Weekend batches
October 2026
09:00–15:00 · flexible hours
$799per learner
24 Oct 2026
4 of 25 seats available
31 Oct 2026
10 of 25 seats available
IT Security and Governance
Certified in Governance, Risk and Compliance (CGRC) Certification Training in Slovenia
Certified in Governance, Risk and Compliance (CGRC) Certification Training in Slovenia develops expertise in governance, risk management, compliance, security controls, NIST frameworks, system authorization, assessment, and continuous monitoring. Build practical GRC skills through structured training designed to prepare cybersecurity, audit, risk, compliance, and information security professionals for CGRC certification and career advancement in governance, risk, and compliance.
40 Hours/5 daysIntermediate4 · 2,900 reviews
Training calendar
Upcoming four-month course schedule
A new weekday and weekend batch starts every week. Each batch runs for 5 training days, based on the course duration of 40 Hours/5 days.
Weekend batches
November 2026
09:00–15:00 · flexible hours
$799per learner
07 Nov 2026
25 of 25 seats available
14 Nov 2026
25 of 25 seats available
21 Nov 2026
25 of 25 seats available
28 Nov 2026
25 of 25 seats available
Weekend batches
December 2026
09:00–15:00 · flexible hours
$799per learner
05 Dec 2026
25 of 25 seats available
12 Dec 2026
25 of 25 seats available
19 Dec 2026
25 of 25 seats available
26 Dec 2026
25 of 25 seats available
Weekend batches
January 2027
09:00–15:00 · flexible hours
$799per learner
02 Jan 2027
25 of 25 seats available
09 Jan 2027
25 of 25 seats available
16 Jan 2027
25 of 25 seats available
23 Jan 2027
25 of 25 seats available
30 Jan 2027
25 of 25 seats available
Course curriculum
What you’ll learn
40 Hours/5 daysIntermediate
Module 1: Security and Privacy Governance, Risk Management & Compliance
- Understand governance, risk management, and compliance principles.
- Explore security and privacy governance frameworks and organizational responsibilities.
- Learn NIST, ISO/IEC, COBIT, and other security and compliance frameworks.
- Understand confidentiality, integrity, availability, privacy, and non-repudiation.
- Study information and system lifecycles.
- Identify legal, regulatory, contractual, and organizational requirements.
- Understand risk management processes, risk tolerance, and compliance programs.
Module 2: Scope of the Information System
- Define information system boundaries, purpose, functionality, and assets.
- Identify information types processed, stored, or transmitted.
- Determine security and privacy requirements for information types.
- Understand system categorization and impact levels.
- Identify system stakeholders, dependencies, and organizational responsibilities.
- Develop appropriate system scope and documentation for security authorization.
Module 3: Selection and Approval of Security & Privacy Controls
- Understand security and privacy control frameworks and baselines.
- Identify baseline, common, inherited, and system-specific controls.
- Select and tailor controls according to organizational risk.
- Understand control enhancements and compensating controls.
- Document control selections and implementation responsibilities.
- Establish stakeholder agreement and continued compliance strategies.
Module 4: Implementation of Security and Privacy Controls
- Develop security and privacy control implementation strategies.
- Understand management, operational, technical, and common controls.
- Implement selected security and privacy controls.
- Align control implementation with organizational requirements.
- Document policies, procedures, security plans, and implementation evidence.
- Track residual risks, planned controls, and remediation activities.
Module 5: Assessment and Audit of Security & Privacy Controls
- Plan security and privacy control assessments and audits.
- Define assessment objectives, scope, resources, schedules, and deliverables.
- Collect and validate compliance evidence.
- Apply assessment techniques including interviews, examinations, and testing.
- Identify control deficiencies, vulnerabilities, and compliance gaps.
- Prepare preliminary and final assessment reports.
- Develop risk response and remediation plans.
Module 6: System Compliance and Security Authorization
- Review security and privacy documentation required for compliance decisions.
- Determine system risk posture and residual risk.
