Track ISC2 CGRC practice status for Governance, Risk and Compliance Certification and request IT Mastery coverage.
Governance, Risk and Compliance Certification (CGRC) is ISC2’s GRC-focused credential for information security practitioners who support security risk management, system authorization, control assessment, and compliance maintenance.
This page tracks the CGRC practice-bank rollout for IT Mastery. Dedicated simulator practice is not live yet, but you can review the snapshot, exam domains, and related security routes while coverage is being prioritized.
| Domain | Weight |
|---|---|
| Security and Privacy Governance, Risk Management, and Compliance Program | 16% |
| Scope of the System | 10% |
| Selection and Approval of Framework, Security, and Privacy Controls | 14% |
| Implementation of Security and Privacy Controls | 17% |
| Assessment/Audit of Security and Privacy Controls | 16% |
| System Compliance | 14% |
| Compliance Maintenance | 13% |