GOVERN
Clarify the Decision
Connect governance, risk appetite, decision authority, obligations, and organizational priorities.
ISC2 CGRC Preparation
Connect Risk to Decisions. Build Evidence People Can Trust.
Build a disciplined approach to risk appetite, control selection, assessment, authorization, continuous monitoring, and evidence-based governance.
30 days free, then $69/month. Cancel before the trial ends to avoid a charge.
$249 Course Access · 12 Months · Self-Paced Learning
Course Access
12 monthsof full access
Explore all 10 courses with the 30 day Academy Pass trial.
48Detailed Lessons
192Guided Sections
12 MonthsIndividual Course Access
24/7Self-Paced Study
Your Learning Foundation
Risk Management Professional Course Overview
SCOPE
Understand the System
Define boundaries, dependencies, information, protection requirements, and the scope of review.
ASSURE
Connect Controls to Evidence
Work through control selection, implementation, assessment, audit evidence, and supported findings.
MAINTAIN
Keep Compliance Current
Connect system compliance to monitoring, change, accountability, and continued review.
Skills You Can Put to Work
Make Governance, Risk, and Compliance Work Together
Follow the life of a supported risk decision from governance and system scope through controls, assessment, compliance, and maintenance. The curriculum keeps evidence, authority, and organizational context connected rather than treating compliance as a checklist.
Frame Risk in Organizational Context
Connect mission, risk appetite, authority, obligations, and uncertainty before recommending action.
Define a Defensible System Scope
Trace information, boundaries, interfaces, dependencies, and protection requirements.
Evaluate the Evidence Behind Controls
Connect selected controls to implementation records, assessment methods, findings, and limitations.
Support Continued Compliance
Track change, monitoring, follow-up, and decisions that keep the compliance record useful.
Your Complete Course Map
See How the Course Fits Together.
Build a disciplined approach to risk appetite, control selection, assessment, authorization, continuous monitoring, and evidence-based governance.
Security and Privacy Governance, Risk Management, and Compliance Program
Work through 8 lessons in Security and Privacy Governance, Risk Management, and Compliance Program, then connect the topics through flashcards, practice, and targeted review.
- Governance, Risk Appetite and Decision Authority
- Risk Analysis, Treatment and Enterprise Risk Decisions
- Framework Selection and Integrated Assurance
Scope of the System
Work through 5 lessons in Scope of the System, then connect the topics through flashcards, practice, and targeted review.
- System Identification, Boundaries and Interfaces
- Mission Functions, Dependencies and Service Criticality
- Information Discovery, Flows and Data Inventories
Selection and Approval of Framework, Security, and Privacy Controls
Work through 6 lessons in Selection and Approval of Framework, Security, and Privacy Controls, then connect the topics through flashcards, practice, and targeted review.
- Baseline Selection and Control Inventory
- Common Controls, Inheritance and Shared Responsibility
- Tailoring Controls for Mission and Threat
Implementation of Security and Privacy Controls
Work through 6 lessons in Implementation of Security and Privacy Controls, then connect the topics through flashcards, practice, and targeted review.
- Control Implementation Strategy and Delivery Planning
- Control Types, Allocation and Operational Ownership
- Compliance-Document Reviews, Role Training and Implementation Readiness
Assessment/Audit of Security and Privacy Controls
Work through 9 lessons in Assessment/Audit of Security and Privacy Controls, then connect the topics through flashcards, practice, and targeted review.
- Assessment Governance, Independence and Engagement Scope
- Assessment Methods, Sampling, Evidence and Plan Approval
- Executing Examinations, Interviews and Technical Tests
System Compliance
Work through 6 lessons in System Compliance, then connect the topics through flashcards, practice, and targeted review.
- Assembling and Reconciling the Authorization Package
- Risk Acceptance Criteria and Decision Authority
- Residual-Risk Analysis and Enterprise Aggregation
Compliance Maintenance
Work through 8 lessons in Compliance Maintenance, then connect the topics through flashcards, practice, and targeted review.
- Change Impact Analysis and Baseline Revision
- Change Approval, Deployment, Rollback and Verification
- Monitoring Strategy, Cadence, Assets and Evolving Requirements
A Connected Learning Process
Follow the Evidence From Scope to Continued Oversight
Clarify Governance
Identify decision authority, obligations, organizational priorities, and the risk context.
Define the System
Establish scope, information flows, dependencies, boundaries, and protection needs.
Select and Implement
Connect the framework and control set to the system and record how protections are implemented.
Assess and Communicate
Evaluate evidence, identify findings, explain limitations, and support the appropriate compliance decision.
