ISC2 CGRC Complete Governance Risk & Compliance Course

About this course

The ISC2 CGRC certification is the benchmark credential for governance, risk, and compliance professionals working with federal information systems — and demand for ISSO, GRC analyst, and security authorization roles has never been higher. This course delivers complete, exam-accurate preparation for all seven CGRC domains, built directly from the NIST RMF and the publications ISC2 actually tests. Every module is taught the way a practitioner thinks — not as a memorization drill, but as a decision framework you can apply on the exam and on the job.---WHAT THIS COURSE COVERSNine modules. Seven CGRC domains. One complete path from RMF foundations to certification.• Module 0 — Course Introduction: CGRC exam format (125 questions, CAT, 700 passing score), eligibility requirements, domainCISA career comparison, and a eligibility requirements, domainCISA career comparison, and aproven study strategy built around the management mindset ISC2 rewards                        • Module 1 — Domain 1: Risk Management Program: SP 800-39 three-tier organizational risk       model, SP 800-30 risk assessmentrchy (FISMA, OMB A-130, EO14028), RMF roles (AO, ISSO, SCA, SAOP), five risk response strategies, SP 800-161 supply      chain risk management, and qualianalysis including ALE, SLE, andARO                                                                                           • Module 2 — Domain 2: Scope of the Information System: FIPS 199 CIA impact categorization and the high-water mark rule, SP 800 authorization boundarydefinition for cloud and contractor-operated systems, FedRAMP shared responsibility, privacy scoping via PTA/PI