Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.

ISC2 Partner of the Year

ISC2 CGRC Self-Paced Training

Authorizing and maintaining information systems under a risk management framework — scoping, control selection, assessment and continuous monitoring. Work through every exam domain on your own schedule.

Student
Student
Student
Join 250,000+ certified alumni.
CISSP Professional

Master CGRC

On-Demand

Official ISC2

Authorized Training

Learn at Your Pace. Pass When You’re Ready.

Learn Smarter. Pass Faster. Now Adaptive!
AI-Powered Learning AI-powered personalized instruction adapts content, pace, and difficulty to your unique learning needs.
Your Success.

Official ISC2 Online Self-Paced Training uses artificial intelligence to customize your CGRC learning journey—pinpointing areas that need focus and guiding you through exam prep in a way that's truly personalized.

Program Abstract

REF: CGRC-2025 6
Curriculum aligned to the latest Exam Outline.
Format Self-Paced, Adaptive Learning
Access 180 Days

The CGRC is Hard. We Know How to Pass It.

You don't need a classroom to pass the CGRC—you need the right system. ISC2's adaptive learning platform uses AI to identify your knowledge gaps, adjust difficulty in real-time, and focus your study time where it matters most. With the official ISC2 eTextbook, interactive flash cards, domain quizzes, and 24/7 support, you'll build mastery at your own pace. When you're consistently scoring well on practice assessments, you'll know you're ready to pass.

AI-Powered Adaptive Learning.

Personalized instructionContent adapts to your knowledge, learning speed, and confidence level that identifies gaps in your knowledge and focuses your study time where it matters most.

Adaptive Engine
Adaptive Learning AI-Powered
Official ISC2 eTextbook Included
Course Access 180 Days
Exam Voucher INCLUDED

Official ISC2 Study Materials.

Official ISC2 eTextbookDigital textbook included—study on any device, interactive flash cards, domain quizzes, study sheets, and a complete glossary. Everything designed to work together.

Official Material

ISC2 eTextbook

Official digital textbook—read on any device, anywhere.

Assessment

Pre & Post Tests

Measure progress with course assessments and domain quizzes.

Study Tools

Flash Cards & Glossary

Interactive cards and comprehensive glossary of terms.

Study Sheets

Domain Quick Refs

Domain-by-domain key points for quick review.

180 Days + Exam Voucher.

Exam voucher includedYour CGRC certification exam fee is included—schedule when ready.. 180 days to master the material at your own pace, then test when you're confident.

Day 1
Instant Access Start your adaptive learning journey immediately.
Begin Learning
180 Days Access
AI-Driven Progress The platform adapts to focus on areas you need most.
Build Mastery
When Ready
Exam Voucher Ready Schedule at Pearson VUE testing center or take remotely proctored.
Get Certified
·
CGRC training materials including coursebook and study guides
Official ISC2
Authorized ISC2 courseware included.

"The adaptive learning really works—it identified my weak spots and focused my study time exactly where I needed it."

Self-Paced Student

Verified CGRC Graduate

Why Adaptive Learning?

AI-Powered Results
AI

Personalized Path

The platform learns how you learn—adapting content difficulty and pacing to maximize retention.

  • Dynamic difficulty
  • Immediate feedback
⚡

Efficient Study

Skip what you already know. Focus on gaps. The AI optimizes every minute of your study time.

  • Gap identification
  • Targeted support
Offer

Save on this course with a current special offer

Team pricing, military discounts and a limited-time offer of the week. See what applies before you book.

See special offers
Get Started Today

Explore Your Training Options

Tell us about your training needs and we'll create a personalized plan.

Award ribbon icon

Official ISC2 Courseware

Authorized ISC2 courseware for the current CGRC exam, updated as the exam changes.

Clock icon

180 Days of Access

Start the day you enroll and study on your own schedule for a full 180 days.

Flower icon

CGRC Exam Voucher Included

Your exam fee is covered. Book the CGRC exam with the testing provider when you feel ready.

Light bulb icon

Every Exam Domain Covered

All seven CGRC domains, from Security and Privacy Governance, Risk Management and Compliance Program to Compliance Maintenance.

Stars icon

Practice Before You Sit

Practice questions and review tools so you can measure readiness before booking the CGRC exam.

Sunglasses icon

DoD 8140 Approved

CGRC is recognized under the DoD 8140 framework for qualifying cyber roles.