- Understand risk acceptance and risk treatment decisions.
- Support authorization and compliance documentation.
- Communicate compliance decisions to relevant stakeholders.
- Understand the relationship between security controls, risk, compliance, and organizational objectives.
Module 7: Compliance Maintenance and Continuous Monitoring
- Understand ongoing compliance and continuous monitoring activities.
- Apply security and privacy requirements during system changes.
- Track configuration, operational, security, and compliance changes.
- Monitor assets, controls, vulnerabilities, and security risks.
- Maintain evidence, policies, procedures, and compliance documentation.
- Support incident response, contingency planning, and security updates.
- Understand ongoing audits, testing, vulnerability assessments, and compliance reviews.
- Learn system decommissioning and compliance documentation requirements.
Module 8: CGRC Practical Risk Management & GRC Scenarios
- Apply governance, risk, and compliance concepts to enterprise scenarios.
- Analyze security control selection and implementation decisions.
- Practice risk assessment and risk treatment scenarios.
- Evaluate compliance gaps and control deficiencies.
- Work through assessment, audit, authorization, and continuous monitoring scenarios.
- Develop practical decision-making skills for cybersecurity GRC responsibilities.
Module 9: CGRC Certification Exam Preparation
- Review all seven CGRC certification domains.
- Practice governance, risk, compliance, security control, and assessment questions.
- Perform mock assessments and scenario-based practice.
- Identify knowledge gaps and strengthen weak areas.
- Review key terminology, frameworks, controls, and risk concepts.
- Prepare with exam-focused revision and practice strategies.
Entry requirements and prerequisites
- Basic Cybersecurity Knowledge: Understanding of information security concepts, security controls, risk, and compliance is recommended for learners.
- IT and Information Security Experience: Prior experience in IT, cybersecurity, information assurance, governance, risk, or compliance can help learners understand CGRC concepts effectively in Slovenia.
- Governance, Risk and Compliance Awareness: Familiarity with GRC principles, security policies, regulatory requirements, risk management, and compliance frameworks is recommended.
- Knowledge of Security Frameworks: Basic awareness of frameworks such as NIST, ISO/IEC, COBIT, and related security and privacy standards is beneficial for CGRC training.
- Risk Management Understanding: Learners should ideally understand basic risk identification, assessment, mitigation, security controls, and compliance processes used within organizations.
- Relevant Professional Experience: ISC2 requires two years of cumulative work experience in one or more CGRC domains to earn the certification. Candidates without the required experience may become an Associate of ISC2 after passing the CGRC examination and then have three years to obtain the required experience.
Career value
Reasons to choose this course
Build Governance, Risk and Compliance Expertise
Develop specialized knowledge of cybersecurity governance, risk management, compliance, and security controls to strengthen your professional profile and pursue advanced GRC opportunities.
Master Security Risk Management
Learn to identify, assess, mitigate, and monitor information security risks while aligning security practices with organizational objectives and compliance requirements.
Strengthen NIST and Security Framework Knowledge
Gain practical understanding of NIST-based risk management, security controls, assessment processes, and authorization concepts that are valuable across cybersecurity and GRC roles.
Develop Security Control Assessment Skills
Build expertise in selecting, implementing, assessing, documenting, and monitoring security and privacy controls across enterprise information systems.
Expand Cybersecurity GRC Career Opportunities
Prepare for career paths including GRC Analyst, Risk Analyst, Compliance Analyst, Security Auditor, Information Security Specialist, and Governance Professional.
Prepare for CGRC Certification and Career Advancement
Develop certification-focused knowledge across CGRC domains while strengthening the governance, risk, compliance, assessment, and authorization skills valued by cybersecurity organizations.
Advantages
Turn learning into practical capability
Industry-Recognized ISC2 Certification
Prepare for an internationally recognized ISC2 certification that validates professional knowledge across governance, risk, compliance, security controls, and information system authorization.
Comprehensive GRC Knowledge
Develop an integrated understanding of governance, risk, compliance, security policies, controls, assessments, and authorization to address complex enterprise security requirements.
