SecureNinja's Certified in Governance, Risk and Compliance (CGRC) training prepares professionals to authorize and maintain information systems within risk management frameworks, particularly for U.S. federal government environments. This course covers the full lifecycle of security authorization and ongoing assessment as defined by the NIST Risk Management Framework (RMF). Students will learn how to select, implement, monitor, and assess security controls in compliance with FISMA and other federal regulations. The training is ideal for system owners, ISSOs, AOs, and cybersecurity professionals who manage compliance initiatives. It also reinforces essential documentation and reporting practices for system accreditation. This class is available in person in our Alexandria, VA classrooms as well as Live Online. Private onsite training is available for groups of 5 or more.
Candidates should have at least two years of experience in information systems security, particularly in risk management and compliance frameworks such as NIST RMF. Familiarity with FISMA, federal security standards, and system lifecycle processes is strongly recommended.
2034 Eisenhower Ave
Suite 170
Alexandria, VA 22314
This course prepares students for the Certified in Governance, Risk and Compliance (CGRC) exam. Students will learn how to implement and manage the NIST Risk Management Framework (RMF), select and assess security controls, support system authorization decisions, and maintain ongoing compliance with federal information security regulations such as FISMA. The course covers RMF roles and responsibilities, documentation practices, and monitoring strategies required for federal system accreditation.
The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):
If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.