ISC2 CGRC Self-Paced Training

Accepting Inquiries
+1

    Eligible for Special Pricing?

    We respect your privacy. No spam.

    COURSE STRUCTURE

    What the CGRC Exam
    Covers

    Every domain the exam tests, and what sits inside it.
    Work through them in any order, at whatever pace suits you.

    EXAM DOMAIN

    Self-Paced Topics: 8
    START HERE
    On the Exam

    Getting Started

    Activate Platform Access and the Official ISC2 eTextbook
    L.prep.1
    Review the CGRC Exam Outline Effective June 15, 2024
    L.prep.2
    Take the Baseline Assessment Across All Seven Domains
    L.prep.3
    Build a Study Planner for Your 180-Day Access Window
    L.prep.4
    How the Adaptive Learning Engine Targets Your Weak Areas
    L.prep.5
    Map the Seven Domains to the NIST RMF Steps
    L.prep.6
    How to Use the Practice Question Bank and Review Explanations
    L.prep.7
    Confirm Experience Requirements and Plan Your Exam Date
    L.prep.8

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 1
    On the Exam

    Security and Privacy Governance, Risk Management, and Compliance Program (16%)

    GRC Program Principles, Structure, and Governance Roles
    L.01.1
    RMF Roles: Authorizing Official, ISSO, ISSM, SCA, System Owner
    L.01.2
    Three-Tier Risk Management: Organization, Mission, System
    L.01.3
    NIST SP 800-37 Rev. 2 RMF Steps and Prepare Tasks
    L.01.4
    Compliance Frameworks: NIST CSF 2.0, ISO 27001, CMMC, FedRAMP
    L.01.5
    Regulations: FISMA, HIPAA, GDPR, and Privacy Requirements
    L.01.6
    Enterprise Risk Tolerance and Program Metrics
    L.01.7
    Privacy Program Integration and PII Management
    L.01.8
    Domain 1 Adaptive Quiz and Flash Card Set
    L.01.9
    Role and Responsibility Identification Drill
    L.01.10
    Regulation-to-Framework Mapping Scenario Practice Questions
    L.01.11
    RMF Step Sequencing Exercise With Feedback
    L.01.12
    Review Missed Questions and Reread eTextbook Sections
    L.01.13
    Governance Terminology and Acronym Review
    L.01.14
    Domain 1 Readiness Check Before Moving On
    L.01.15

    EXAM DOMAIN

    Self-Paced Topics: 14
    DOMAIN 2
    On the Exam

    Scope of the System (10%)

    System Description, Purpose, and Authorization Boundary
    L.02.1
    System Inventory, Data Flows, and Interconnections
    L.02.2
    Information Types and SP 800-60 Provisional Impact Levels
    L.02.3
    FIPS 199 Categorization and High Water Mark
    L.02.4
    Privacy Impact Assessment and PII Inventory
    L.02.5
    Determining Required Compliance: FedRAMP, CNSSI 1253, DoD Overlays
    L.02.6
    Registering the System and Stakeholder Identification
    L.02.7
    Domain 2 Adaptive Quiz and Flash Card Set
    L.02.8
    System Categorization Scenario Practice Questions
    L.02.9
    Authorization Boundary Identification Drill With Feedback
    L.02.10
    Compliance Requirement Determination Scenario Practice Questions
    L.02.11
    Review Missed Questions and Reread eTextbook Sections
    L.02.12
    Categorization Terminology and Acronym Review
    L.02.13
    Domain 2 Readiness Check Before Moving On
    L.02.14

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 3
    On the Exam

    Selection and Approval of Framework, Security, and Privacy Controls (14%)

    FIPS 200 and NIST SP 800-53 Rev. 5 Control Catalog
    L.03.1
    SP 800-53B Low, Moderate, and High Baselines
    L.03.2
    Common, Hybrid, and System-Specific Controls
    L.03.3
    Inherited Controls and Customer Responsibility Matrices
    L.03.4
    Tailoring: Scoping, Compensating Controls, Parameter Values
    L.03.5
    Overlays and Privacy Control Selection
    L.03.6
    Documenting Selection in the System Security Plan
    L.03.7
    Obtaining Approval of the Control Set
    L.03.8
    Domain 3 Adaptive Quiz and Flash Card Set
    L.03.9
    Baseline Selection and Tailoring Scenario Questions
    L.03.10
    Control Designation Drill: Common, Hybrid, System-Specific
    L.03.11
    Inherited Control Identification Exercise With Feedback
    L.03.12
    Review Missed Questions and Reread eTextbook Sections
    L.03.13
    Control Family Terminology and Acronym Review
    L.03.14
    Domain 3 Readiness Check Before Moving On
    L.03.15

