This 40-hour course prepares professionals for the ISC2 Certified in Governance, Risk, and Compliance (CGRC) certification exam. Formerly known as CAP, the CGRC validates your ability to integrate governance, risk management, and compliance frameworks into organizational security programs. Covering all seven official exam domains, this course addresses information security risk management, security assessment, authorization processes, and continuous monitoring. With evolving regulatory requirements and increasing organizational risk, CGRC-certified professionals are in high demand to bridge the gap between security operations and executive governance.
Program Snapshot
3 upcoming sessions available now.
Enrollment Fit Guide
Review fit, readiness, and certification value without burying the page under a wall of text.
Identify the teams, roles, and learner profiles this course is built for.
Pick the cohort that fits your timeline and secure your seat.
Have a discount code?
Jul 27 - Jul 31, 2026
$2,995
Sep 14 - Sep 18, 2026
$2,995
Oct 26 - Oct 30, 2026
$2,995
Select a session above to continue to checkout.
Master every concept with our comprehensive modules
Starting at
Next cohort Jul 27 - Jul 31, 2026 • Virtual
Training Experience
A clearer view of how this course is delivered, what kind of outcome to expect, and how upcoming cohorts are structured.
Formats can vary across published cohorts.
Guided instructor time across the full program.
Structured for exam readiness, review, and retention.
Choose the cohort that best fits your calendar.
Empower your workforce with world-class training designed for modern enterprises
Enroll your team in our upcoming sessions and learn alongside industry professionals
Custom-tailored training exclusively for your organization's unique needs
Enrollment Context
- Information security professionals responsible for GRC activities - Security control assessors and authorization officials - System owners and information system security officers (ISSOs) - Compliance analysts and risk management professionals - IT auditors seeking formal GRC certification - Government and defense contractors working within RMF environments
IEC currently shows 3 upcoming public sessions for this course, and dedicated team delivery remains available when you need a private cohort.
IEC delivers this course through live cohorts, dedicated team options, and a broader software, security, and program-delivery practice.
Related Paths
Risk Management Audit
This 40-hour intensive course prepares experienced professionals for the ISACA Certified Information Systems Auditor (CISA) exam. Covering all five official CISA exam domains, the course addresses information systems auditing processes, IT governance and management, information systems acquisition and development, information systems operations and resilience, and protection of information assets. With hands-on scenario analysis and exam-focused review, participants build the knowledge and confidence needed to pass the CISA exam and validate their expertise in IS audit, control, and security.
Risk Management Audit
This 32-hour CRISC certification preparation course equips experienced IT and risk professionals to pass the ISACA Certified in Risk and Information Systems Control exam. Covering all four official CRISC domains, the course provides in-depth training on IT risk identification, assessment, response, and ongoing monitoring aligned to current enterprise governance frameworks. With hands-on scenario analysis and exam-focused review sessions, participants build the expertise needed to design and implement effective information systems controls. CRISC remains one of the most sought-after credentials for professionals bridging IT risk management and business strategy.
Course FAQ
Yes. IEC delivers live, instructor-led training designed for real exam readiness, practical discussion, and direct learner support rather than passive self-study only.
- Information security professionals responsible for GRC activities - Security control assessors and authorization officials - System owners and information system security officers (ISSOs) - Compliance analysts and risk management professionals - IT auditors seeking formal GRC certification - Government and defense contractors working within RMF environments
- Minimum of two years of cumulative paid work experience in one or more of the seven CGRC domains - ISC2 Associate status is available for candidates who do not yet meet the experience requirement - Familiarity with information security fundamentals and risk management concepts is recommended - Understanding of federal or organizational security frameworks (e.g., NIST RMF) is beneficial
Yes. IEC currently shows 3 upcoming public sessions for this course, and private team delivery is also available when you need a dedicated cohort.
