, wenn Sie Hilfe bei der Auswahl des richtigen Kurses benötigen oder über Firmenrabatte sprechen möchten.

The CGRC helps professionals develop, implement and manage governance, risk management and compliance programs to meet an organization's security and regulatory requirements.

Your benefits

Schönbrunn TASC is an accredited training organization (ATO). This means that you have access to official course materials and can take your Certified in Governance, Risk and Compliance (CGRC) exam during the course at the Schönbrunn TASC Training Center. If you do not pass the exam on your first attempt (which we do not expect), our performance guarantee covers you - this means you train for free the second time.

• You learn in small groups (max. 10 participants per course)
• In-house modern training room and test center in a distraction-free, quiet atmosphere (PSI/ Pearson Vue/ EC Council/ Kryterion)
• Experienced, constantly trained and ISC2 Authorized Instructors guide you through the course
• You will receive comprehensive official ISC2 training materials, manuals and case studies for self-study
• interactive discussions and group work will help you in the application
• a small breakfast, lunch, snacks and drinks are provided throughout the day
• hotel recommendations near the training and test center
• it is possible to take the exam at the Schönbrunn TASC test center afterwards**

Requirements

at least 2 years of cumulative professional experience in information technology,

Target group

• Cybersecurity Auditor
• Cybersecurity Compliance Officer
• GRC Architect
• GRC Manager
• Cybersecurity Risk & Compliance Project Manager
• Cybersecurity Risk & Controls Analyst
• Cybersecurity Third Party Risk Manager
• Enterprise Risk Manager
• GRC Analyst
• GRC Director
• Information Assurance Manager

Training schedule

Domain 1: Security and Privacy Governance, Risk Management, and Compliance Program

1.1 Demonstrate knowledge in security and privacy governance, risk management,

and compliance program

1.2 Demonstrate knowledge in security and privacy governance, risk management

and compliance program processes

1.3 Demonstrate knowledge of compliance frameworks, regulations, privacy,

and security requirements

Domain 2: Scope of the System

2.1 Describe the system

2.2 Determine security compliance required

Domain 3: Selection and Approval of Framework, Security, and Privacy Controls

3.1 Identify and document baseline and inherited controls

3.2 Select and tailor controls

Domain 4: Implementation of Security and Privacy Controls

4.1 Develop implementation strategy (e.g., resourcing, funding, timeline, effectiveness)

and compliance for security and privacy controls

4.2 Implement selected controls

Domain 5: Assessment/Audit of Security and Privacy Controls

5.1 Prepare for assessment/audit

5.2 Conduct assessment/audit

5.3 Prepare the initial assessment/audit report

5.4 Review initial assessment/audit report and plan risk response actions

5.5 Develop final assessment/audit report

5.6 Develop risk response plan

Domain 6: System Compliance

6.1 Review and submit security/privacy documents

6.2 Determine system risk posture

6.3 Document system compliance

Domain 7: Compliance Maintenance

7.1 Perform system change management

7.2 Perform ongoing compliance activities based on requirements

7.3 Engage in audits activities based on compliance requirements

7.4 Decommission system when applicable

 

Certification

ISC2 Certified in Governance, Risk and Compliance (CGRC)

Duration: 3 hours

Format: Multiple choice

Number of questions: 125

Score: 700 out of 1000 points

Languages: English