Chapter 1: RMF-CGRC regulations, roles, and responsibilitiesModule A: Introduction to RMF-CGRCModule B: Cybersecurity policy regulations and frameworkModule C: RMF-CGRC roles and responsibilities
Module A: Introduction to RMF-CGRC
Module B: Cybersecurity policy regulations and framework
Module C: RMF-CGRC roles and responsibilities
Chapter 2: Risk analysisModule A: Risk managementModule B: Risk assessment and the RMF process
Module A: Risk management
Module B: Risk assessment and the RMF process
Chapter 3: The RMF-CGRC processModule A: CGRC Domain 1—PrepareModule B: CGRC Domain 2—CategorizeModule C: CGRC Domain 3—SelectModule D: CGRC Domain 4—Implement ControlsModule E: CGRC Domain 5—Assess ControlsModule F: CGRC Domain 6—AuthorizeModule G: CGRC Domain 7—Monitor Security Controls
Module A: CGRC Domain 1—Prepare
Module B: CGRC Domain 2—Categorize
Module C: CGRC Domain 3—Select
Module D: CGRC Domain 4—Implement Controls
Module E: CGRC Domain 5—Assess Controls
Module F: CGRC Domain 6—Authorize
Module G: CGRC Domain 7—Monitor Security Controls

Candidates must have a minimum of 2 years cumulative paid full-time work experience in 1 or more of the 7 domains of theCAP CBK.
If you do not have the required experience, you may still sit for the exam and become anAssociate of (ISC)²until you have gained the required experience.