Breadcrumb
  1. Training
  2. Education & Training Catalog
  3. SecureNinja
  4. Certified in Governance, Risk, and Compliance (CGRC)

Certified in Governance, Risk, and Compliance (CGRC)

SecureNinja's Certified in Governance, Risk and Compliance (CGRC) training prepares professionals to authorize and maintain information systems within risk management frameworks, particularly for U.S. federal government environments. This course covers the full lifecycle of security authorization and ongoing assessment as defined by the NIST Risk Management Framework (RMF). Students will learn how to select, implement, monitor, and assess security controls in compliance with FISMA and other federal regulations. The training is ideal for system owners, ISSOs, AOs, and cybersecurity professionals who manage compliance initiatives. It also reinforces essential documentation and reporting practices for system accreditation. This class is available in person in our Alexandria, VA classrooms as well as Live Online. Private onsite training is available for groups of 5 or more.

Course Overview

Overall Proficiency Level
3 - Advanced
Course Prerequisites

Candidates should have at least two years of experience in information systems security, particularly in risk management and compliance frameworks such as NIST RMF. Familiarity with FISMA, federal security standards, and system lifecycle processes is strongly recommended.

Training Purpose
Skill Development
Specific Audience
All
Delivery Method
Classroom
Online, Instructor-Led
Course Location

2034 Eisenhower Ave
Suite 170
Alexandria, VA 22314

Course Location Map
  • Your Location
  • Providers
  • Courses
  • Course and Provider Quantity
  • Classroom
  • Online, Instructor-Led

Learning Objectives

This course prepares students for the Certified in Governance, Risk and Compliance (CGRC) exam. Students will learn how to implement and manage the NIST Risk Management Framework (RMF), select and assess security controls, support system authorization decisions, and maintain ongoing compliance with federal information security regulations such as FISMA. The course covers RMF roles and responsibilities, documentation practices, and monitoring strategies required for federal system accreditation.

Framework Connections

The materials within this course focus on the NICE Framework Task, Knowledge, and Skill statements identified within the indicated NICE Framework component(s):

Feedback

If you would like to provide feedback on this course, please e-mail the NICCS team at NICCS@mail.cisa.dhs.gov. Please keep in mind that NICCS does not own this course or accept payment for course entry. If you have questions related to the details of this course, such as cost, prerequisites, how to register, etc., please contact the course training provider directly. You can find course training provider contact information by following the link that says “Visit course page for more information...” on this page.

Last Published Date: