(ISC)² CGRC certification training

Updated October 30, 2023

The CAP certification was officially renamed Certified in Governance, Risk and Compliance (CGRC) on February 15, 2023. However, the seven exam domains, also known as objectives, did not change. The domains were last updated by (ISC)² August 2021.

Test Pass Academy has expert security instructors that have been doing the (ISC)² Certified in Governance, Risk and Compliance credential — formerly known as the Certified Authorization Professional (CAP) training since it first came out. Our security instructors are well known in the industry not only as top level instructors with rave reviews, but also as top level security professionals who pass along real world examples to the class. Our experts have a vast understanding of security and a remarkable teaching ability making it easy to PASS the CGRC Exam on the 1st attempt. Our 3 day CGRC bootcamp will provide you with a fast proven method for mastering all 7 domains. If you are looking to pass the CGRC exam, you found the right place. The CGRC certification covers the RMF (Risk Management Framework) at an extensive level. It is the only certification under the DoD8570 Mandate that aligns to each of the RMF steps. This 3 day bootcamp is geared for the Government, Military and Contractors seeking 8570 compliance.

Class Updated: Now A 3 Day Fast-Trac Format:

SCHEDULE

QUESTIONS?

What will I learn in the CGRC Bootcamp?

Our bootcamp focuses on preparing students through a combination of lecture, review of the entire 7 domains, drill sessions, extensive mentoring, practice questions and answer sessions all topped off with a full practice exam. Our instructors don't just teach from a textbook, they design, write and update our curriculum. Our materials are always up to date and synchronized with the latest exam objectives. Our instructors are constantly updating our curriculum to match any change that may arise.

The CGRC Exam is a 3 hour multiple choice exam with 125 questions and a passing score of 700 needed. The CGRC Exam is computerized and can be taken at any Pearson Professional Center.

The CGRC credential is appropriate for commercial markets, civilian and local governments, and the U.S. Federal government including the State Department and the Department of Defense (DoD). See CGRC and DoD 8570. Job functions such as authorization officials, system owners, information owners, information system security officers, and certifiers as well as all senior system managers apply.

CGRC Class Includes:

3 Days of the Top CGRC Training in the Industry
Instruction by a High-Level Certified CGRC Expert
(ISC)² CGRC | RMF Courseware - Continually Updated
CGRC | RMF Practice Questions & Quizzes
Snacks and Beverages Provide Daily
Live Online Class Hours: 9:00 - 5:00 Central Time
Exam is not administered during class
CGRC Exam Fee ($599) INCLUDED

Upon completion of the (ISC)² CGRC Course, you will demonstrate competence and learn to master:

1. Information Security Risk Management Program +

Security authorization includes a tiered risk management approach to evaluate both strategic and tactical risk across the enterprise. The authorization process incorporates the application of a Risk Management Framework (RMF), a review of the organizational structure, and the business process/mission as the foundation for the implementation and assessment of specified security controls. This authorization management process identifies vulnerabilities and security controls and determines residual risks. The residual risks are evaluated and deemed either acceptable or unacceptable. More controls must be implemented to reduce unacceptable risk. The system may be deployed only when the residual risks are acceptable to the enterprise and a satisfactory security plan is complete.

2. Scope of the Information System +

Categorization of the information system is based on an impact analysis. It is performed to determine the types of information included within the security authorization boundary, the security requirements for the information types, and the potential impact on the organization resulting from a security compromise. The result of the categorization is used as the basis for developing the security plan, selecting security controls, and determining the risk inherent in operating the system.

3. Selection and Approval of Security and Privacy Controls +

The security control baseline is established by determining specific controls required to protect the system based on the security categorization of the system. The baseline is tailored and supplemented in accordance with an organizational assessment of risk and local parameters. The security control baseline, as well as the plan for monitoring it, is documented in the security plan.

4. Implementation of Security and Privacy Controls+

The security controls specified in the security plan are implemented by taking into account the minimum organizational assurance requirements. The security plan describes how the controls are employed within the information system and its operational environment. The security assessment plan documents the methods for testing these controls and the expected results throughout the systems life-cycle.

5. Assessment/Audit of Security and Privacy Controls +

The security control assessment follows the approved plan, including defined procedures, to determine the effectiveness of the controls in meeting security requirements of the information system. The results are documented in the Security Assessment Report.

6. Authorization/Approval of Information System +

The residual risks identified during the security control assessment are evaluated and the decision is made to authorize the system to operate, deny its operation, or remediate the deficiencies. Associated documentation is prepared and/or updated depending on the authorization decision.

7. Continuous Monitoring +

After an Authorization to Operate (ATO) is granted, ongoing continuous monitoring is performed on all identified security controls as well as the political, legal, and physical environment in which the system operates. Changes to the system or its operational environment are documented and analyzed. The security state of the system is reported to designated responsible officials. Significant changes will cause the system to reenter the security authorization process. Otherwise, the system will continue to be monitored on an ongoing basis in accordance with the organization’s monitoring strategy.

COURSE	CLASS DATES	LOCATION	PRICE	REQUEST QUOTE OR REGISTER
CGRC Certification Training	November 27 - 29, 2023	Live Online	$2,795	QUOTE / REGISTER
CGRC Certification Training	November 27 - 29, 2023	San Diego, CA	$2,795	QUOTE / REGISTER
CGRC Certification Training	January 15 - 17, 2024	Live Online	$2,795	QUOTE / REGISTER
CGRC Certification Training	January 15 - 17, 2024	CO Springs, CO	$2,795	QUOTE / REGISTER

(ISC)² CGRC certification training

Updated October 30, 2023

What will I learn in the CGRC Bootcamp?

CGRC Class Includes:

Upon completion of the (ISC)² CGRC Course, you will demonstrate competence and learn to master:

(ISC)² Certified in Governance, Risk and Compliance - CGRC Schedule:

CGRC Requirements & Prerequisites:

What is the CGRC Certification:

Certifications Earned During This Bootcamp: Certified in Governance, Risk and Compliance (CGRC) formerly CAP

Why choose Test Pass Academy?