cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
SalzburgGirl
Newcomer I

CGRC before CISSP?

Before I embark on the CISSP, I was wondering if getting the CGRC would make sense or is even recommended. I mainly work in the GRC area (doing policy work), and would like to get a more solid understanding of the different frameworks etc. I am thinking that getting a CGRC certification could help me here. 

 

Does it make sense to attempt this certification without the knowledge & experience required for a CISSP?

 

Thanks for any guidance you may have. 

5 Replies
ericgeater
Community Champion

I've done a self-study of the CGRC.  I still may take the exam next year for the wisdom of the frameworks, as you mentioned.  But CISSP is a completely different depth than CGRC.

 

I would pick up a CGRC study guide (if one exists?!) and give it a read-through.  The material rarely changes, as you may expect.  If you find that you're already well-placed in your knowledge, then maybe the CGRC will be an easy win for you.

 

But it likely won't lend much toward your CISSP study.

-----------
A claim is as good as its veracity.
gidyn
Contributor III

If you've never done an ISC2 exam before, one in an area that you're familiar with may good to get a taste of the question style.
SalzburgGirl
Newcomer I

Hi @ericgeater ! Thank you for your views on this. There is no dedicated study guide for this certification, as far as I know. So, I will have to resort to what's available for the CISSP. But good to know that the CGRC doesn't go into the same great depth as the CISSP (I assume that that is what you meant 😉). 

 

I have done one ISC2 exam already (the CC), so I am somewhat familiar with the format. 

emb021
Advocate I

@SalzburgGirl Sadly, its hard to understand what the revamped CGRC cert covers as there is no review guide.

Have you looked at ISACA's CGEIT or CRISC certs?  I found these two helped me in my GRC career.

Further, both CGEIT and CRISC are fairly well known certs.  CGRC is just too new.


---
Michael Brown, CISSP, HCISPP, CISA, CISM, CGEIT, CRISC, CDPSE, GSLC, GSTRT, GLEG, GSNA, CIST, CIGE, ISSA Fellow
ericgeater
Community Champion

Hello @SalzburgGirl , and someone once said that the best study guides are the frameworks themselves.  800-37, 800-53, etc etc.  In fact, somewhere on this forum is a thread where an exhaustive roster of frameworks is listed!

 

Also, someone shared a document to me, which they call the Mango Document (for some reason).  It's on their Google Drive, and it expressly deals with CGRC.  I am placing the link below:

 

https://drive.google.com/file/d/1MqdckHhLnVT3CZC5BCL_NovNYf1wYU5O/view?usp=sharing

 

Definitely, you should look in the forum for the thread I just mentioned.

-----------
A claim is as good as its veracity.