CGRC
ISC2 Full prepGet ready for the ISC2 CGRC exam with practice written to the current blueprint. Every answer is explained, and your results show which domains need the most work.
Try it now
15 flashcards and 10 practice questions with every answer explained. No account needed.
Try CGRC free Become an Associate Member for 100 cards and 30 questions Already a member? Sign inEARN WHILE YOU PREPARE
ADTP courses paired with CGRC
The exam can take months to prepare for. These courses build the practice behind it, and each ends in a certificate with a verification ID you can add to LinkedIn now.
Reading a Regulation Without a Lawyer
You don't need a law degree to work out what a regulation asks of you. Turn articles into obligations, owners and evidence you can act on.
Certificate with verification ID · 2 ALCsControl Mapping and Evidence Reuse Across SOC 2, ISO, NIST CSF and HITRUST
Running SOC 2, ISO, NIST CSF and HITRUST separately doubles the work. Map one control set across them and reuse evidence without overclaiming.
Certificate with verification ID · 3 ALCsOwning a Control: Accountability, Delegation and Follow-Through
Controls fail when everyone thinks someone else owns them. Give every control one accountable owner, delegate the work, and follow it through to evidence.
Certificate with verification ID · 3 ALCsTreatment, Acceptance and Exceptions That Expire
Accepted risks that never expire become permanent holes. Make every acceptance name an owner, a compensating control and an end date.
Certificate with verification ID · 2.5 ALCsPosition in the lifecycle governs the answer. The assessor is separate from the implementer, absolutely, and compliance is evidenced rather than asserted.
Blueprint
Weightings taken from the owner's published exam outline. Owner's site.
Your tools for this exam
Free sample
15 cards and 10 questions, every answer explained exactly as members see it.
Try it freeFlashcards with spaced repetition
Each card comes back when it is due, so study time goes to what you are about to forget. 280 cards in the full deck.
Become an Associate Member to continueDirection-finder
Twenty-four questions across every domain that say where to start.
Become an Associate Member to take itDomain checks
A measured check of one domain at a time, with a band and every item explained. Pick a domain in the blueprint above.
Become an Associate Member to see themStudy plan
A week-by-week plan built from your results and the time you have, updated as you improve.
Become an Associate Member to build oneReadiness form
A full-length mock at the real exam's size. A pass-likelihood band is released only when four conditions hold.
Become an Associate Member to see itWhat this pathway contains
Blueprint-weighted, one idea per card, with the objective each one serves.
A direction-finder, and a check per domain with rationales withheld until you submit.
Matches the real exam's length. A band is released only under four conditions.
After the exam
The certificate is the start of the job, not the end of it. This exam tests what you know about the subject. The Association's courses cover what the role asks for once the certificate is on the wall, and each one ends in an artefact you keep.
Browse the course catalogCISSP, CCSP, CGRC and SSCP are marks of ISC2. The Association is not affiliated with, endorsed by or accredited by ISC2. Pathway activity does not earn ALCs and does not lead to an Association credential.