VIP Exclusive
CGRC Certified Governance, Risk and Compliance VIP Practice Exam
CGRC — The CGRC (Certified in Governance, Risk and Compliance), formerly the CAP (Certified Authorization Professional), is administered by ISC2. The real exam consists of 125 questions (including 25 unscored pretest items), has a 3-hour time limit, and is scored on a scale of 0–1000 with a passing score of 700, covering 7 domains aligned to the NIST Risk Management Framework (RMF).
57
Questions
180m
Time Limit
70.00%
To Pass
Question 1 of 57👑 VIP
A federal agency is onboarding a new cloud-based human resources system that will process personally identifiable information (PII) for 50,000 employees. The ISSO is tasked with initiating the Risk Management Framework process. According to NIST SP 800-37 Rev. 2, which RMF step should the ISSO perform FIRST?
Questions 2–57 and full explanations are VIP-exclusive.