So I took my CGRC exam last week, and had no success with the first attempt. However, I still have a second chance thank to the benefits provided by my bootcamp I have attended last month on InfoSec. Prior to taking the exam, I took a full week off of work to fully master the concepts of the Risk Management Framework with the steps, the outputs and documents for each step, the tasks associated with each step, the primary responsiblities of each step, and understanding the overall process. When taking the exam, I didn't find myself feeling that nervous, but after reviewing the results, I was met with a massive disappointment that I was only above proficiency with the Domain that covered the Scope of the System, while the rest of the other domains I was not proficient at. At this point, I am currently taking a week away from having my mind on it 24/7, except for certain parts where I gradually write down any thoughts that come to mind base on what I have witnessed on the exam. If anyone can provide any guidance on what steps I need to take moving forward to improve my knowledge on the other domains, then it would be very appreciative.