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 4
    On the Exam

    Implementation of Security and Privacy Controls (17%)

    Developing a Control Implementation Strategy and Schedule
    L.04.1
    Implementation in On-Premises, Cloud, and Hybrid Environments
    L.04.2
    Configuration Baselines: DISA STIGs, CIS Benchmarks, SP 800-70
    L.04.3
    Implementing Technical, Operational, and Management Controls
    L.04.4
    Shared Services and Supply Chain Control Implementation
    L.04.5
    Documenting Implementation Statements in the SSP
    L.04.6
    Tracking Implementation Status and Gaps
    L.04.7
    Updating Documentation as Implementation Changes
    L.04.8
    Domain 4 Adaptive Quiz and Flash Card Set
    L.04.9
    Implementation Strategy Scenario Practice Questions
    L.04.10
    Configuration Baseline Matching Drill With Feedback
    L.04.11
    SSP Documentation Quality Exercise With Feedback
    L.04.12
    Review Missed Questions and Reread eTextbook Sections
    L.04.13
    Implementation Terminology and Acronym Review
    L.04.14
    Domain 4 Readiness Check Before Moving On
    L.04.15

    EXAM DOMAIN

    Self-Paced Topics: 15
    DOMAIN 5
    On the Exam

    Assessment/Audit of Security and Privacy Controls (16%)

    Security Assessment Plan Development and Assessor Independence
    L.05.1
    NIST SP 800-53A Methods: Examine, Interview, Test
    L.05.2
    Evidence Collection, Sampling, and Automated Scanning
    L.05.3
    Preparing the Initial Assessment Report
    L.05.4
    Reviewing Findings and Planning Risk Response Actions
    L.05.5
    Developing the Final Assessment Report
    L.05.6
    Developing the Risk Response Plan and POA&M Entries
    L.05.7
    Remediation Prioritization, Retesting, and Closure
    L.05.8
    Domain 5 Adaptive Quiz and Flash Card Set
    L.05.9
    Assessment Method Selection Scenario Questions
    L.05.10
    Finding-to-Risk-Response Mapping Drill With Feedback
    L.05.11
    Assessment Report Sequencing Exercise With Feedback
    L.05.12
    Review Missed Questions and Reread eTextbook Sections
    L.05.13
    Assessment Terminology and Acronym Review
    L.05.14
    Domain 5 Readiness Check Before Moving On
    L.05.15

    EXAM DOMAIN

    Self-Paced Topics: 14
    DOMAIN 6
    On the Exam

    System Compliance (14%)

    Reviewing and Submitting the Authorization Package
    L.06.1
    SSP, SAR, and POA&M as Core Authorization Documents
    L.06.2
    Determining System Risk Posture and Residual Risk
    L.06.3
    Authorization Decisions: ATO, Conditional, Denial, Ongoing Authorization
    L.06.4
    Risk Acceptance and Authorization Termination Dates
    L.06.5
    Documenting System Compliance and Authorization Status
    L.06.6
    Communicating the Decision to Stakeholders
    L.06.7
    Domain 6 Adaptive Quiz and Flash Card Set
    L.06.8
    Authorization Decision Scenario Practice Questions
    L.06.9
    Risk Posture Determination Exercise With Feedback
    L.06.10
    Authorization Package Component Drill With Feedback
    L.06.11
    Review Missed Questions and Reread eTextbook Sections
    L.06.12
    Authorization Terminology and Acronym Review
    L.06.13
    Domain 6 Readiness Check Before Moving On
    L.06.14

    EXAM DOMAIN

    Self-Paced Topics: 14
    DOMAIN 7
    On the Exam

    Compliance Maintenance (13%)

