ISC2

Certified in Governance, Risk and Compliance

CGRC · active

Catalog review: 2026-10-29. Only cited fields were reviewed; other values are historical planning data. Salary premiums are estimates, not a promise of a raise.

Add to My Portfolio
Exam cost
$599 USD
Questions · time · passing score
125 questions · 180 minutes · Pass: 700/1000
Prerequisites
Not verified — check issuer eligibility
Estimated salary premium
Not established by comparable evidence
Renewal requirements
Not verified in this audit; confirm with issuer.
Difficulty
Not rated

Domains covered

  • ** Information Security Risk Management Program
  • Scope of the Information System
  • Selection and Approval of Security and Privacy Controls
  • Implementation of Security and Privacy Controls
  • Assessment/Audit of Security and Privacy Controls
  • Authorization/Approval of Information System
  • Continuous Monitoring

Where this credential fits

MyCyberPath career mappings are planning guidance, not universal employer requirements.

    This credential is not currently mapped to a metro line.

    Compare this certification

    Recent catalog changes

    1. ISC2updated

      Certified in Governance, Risk and Compliance

      Certified in Governance, Risk and Compliance: renewal cost. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

      What changed
      Before
      $135 annually
      After
      Not verified
    2. ISC2updated

      Certified in Governance, Risk and Compliance

      Certified in Governance, Risk and Compliance: salary premium high. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

      What changed
      Before
      15000
      After
      Not verified
      Review source
    3. ISC2exam update

      Certified in Governance, Risk and Compliance

      Certified in Governance, Risk and Compliance: exam format. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

      What changed
      Before
      125 multiple choice and advanced item types, 3 hours, passing score 700 out of 1000 points
      After
      125 items; 180 minutes; multiple choice and advanced items; pass 700/1000.
      Review source
    4. ISC2exam update

      Certified in Governance, Risk and Compliance

      Certified in Governance, Risk and Compliance: exam delivery. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

      What changed
      Before
      In-person by Pearson VUE Testing Center
      After
      In person at authorized Pearson testing centers.
      Review source
    5. ISC2updated

      Certified in Governance, Risk and Compliance

      Certified in Governance, Risk and Compliance: salary premium low. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

      What changed
      Before
      15000
      After
      Not verified
      Review source
    6. ISC2updated

      Certified in Governance, Risk and Compliance

      Certified in Governance, Risk and Compliance: renewal period years. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

      What changed
      Before
      3
      After
      Not verified
    7. ISC2updated

      Certified in Governance, Risk and Compliance

      Certified in Governance, Risk and Compliance: vendor url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

      What changed
      Before
      https://www.isc2.org
      After
      https://www.isc2.org/certifications/cgrc/cgrc-certification-exam-outline
      Review source
    8. ISC2updated

      Certified in Governance, Risk and Compliance

      Certified in Governance, Risk and Compliance: cert url. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

      What changed
      Before
      https://www.isc2.org/certifications/cgrc
      After
      https://www.isc2.org/certifications/cgrc/cgrc-certification-exam-outline
      Review source
    9. ISC2updated

      Certified in Governance, Risk and Compliance

      Certified in Governance, Risk and Compliance: prerequisites. Recorded by the October catalog audit; review date, not necessarily the issuer effective date.

      What changed
      Before
      A minimum of two years of cumulative, paid, full-time work experience in one or more of the seven domains of the CGRC Common Body of Knowledge (CBK).
      After
      Not verified
    Browse all certification updates

    Sources and verification