ISC2 CGRC FAQ for exam format, topics, prep strategy, practice, and common candidate traps.
Start with Governance and risk management because it frames the rest of the exam. Then move through the study plan and use the cheat sheet to convert missed questions into decision rules.
The highest-risk trap is: Control list without risk. The better move is: Tie every control to risk, objective, owner, and evidence.
Use practice questions after a focused read, not before any context. For every miss, write the tested lane, the constraint, the correct rule, and why each distractor failed.
Use the official vendor source for live details such as exam name, status, beta or retirement notes, price, duration, delivery method, languages, and domain weights.