    System Change Management and Security Impact Analysis
    L.07.1
    Information Security Continuous Monitoring Strategy (SP 800-137)
    L.07.2
    Ongoing Assessments, Scanning, and Status Reporting
    L.07.3
    Ongoing Authorization and Reauthorization Triggers
    L.07.4
    Engaging in Audits Based on Compliance Requirements
    L.07.5
    FedRAMP Continuous Monitoring Deliverables and Cadence
    L.07.6
    System Decommissioning, Sanitization, and Record Retention
    L.07.7
    Domain 7 Adaptive Quiz and Flash Card Set
    L.07.8
    Significant Change Scenario Practice Questions
    L.07.9
    Continuous Monitoring Frequency Drill With Feedback
    L.07.10
    Decommissioning Sequence Exercise With Feedback
    L.07.11
    Review Missed Questions and Reread eTextbook Sections
    L.07.12
    Monitoring Terminology and Acronym Review
    L.07.13
    Domain 7 Readiness Check Before Moving On
    L.07.14

    EXAM DOMAIN

    Self-Paced Topics: 8
    START HERE
    On the Exam

    Exam Prep

    Full-Length Practice Exam One: 125 Questions in Three Hours
    L.prep.1
    Weak-Area Review From Adaptive Platform Analytics
    L.prep.2
    Full-Length Practice Exam Two and Score Comparison
    L.prep.3
    Seven-Domain Flash Card Sweep and RMF Step Review
    L.prep.4
    Reading Scenario Questions for Role and Step Clues
    L.prep.5
    Schedule Your Exam at Pearson VUE With the Included Voucher
    L.prep.6
    Exam Day Logistics: Identification, Timing, and Testing Rules
    L.prep.7
    After the Exam: Endorsement, Experience, and CPE Requirements
    L.prep.8
    COURSE PROGRESS Domain 0 of 8
    Frequently Asked Questions

    CGRC Self-Paced
    Questions, Answered

    Real questions from real professionals who passed.
    Here's how we answer them.

    Official ISC2 courseware, on-demand video instruction, practice questions and your CGRC exam voucher, with 180 days of access from enrollment. Everything is online, so you start the day you enroll.

    180 days from the date you enroll. There is no fixed schedule and no cohort to keep up with — you work through the material at whatever pace fits around your job.

    Yes. Your CGRC exam voucher is included in the price, so there is nothing further to buy before you sit the exam. You book it with the testing provider once you are ready.

    CGRC has seven exam domains: Security and Privacy Governance, Risk Management and Compliance Program, Scope of the System, Selection and Approval of Framework, Security and Privacy Controls, Implementation of Security and Privacy Controls, Assessment/Audit of Security and Privacy Controls, System Compliance and Compliance Maintenance. The course is organized the same way, so each section maps to the domain it prepares you for.

    Yes. Training Camp is an authorized ISC2 training partner and this course uses official ISC2 CGRC courseware, kept aligned to the current exam version.

    It suits professionals who authorize and maintain systems under a risk management framework, including federal contractors. CGRC is also approved under DoD 8140 for qualifying roles.

    Yes. Our Success Guarantee lets you apply 100% of your self-paced course investment toward any of our live CGRC training classes within 30 days of your initial purchase. Contact the enrollment team and they will handle the transfer and help you pick a class date. Self-paced itself does not include an exam retake.

    Get the Free
    CGRC Exam Guide

    • Expert strategies to spot trick questions
    • Question patterns examiners actually use
    • Proven pacing + pressure management tactics
    Articles and Certification Resources

    Industry
    Articles

    Dive into our library of articles covering today’s most in-demand IT certifications, from cybersecurity and cloud to networking and project management. You’ll find practical tips, exam prep strategies, and industry updates to help you advance your career.

    Weighing this against another certification? Compare them head to head in Certification Matchups →

    Student Success Stories

    What Our Students Say

    Join thousands of certified professionals who trained with Training Camp

    ★★★★★

    The ISSEP self-paced training fit into my weekends and lunch breaks perfectly. I liked that I could rewind and review sections, though I missed having live discu...

    NH
    Nic*** Har*** I**ormation Security Specialist
    ★★★★★

    I really liked the self-paced format because I could learn at my own speed, especially when reviewing risk management topics.

    DM
    Dav** Mon** C**er Technician
    ★★★★★

    I walked into the exam feeling completely prepared and passed on my first attempt.

    BD
    B Dan**** R** Lead
    ★★★★★

    The flexibility of this program was exactly what I needed. Being able to study on my own schedule made it possible to prep for certification without disrupting w...

    CJ
    Car*** Jim**** C**ersecurity Program Coordinator
    ★★★★★

    This OnDemand class, mixed with the live Training Camp review session was the perfect combo to pass the CISSP!

    Continue Your Journey

    CGRC SP Related Courses

    Advance your career with these recommended certifications

    Featured on