Practical Risk and Compliance Skills
Strengthen your ability to evaluate cybersecurity risks, implement appropriate controls, assess effectiveness, document compliance, and support ongoing risk management activities.
Strong Security Framework Foundation
Gain valuable knowledge of security and privacy frameworks, risk management practices, control assessment methodologies, and compliance processes used in modern information security programs.
Supports Multiple Cybersecurity Career Paths
CGRC knowledge can support career progression across GRC, cybersecurity auditing, risk management, compliance, security assurance, information security, and governance functions.
Enhanced Enterprise Security Decision-Making
Learn how to connect organizational objectives, cybersecurity risks, security controls, regulatory requirements, and compliance responsibilities to support informed security decisions.
Exam format & assessment
- Certification: Certified in Governance, Risk and Compliance (CGRC), formerly known as Certified Authorization Professional (CAP)
- Exam Code: CGRC
- Exam Type: Computer-based certification examination
- Question Format: Multiple-choice questions and advanced item types
- Maximum Questions: 125 questions
- Exam Duration: 3 hours
- Passing Score: 700 out of 1000
- Recommended Experience: ISC2 requires two years of cumulative work experience in one or more of the seven CGRC domains. Candidates without the required experience can become an Associate of ISC2 after passing the CGRC examination and then have three years to obtain the required experience.
- Exam Delivery: Pearson VUE Testing Center
- Exam Language: English
- Key Exam Areas: Security and privacy governance, risk management and compliance, system scope, security and privacy controls, control implementation, assessment and audit, system compliance, and compliance maintenance.
- Preparation: CGRC Certification Training in Bengaluru, India can help learners develop governance, risk, compliance, security control assessment, authorization, and continuous monitoring skills needed for the CGRC examination.
Bring your learning together
Course conclusion
Certified in Governance, Risk and Compliance (CGRC) Certification Training in Slovenia provides comprehensive knowledge of governance, risk management, compliance, security and privacy controls, system authorization, assessment, audit, and continuous compliance. The course helps cybersecurity, GRC, audit, risk, and compliance professionals develop practical skills for managing information-system security risks and aligning security programs with organizational and regulatory requirements.
With a strong focus on governance frameworks, security controls, risk assessment, compliance documentation, control implementation, audit, and continuous monitoring, CGRC training provides a valuable foundation for professionals pursuing careers in governance, risk, and compliance. The certification is particularly relevant for professionals responsible for applying risk management programs and supporting secure information-system authorization.
Target audience
- Cybersecurity and Information Security Professionals
- GRC and Risk Management Professionals
- IT Auditors and Security Assessors
- Compliance and Regulatory Professionals
- Security Managers and GRC Leaders
- IT and Security Professionals Seeking CGRC Certification
Verified learning evidence
Expertise, recognition and learner outcomes
Course-specific expertise
- 10+ years of professional experience in GRC, cybersecurity, information security, risk management, compliance, and IT auditing.
- 1,500+ hours of professional training delivered to certification candidates, IT professionals, and corporate teams.
- 1,000+ professionals trained through instructor-led, online, classroom, and corporate training programs.
- 100+ corporate training sessions delivered for organizations implementing governance, risk, compliance, and security programs.
- 50+ practical GRC case studies and scenarios used for risk assessment, control evaluation, compliance, and audit-based learning.
- Industry training experience across IT Services, Banking & Financial Services, Healthcare, Telecommunications, Government, Manufacturing, E-commerce, and Technology sectors.
- Hands-on expertise in Governance, Risk Management, Compliance, Information Security, Risk Assessment, Security Controls, Audit Readiness, and Third-Party Risk Management.
- Practical exposure to NIST, ISO 27001, COBIT, RMF, security and privacy controls, risk management frameworks, and regulatory compliance requirements.
- Training approach includes real-world GRC scenarios, practical exercises, control assessments, risk analysis, case studies, mock assessments, and certification-focused preparation.
