Training Programs

Cybersecurity

ISC2 Governance, Risk, and Compliance Certification (CGRC™) Training Boot Camp (previously CAP®)

phone Call Us: 855.520.6806

First name *

Attention Enter your first name.

Last name *

Attention Enter your last name.

Email *

Attention Enter your email.

Phone number *

Attention Enter your phone number.

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

ISC2 Governance, Risk, and Compliance Certification (CGRC™) Training Boot Camp (previously CAP®)

Learn how to maintain and authorize information systems within the National Institute of Standards and Technology (NIST) Risk Management Framework (RMF). You will leave this boot camp with the knowledge and domain expertise needed to pass the ISC2 CGRC™ exam, previously known as CAP®.

$3,999.00 (USD)

ENROLL NOW phone Call Us: 855.520.6806

                                View session dates
                            

                                Code
                                    LBC102
                            
calendar_today
                                3 Days
                            
speedInstructor led
laptopOnline

Have a question?We're here to help

REQUEST INFO

ENROLL NOW

phone Call Us:

855.520.6806

Overview

The ISC2 Certified in Governance, Risk, and Compliance (CGRC™), previously known as Certified Authorization Professional (CAP®), teaches you the best practices, policies, and procedures used to authorize and maintain information systems. You will learn how to use the Risk Management Framework (RMF) to support your organization's operations while complying with legal and regulatory requirements.

The CGRC certification is sought after by civilian, state, and local governments, as well as system integrators supporting these organizations. Additionally, you will learn about the purpose of information systems security authorization, describing and deciding when systems authorization is employed, and defining systems authorization, roles, and responsibilities.

Upon boot camp completion, you will have a firm understanding of the legal and regulatory requirements for Assessment and Authorization (A&A), maintaining systems documentation, and much more. You will leave with the knowledge and skills necessary to earn your ISC2 CGRC™ certification, which verifies your ability to set up the formal processes used to assess risk and establish security requirements.

The exam cost for the ISC2 CGRC™ certification exam is included with your enrollment.

Our Certification Success Program, paired with our provided prep materials, boot camp sessions, and post-work, is designed to ease any concerns you may have when taking the certification exam. If your first attempt is unsuccessful, this program provides peace of mind that you may be eligible to take the certification exam a second time (if needed) at no additional fee.

*To qualify for a second certification exam voucher, students must:

Attend at least 85% of each day of class
Score a 90% or higher on their final practice exam
Take the first exam within 90 days of class completion
Upload your exam failure notice from your first exam attempt

Objective

Outline

Day 1
1. Risk Management Framework
  1. Understanding the Risk Management Framework
  2. Categorization of information system
  3. Selection of security controls
  4. Security control implementation
  5. Security control assessment
  6. Information system authorization
  7. Monitoring of security controls
2. Risk Management Framework Processes
Day 2
1. Categorize Information Systems
  1. Information system
  2. System security plan
  3. Categorize a system
  4. National security system
  5. Privacy activities
  6. System boundaries
  7. Register system
2. Select Security Controls
  1. Establish the security control baseline
  2. Common controls and security controls inheritance
  3. Risk assessment as part of the Risk Management Framework (RMF)
Day 3
1. Implement Security Controls
  1. Implement selected security controls
  2. Tailoring of security controls
  3. Document security control implementation
2. Assess Security Controls
  1. Prepare for security control assessment
  2. Establish security control assessment plan (SAP)
  3. Determine security control effectiveness and perform testing
  4. Develop initial security assessment report (SAR)
  5. Perform initial remediation actions
  6. Develop final security assessment report and addendum
3. Authorize Information Systems
  1. Develop plan of action and milestones (POAM)
  2. Assemble security authorization package
  3. Determine risk
  4. Determine the acceptability of risk
  5. Obtain security authorization decision
4. Monitor Security State
  1. Determine security impact of changes to system and environment
  2. Perform ongoing security control assessments
  3. Conduct ongoing remediation actions
  4. Update key documentation
  5. Perform periodic security status reporting
  6. Perform ongoing risk determination and acceptance
  7. Decommission and remove system

Requirements

Prerequisites

You've got questions.
We're here to help.

Our highly knowledgeable Enrollment Specialists will answer any questions you might have about the course and payment options.

REQUEST INFO

Instructor

FAQs

What is CGRC™ (previously CAP®)?

The Certified in Governance, Risk, and Compliance (CGRC), previously known as Certified Authorization Professional (CAP certification), is designed to help you demonstrate to employers that you have the skills to advocate for the security risk management of the organization in accordance with legal and regulatory requirements. This allows you to pursue information security authorization as an information security practitioner.

What salary can I expect as a Certified Authorization Professional?

According to Burning Glass Technologies, an analytics software company that provides real-time data on job growth, skills in demand, and labor market trends, the salary of IT professionals with Certified in Governance, Risk, and Compliance certification can vary based on location and experience level. However, once you have completed the CGRC (previously CAP) program, on average, you can expect to earn an annual salary of $88,450.

Does this course prepare you for a certification?

Yes, you will be prepared for the ISC2 CGRC™ –Certified in Governance, Risk, and Compliance exam. To sit for the exam, you will need to meet the following requirements:

At least two years of paid work experience in at least one of the seven domains listed in the ISC2 CGRC Common Body of Knowledge (CBK)
However, you can become an Associate of ISC2 by passing the exam without the required work experience.

When can I start this course?

You can register for the boot camp whenever you are ready. Our team will help you select the session that will best fit you.

How long does it take to complete this course?

The boot camp is 3 days in length. You will have 3 months from the completion of the boot camp to access all boot camp materials.

What kind of support will I receive?

The boot camp instructor will be available during the session to answer any questions. You will also have access to the Infosec Skills platform, where you will be able to create support requests as needed.

What happens when I complete the course?

Upon successful completion of your boot camp session, you will be awarded a certificate of completion from Infosec and the school or organization that you registered through.

Am I guaranteed a job?

ed2go courses will help you gain the skills and knowledge you need to take the next step in your career and stand out to potential employers. However, you should always research the job market in your area before enrolling.

Can I get financial assistance?

ed2go courses are non-credit, so they do not qualify for federal aid, FAFSA, and Pell Grant. In some states, vocational rehab or workforce development boards may provide funding to take our courses. Additionally, you may qualify for financial assistance if you meet certain requirements. Learn more about financial assistance.

How can I get more information about this course?

If you have questions that are not answered on our website, representatives are available via LIVE chat. You can also call us at 1-877-221-5151 during regular business hours to have your questions promptly answered. If you are visiting us during non-business hours, please send us a question using the "Contact Us."