CGRC

[clvk07]

Hi

Any tips for this exam? Whats the best material to review? 

[emb021]

This was shared before:
https://www.isc2.org/certifications/references#CGRC 

[nkeaton]

@clvk07I took the exam when it was the CAP. You will want to keep a copy of the exam objectives with you to remind you of what are expected to know and to identify any knowledge gaps. I mostly used the NIST documents but was completely based on the RMF at the time. Other frameworks were added prior to the name change. I definitely agree with @emb021 on the resources. You will not want to read all of those. The NIST documents are still no cost online.

This won’t help you because of the other frameworks being added but just want to give a shout out to Jim Litchko. He is the #1 expert in the World on the RMF and the CAP. He had the best study materials and practice questions. After I passed mine, we were able to hire him to teach our folks. The changes to the CGRC were enough that he has decided not to teach it any longer. I am very grateful to have met him and hope that he enjoys this retirement.

[Blue_bird]

Since you’re already a veteran, here is how to pivot your mindset for the CGRC.

The Essential Review List (NIST is King):  the CGRC is deeply rooted in US Federal standards (though applicable globally). You cannot pass without knowing these specific documents: NIST SP 800-37 (Rev. 2), NIST SP 800-53 (Rev. 5), FIPS 199 & 200, NIST SP 800-53A

Best Study Materials for 2026: 1) Christopher Kuznicki (YouTube) 2) ISC2 Official CGRC Training
3) Pocket Prep (CGRC/CAP) 4) Prabh Nair (LinkedIn/YouTube) (Any One)

Go through official practice tests before exam..!

All the best for your exam preparations..!

[nkeaton]

@Blue_bird I agree that was true with my exam, but before the name change, they did add some other frameworks. I know that the person that taught it forever decided to not update his training because thought it had changed substantially. I do not intend on taking the exam again to find out. It was actually harder for me than the other exams because was very non-technical. I equate it to learning history but then having to apply it to a situation.