Documented learner outcomes
- Problem Statement: Organizations face challenges in managing governance, risk, compliance, security controls, and regulatory requirements across complex IT environments.
Inconsistent risk assessments and control processes can make it difficult to maintain compliance and demonstrate security readiness. - How We Overcame the Problem: Learners developed a structured GRC approach covering risk management, security controls, governance requirements, compliance assessment, and continuous monitoring.
They applied frameworks and control concepts to identify risks, evaluate controls, document findings, and recommend appropriate remediation actions. - Overall Implementation: Learners implemented an end-to-end GRC workflow covering asset identification, risk assessment, control selection, control implementation, compliance evaluation, monitoring, and reporting.
The implementation connected organizational requirements with practical governance, risk, and compliance activities. - Evidence of Learning: Learners demonstrated the ability to identify risks, assess security controls, map requirements, evaluate compliance gaps, and document risk treatment decisions.
Practical case studies, control assessments, risk registers, compliance exercises, and audit scenarios provided evidence of learning. - GRC Workflow:
Business Requirements → Asset Identification → Risk Assessment → Control Selection → Control Implementation → Compliance Assessment → Continuous Monitoring → Findings & Remediation → GRC Reporting - Governance Implementation: Learners established governance practices by identifying organizational objectives, policies, roles, responsibilities, and accountability requirements.
They evaluated how governance processes support security objectives, regulatory compliance, and organizational risk management. - Risk Management Implementation: Learners identified potential threats and vulnerabilities, assessed likelihood and business impact, and prioritized risks based on organizational requirements.
They created risk treatment recommendations covering mitigation, acceptance, transfer, and avoidance strategies. - Compliance & Control Implementation: Learners mapped regulatory, contractual, and organizational requirements to applicable security and privacy controls.
They evaluated control effectiveness and identified gaps requiring corrective actions or additional evidence. - Problem-Solving Evidence: Learners addressed challenges such as incomplete documentation, control deficiencies, changing compliance requirements, unclear risk ownership, and inconsistent risk assessments.
They applied structured risk analysis, control evaluation, governance practices, and remediation planning to resolve these challenges. - Comparative Evidence: Learners compared different governance, risk, and compliance approaches based on control objectives, risk management processes, regulatory requirements, monitoring, and audit readiness.
This helped learners understand how frameworks such as NIST, ISO 27001, COBIT, and RMF can support organizational GRC programs. - Overall Outcome: By completing the implementation, learners demonstrated practical skills in governance, risk management, compliance, security controls, audit readiness, and continuous monitoring.
These skills can support GRC activities across cybersecurity, information security, IT risk, compliance, and organizational assurance functions. - Final Evidence: A completed GRC case study, risk register, control assessment, compliance mapping, identified findings, remediation plan, monitoring approach, and GRC report provide evidence of the learner's practical competency.
These deliverables demonstrate the ability to apply CGRC concepts to realistic governance, risk, and compliance scenarios.
Helpful answers for planning your training
Frequently asked questions
CGRC stands for Certified in Governance, Risk and Compliance. It is an ISC2 certification focused on governance, risk management, compliance, security and privacy controls, assessment, authorization, and continuous compliance.
CGRC was formerly known as Certified Authorization Professional (CAP). ISC2 renamed the certification to Certified in Governance, Risk and Compliance to better reflect its broader GRC focus.
Learner reviews
Rated by 2,900 learners
Rating and review totals are controlled per course in the CRM.
4out of 5
Popular cities in Slovenia
Compare city information, course curriculum, exam details and ways to enquire.
Book with clarity
Clear pricing, protected approval and learner support
Approval before payment
A secure payment link is shared only after the CRM team confirms the request.
Live instructor-led delivery
Ask questions during the session and learn alongside a scheduled cohort.
Verified learner feedback
Published course feedback is linked to completed learner records and CRM approval.
Visible schedules
Review weekday and weekend dates, duration, timezone and seat availability before booking.