Monitor and Maintain
Track changes, corrective actions, new evidence, and the need for further review.
From Understanding to Application
Practice the Work Behind a Defensible Risk Decision
GOVERNANCE
Build the Decision Brief
Connect authority, risk, evidence, uncertainty, and the decision requested from an accountable owner.
- Define scope and decision rights
- Separate evidence from assumptions
- Record the rationale and conditions
CONTROL ASSURANCE
Connect Claims to Evidence
Review whether the control record supports the specific protection and implementation claim being made.
- Trace controls to requirements
- Review assessment evidence
- State findings and limitations
CONTINUED OVERSIGHT
Keep the Compliance Record Useful
Connect changes and monitoring to the evidence needed for ongoing organizational decisions.
- Track material changes
- Follow corrective actions
- Maintain an accountable review record
Different Contexts. Connected Skills.
Bring Governance, Assurance, and Operations Together.
GOVERNANCE AND SCOPE
Start With Context and Authority
Connect organizational priorities and obligations to the system being reviewed and the people authorized to decide.
- Clarify the risk context
- Define boundaries and responsibilities
- Identify applicable requirements
CONTROL IMPLEMENTATION AND ASSESSMENT
Test the Supported Claim
Connect control selection, implementation, assessment, audit records, and findings.
- Trace implementation evidence
- Review methods and coverage
- Explain uncertainty and limitations
COMPLIANCE MAINTENANCE
Keep the Decision Current
Use monitoring and change information to support continued review and accountable follow-up.
- Track system and obligation changes
- Maintain assessment records
- Revisit decisions when context changes
Inside Your Student Center
See Your ISC2 CGRC Study Routine Come Together.
Follow your course in the Cyber Brain Academy Student Center. Find a topic, organize your study time, keep useful notes, and plan what comes next.
Jump to a Chapter
Stay With Your Topic
Keep your course in view while you move between learning resources and focused review.
Give Each Session a Plan
Use your study plan and calendar to turn available time into an intentional next step.
Make Review More Useful
Keep your notes, review your progress, and organize the topics that need more attention.
Explore the Learning Environment for Yourself.
All 10 courses with Academy Pass. 30 days free, then $69/month unless canceled.
Built for Active Learning
Everything You Need to Learn.
Move from explanation into retrieval, applied practice, and focused review. Your course resources and Student Center tools help turn available study time into a clear next step.
One Connected Learning Environment
Learn the Topic. Test Your Understanding. Keep Moving.
Translate risk evidence into accountable decisions and clear next actions.
Use lessons, flashcards, practice, notes, and your study plan without losing the connection between the topic and your next review.
48 Guided Lessons
Work through Risk Management Professional in an organized sequence with clear topics, detailed explanations, and connected review.
Section-by-Section Review
Use the lesson structure and Scenario Quiz activities to revisit concepts and check how well you can connect them.
Applied Practice
Move beyond recall with practice connected to the lesson topic and the decisions the curriculum helps you understand.
Topic-Based Flashcards
Review terminology, distinctions, and relationships in focused sessions that connect to what you are learning.
Your Study Tools, Together
Keep notes, review course progress, and organize your time with the Student Center study plan and exam-preparation tools.
Complete Curriculum Browser
See Exactly What You Will Learn
Explore all 48 lessons. Filter the course domains, search a topic, and open the section lists to see the chapter-level detail.
48 Lessons192 Guided Sections1728 Chapter-Level Activities7 Course Domains
48 Lessons
You Have Seen the Depth
Make Your Next Step a Clear One.
Start with the Academy Pass 30 Day Free Trial or open the complete 12-month course.
A Flexible Study Roadmap
Build the GRC Process in Focused Stages
GOVERNANCE
Establish the Decision Context
Study governance, risk appetite, roles, frameworks, life cycles, obligations, and compliance-program design.
SCOPE AND CONTROLS
Define What Needs Protection
Connect system boundaries and requirements to framework and control selection.
IMPLEMENTATION AND ASSESSMENT
Build and Review the Evidence
Study implementation records, assessment methods, audit evidence, findings, and accountability.
COMPLIANCE AND MAINTENANCE
Support the Ongoing Decision
Bring system compliance, monitoring, change, and corrective work together.
Built for Your Next Step
Find Your Starting Point
Your Starting Point
Build a Routine That Fits Your Next Step.
Use four quick questions to organize your ISC2 CGRC preparation. Your result suggests a study approach, not an exam-eligibility or certification decision.
Explore the Complete CurriculumFlexible Access and Support
Build a Learning Routine That Fits Your Life.
Study independently with 12 months of course access, explore all 10 courses with Academy Pass, or discuss enrollment for your organization.
