Credentials

Core concepts of governance, risk management, compliance and assurance, and how the main international standards relate to one another.

Who it is for

Anyone joining a GRC team, and specialists in audit, legal, IT or operations who work alongside one.

Exam domains and weighting

1. D1Governance, strategy and policy25%
2. D2Risk management30%
3. D3Compliance and regulatory management25%
4. D4Assurance, internal control and audit20%

For professionals who run governance, risk and compliance across the organisation: from board-level governance to the controls that evidence it.

Who it is for

Risk managers, compliance officers, internal control and internal audit professionals, heads of GRC.

Exam domains and weighting

1. D1Governance, strategy and policy25%
2. D2Enterprise risk management30%
3. D3Compliance and regulatory management25%
4. D4Assurance, internal control and audit20%

For professionals who govern information security and technology risk: ISMS design, cyber regulation and digital operational resilience.

Who it is for

Information security managers, IT risk and compliance professionals, CISOs and their teams, ISMS implementers.

Exam domains and weighting

1. D1IT governance and security policy20%
2. D2Information security risk management30%
3. D3Cyber and technology regulation25%
4. D4Controls, assurance and resilience25%