Loading exam details…
Loading exam details…
A current guide to Certified in Governance, Risk and Compliance, including the June 15, 2024 exam outline, 3-hour timing, 125 multiple-choice and advanced items, 700 passing score, Pearson VUE delivery, seven domain weights, English-language availability, and two years of required work experience.
CGRC focuses on security and privacy authorization work: governance, risk, system scope, controls, assessment, compliance decisions, residual risk, ongoing monitoring, and evidence maintenance.
Use these points before preparing for the ISC2 CGRC exam.
CGRC is administered by ISC2.
The current CGRC exam outline is effective June 15, 2024.
ISC2 lists 125 multiple-choice and advanced item types in a 3-hour exam.
The passing grade is 700 out of 1000 points.
CGRC is delivered through Pearson VUE and listed in English.
ISC2 lists two years of required work experience for CGRC.
ISC2 lists the current CGRC exam outline as effective June 15, 2024. Preparation should map to the seven-domain outline rather than older CAP-era materials.
CGRC is built around system authorization and compliance evidence. Candidates should understand how governance, scope, controls, assessment, compliance, and maintenance fit together.
Implementation of Security and Privacy Controls is the largest single domain at 17%, but five domains sit between 14% and 16%, so broad coverage matters.
CGRC is delivered through Pearson VUE. Candidates should confirm appointment details, ID, check-in rules, language, timing, and ISC2 candidate agreement expectations.
Use this CGRC (Certified in Governance, Risk and Compliance) exam help page for exam-specific context, then compare the broader online exam help services page or contact HiraEdu if you need a direct handoff. This page stays focused on CGRC (Certified in Governance, Risk and Compliance) while the linked service pages cover broader exam support options.
ISC2's Certified in Governance, Risk and Compliance (CGRC) credential is designed for information security practitioners who support security risk management and information system authorization in accordance with legal and regulatory requirements. The current CGRC exam outline is effective June 15, 2024. ISC2 lists a 3-hour exam with 125 multiple-choice and advanced item types, a passing grade of 700 out of 1000 points, English-language delivery, and two years of required work experience. The current seven domain weights are Security and Privacy Governance, Risk Management, and Compliance Program 16%, Scope of the System 10%, Selection and Approval of Framework, Security, and Privacy Controls 14%, Implementation of Security and Privacy Controls 17%, Assessment/Audit of Security and Privacy Controls 16%, System Compliance 14%, and Compliance Maintenance 13%. Preparation should cover GRC frameworks, system scope, control selection, implementation evidence, security and privacy assessment, system compliance decisions, residual risk, change management, ongoing monitoring, documentation, and stakeholder communication.
ISC2 lists 125 multiple-choice and advanced item types on the current CGRC exam.
ISC2 lists the CGRC exam length as 3 hours.
ISC2 lists a passing grade of 700 out of 1000 points.
The current outline lists GRC Program 16%, Scope of the System 10%, Controls Selection 14%, Controls Implementation 17%, Assessment/Audit 16%, System Compliance 14%, and Compliance Maintenance 13%.
ISC2 lists two years of required work experience for the CGRC credential.
Review ISC2 membership and experience requirements, including the listed two years of required CGRC work experience.
Build a study map for GRC Program, Scope, Controls Selection, Controls Implementation, Assessment/Audit, System Compliance, and Compliance Maintenance.
Practice how authorization evidence moves from system scope through control selection, implementation, assessment, compliance decision, residual risk, and maintenance.
Review NIST, ISO/IEC, COBIT, risk frameworks, privacy requirements, control baselines, assessment methods, and stakeholder responsibilities.
Confirm Pearson VUE appointment details, ID requirements, check-in timing, 3-hour pacing, ISC2 candidate rules, and the 700-point passing standard.
Use the guide to self-serve, or talk to a coordinator if you need help mapping timelines, official requirements, or troubleshooting day-of logistics.
CISSP (Certified Information Systems Security Professional)
Pearson VUE
View serviceCCSP (Certified Cloud Security Professional)
Pearson VUE
View serviceSSCP (Systems Security Certified Practitioner)
Pearson VUE
View serviceCC (Certified in Cybersecurity)
Pearson VUE
View serviceCSSLP (Certified Secure Software Lifecycle Professional)
Pearson VUE
View serviceCISM (Certified Information Security Manager)
PSI
View service