Complete Course
12 Months of Full Access
Build your ISC2 CGRC routine with 48 lessons, flashcards, practice, and the Student Center. Study at your own pace and return to the topics you need to review.
Get Course Access
Every Course in One Membership
Academy Pass
Explore all 10 courses, keep your study tools together, and build the routine that fits your next step. The 30 day trial continues at $69/month unless canceled.
Academy Pass
Organizational Enrollment
Teams, Employers, and Institutions
Give your organization a connected learning path. Discuss the course, enrollment options, and how the Student Center can support your learners.
Request Program GuidanceStart Learning
Start Here. Keep Your Options Open.
Focus on ISC2 CGRC with 12 months of course access, or get Academy Pass and explore all 10 professional paths in one learning environment.
12 Months of Course Access
ISC2 CGRC Preparation
$249one-time payment
Full access to Risk Management Professional for 12 months.
- 48 Detailed Course Lessons
- 192 Guided Sections
- Lesson-Connected Flashcards
- Applied Practice and Review
- Student Center Study Tools
- Notes and Progress Tools
- 12 Months of Self-Paced Access
Course access does not award the certification or guarantee an examination result. Exam vouchers and testing fees are separate.
All 10 Courses · Best Annual Value
Academy Pass
One Membership. Every Professional Path.
$499/year
About $42/month, billed as one $499 annual payment.
Build your ISC2 CGRC study routine while keeping every CBA course within reach. Your lessons, flashcards, practice, and Student Center come together in one membership.
IT Foundations · Network Essentials · Cybersecurity Essentials · Cybersecurity Operations Analyst · AI Security Essentials · Risk Management Professional · Cybersecurity Advanced · Project Management Foundations · Project Management Essentials · Human Resources Essentials
Get Annual Academy Pass · $499Billed annually. Cancel renewal anytime.
Try Academy Pass for 30 Days.
30 days free, then $69/month. Cancel before the trial ends to avoid a charge.
Academy PassFlexible Monthly Access
Academy Pass Monthly Membership
$69/month
All 10 courses while subscribed. Billed monthly. Cancel anytime.
Start Monthly MembershipA Focused Study Window
Academy Pass 120 Day Access
$189one-time payment
All 10 courses for 120 days. No automatic renewal.
120 Day AccessQuestions Before Enrollment
Know What You Are Getting
Review the course scope, learning resources, access options, and certification-preparation details.
Talk With Cyber Brain AcademyWhat Is Included in This Course?
The course includes 48 lessons organized into 192 sections, with lesson-connected flashcards, practice, and Student Center study tools. The curriculum browser shows every lesson and its available section and chapter titles.
How Is the Course Organized?
The course follows these areas: Security and Privacy Governance, Risk Management, and Compliance Program; Scope of the System; Selection and Approval of Framework, Security, and Privacy Controls; Implementation of Security and Privacy Controls; Assessment/Audit of Security and Privacy Controls; System Compliance; Compliance Maintenance.
What Is Included With Academy Pass?
Academy Pass brings all 10 Cyber Brain Academy courses into one membership, with lessons, flashcards, practice, and the Student Center. Monthly, annual, 120 day access, and 30 day trial options appear in the pricing section.
Where Should I Start?
The curriculum develops governance, risk, compliance, control, and assessment concepts. Familiarity with organizational systems or security work can help you connect the examples to your role.
Can I See the Curriculum Before Enrolling?
Yes. Browse every lesson, filter the course areas, and open the section lists to review chapter titles. Use the Student Center video to see how the learning environment fits together.
How Long Does Course Access Last?
The individual course purchase includes 12 months of self-paced access. Academy Pass access follows the membership or access period selected at checkout.
Is an Exam Voucher Included?
Exam registration, exam vouchers, and testing fees are separate unless the specific checkout offer states otherwise. Course access is certification-preparation training, not certification itself.
Can I Study on a Phone or Tablet?
The course page and Student Center navigation support desktop, tablet, and mobile study. Use your preferred device to plan sessions, move through topics, and return to your course resources.
Can an Organization Enroll a Team?
Cyber Brain Academy offers organizational enrollment options. Use the program-guidance link to discuss the course and the learning needs of your team.
Does Completing the Course Award the Certification?
No. Completing this course does not award ISC2 CGRC or guarantee an examination result. Certification is administered separately by the credentialing organization.
Your Next Step Starts Here
Turn the Compliance Record Into a Supported Decision.
Explore the complete 48-lesson curriculum. Get 12 months of access to Risk Management Professional, or open all 10 courses with Academy Pass.
