Control assessment in a GRC program
CGRC covers managing security and privacy controls, risk programs, audits, and authorization, a neighboring specialism for professionals who assess security posture against a control framework.
Who it suits
Suits professionals who assess controls and manage risk programs and want a broadly recognized GRC credential not tied to one framework.
Key differences
- It is framework-neutral GRC work, whereas the COBIT assessor credential is specifically about assessing process capability using COBIT.
- It includes authorization and audit activities as part of managing risk programs.
- It is organized as an ISC2 specialty credential, so its community and upkeep differ from PeopleCert's.
- Level
- Specialty
- Assessment
- Written
- Study time
- 70-140h
- Listed from
- $599
