Governance, Risk & Compliance
Certified in Governance, Risk, and Compliance (CGRC)
This five-day programme builds the integrated knowledge and discipline that GRC professionals must demonstrate, covering GRC foundations and governance context, enterprise risk management, compliance management and obligations, ethics, third-party risk and assurance, and technology, reporting and maturity. Participants develop skills in GRC integration, risk and compliance mapping, control design, and GRC reporting.
Introduction
Certified in Governance, Risk, and Compliance (CGRC) Training Course builds the integrated knowledge and discipline that GRC professionals must demonstrate. Participants work through GRC foundations and operating models, corporate governance structures and accountability, enterprise risk management with COSO ERM and ISO 31000, compliance management systems and ISO 37301, obligation mapping and control design, ethics, third-party and supply chain risk, and GRC technology, assurance, and maturity assessment as one connected body of knowledge. The programme links the obligations an organisation carries with the integrated capability that discharges them. As a result, learners gain a practical command of GRC practice. Furthermore, the course strengthens governance judgement, risk oversight, and compliance discipline.
Certified in Governance, Risk, and Compliance (CGRC) Course Objectives
- Explain GRC concepts, integration models, and business drivers.
- Apply corporate governance structures and accountability frameworks.
- Apply the COSO ERM framework across its components.
- Apply ISO 31000 risk principles, framework, and process.
- Apply compliance management systems and ISO 37301 requirements.
- Apply regulatory obligation mapping and control design.
- Apply risk appetite, tolerance, and risk register practice.
- Apply ethics, anti-bribery, and third-party risk controls.
- Apply GRC technology, data, and integrated reporting practice.
- Apply GRC assurance mapping, maturity assessment, and improvement.
Course Methodology
- Interactive sessions built on GRC and certification-style case questions.
- Workshops on governance design, risk registers, and obligation mapping.
- Group exercises on control design, ethics programmes, and reporting.
- Hands-on practice with GRC frameworks, obligation registers, and dashboards.
- Simulation of a GRC committee review and a compliance incident response.
- Facilitator coaching and structured certification revision guidance.
Who Should Take This Course
- Governance, risk, and compliance professionals.
- Compliance, ethics, and regulatory affairs officers.
- Enterprise risk managers and GRC analysts.
- Internal auditors covering governance and compliance.
- IT governance and security professionals with GRC duties.
- Consultants and practitioners preparing for GRC certification.
Certified in Governance, Risk, and Compliance (CGRC) Course Outlines
GRC Foundations and Governance Context
- • GRC definitions, scope, and business drivers.
- • Integrated versus fragmented GRC approaches.
- • Corporate governance principles and accountability theory.
- • Governance structures, boards, and committee architecture.
- • Directors' duties, stakeholders, and stewardship.
- • Roles, mandates, and the three lines model.
- • Case discussion: three functions, three risk languages, one exposure.
Enterprise Risk Management
- • COSO ERM components and strategy alignment.
- • ISO 31000 principles, framework, and process.
- • Risk identification techniques and completeness.
- • Risk assessment methods: scoring, matrix, and calibrated scales.
- • Risk appetite, tolerance, and limit setting.
- • Risk registers, taxonomy, and aggregation.
- • Workshop: building a risk register with appetite alignment.
Compliance Management and Obligations
- • Compliance management systems and ISO 37301.
- • Regulatory obligation registers and compliance mapping.
- • Compliance risk assessment and monitoring plans.
- • Policy architecture and policy lifecycle management.
- • Control design, control ownership, and effectiveness testing.
- • Whistleblowing, speak-up, and compliance culture.
- • Exercise: building an obligation register with control mapping.
Ethics, Third-Party Risk, and Assurance
- • Ethics programme design and code of conduct.
- • Anti-bribery frameworks: FCPA, UK Bribery Act, and equivalents.
- • Fraud risk assessment and anti-fraud controls.
- • Third-party due diligence and supply chain compliance.
- • Assurance mapping across the three lines.
- • Internal audit over governance and compliance.
- • Simulation: running a third-party diligence review.
Technology, Reporting, and Maturity
- • GRC data models and integrated platforms.
- • Continuous controls monitoring and automation.
- • GRC metrics, dashboards, and board reporting.
- • Programme performance measurement and review.
- • GRC maturity models and improvement roadmaps.
- • Certification readiness and documentation practice.
- • Capstone: presenting a GRC programme implementation plan.
Conclusion
By successfully completing Certified in Governance, Risk, and Compliance (CGRC), participants will gain a practical command of GRC foundations and governance structures, enterprise risk management with COSO ERM and ISO 31000, compliance management with ISO 37301, obligation mapping and control design, ethics and third-party risk controls, and GRC technology, assurance and maturity assessment. They will acquire skills in GRC integration, risk and compliance mapping, control design, and GRC reporting that support both professional practice and certification preparation. Gentex Training Center designs the programme to help professionals build GRC capability with confidence.
FAQs for the Certified in Governance, Risk, and Compliance (CGRC) course
— What is the "Certified in Governance, Risk, and Compliance (CGRC)" course about?
It builds the integrated knowledge and discipline that GRC professionals must demonstrate. The course spans GRC foundations and governance context, enterprise risk management, compliance management and obligations, ethics, third-party risk and assurance, and technology, reporting and maturity.
— What are the key benefits of the "Certified in Governance, Risk, and Compliance (CGRC)" course?
You gain a practical command of GRC practice that links the obligations an organisation carries with the integrated capability that discharges them. The course improves governance structuring and risk assessment, strengthens compliance management and obligation registers, sharpens control design and third-party controls, and gives you assurance and maturity practice that supports both daily work and certification preparation.
— What skills will I gain from the "Certified in Governance, Risk, and Compliance (CGRC)" course?
You will develop four core skills: GRC integration and governance structure design, enterprise risk management with COSO ERM and ISO 31000, compliance management and obligation mapping with ISO 37301, and control design with third-party risk control and GRC assurance reporting.
— What tools, methods, or standards are covered in the "Certified in Governance, Risk, and Compliance (CGRC)" course?
The course covers GRC definitions, scope and business drivers, integrated versus fragmented GRC approaches, corporate governance principles and accountability theory, governance structures, boards and committee architecture, directors' duties, stakeholders and stewardship, roles, mandates and the three lines model, COSO ERM components and strategy alignment, ISO 31000 principles, framework and process, risk identification techniques and completeness, risk assessment methods across scoring, matrix and calibrated scales, risk appetite, tolerance and limit setting, risk registers, taxonomy and aggregation, compliance management systems and ISO 37301, regulatory obligation registers and compliance mapping, compliance risk assessment and monitoring plans, policy architecture and policy lifecycle management, control design, control ownership and effectiveness testing, whistleblowing, speak-up and compliance culture, ethics programme design and code of conduct, anti-bribery frameworks of FCPA, UK Bribery Act and equivalents, fraud risk assessment and anti-fraud controls, third-party due diligence and supply chain compliance, assurance mapping across the three lines, internal audit over governance and compliance, GRC data models and integrated platforms, continuous controls monitoring and automation, GRC metrics, dashboards and board reporting, programme performance measurement and review, GRC maturity models and improvement roadmaps, and certification readiness and documentation practice.
— How is the "Certified in Governance, Risk, and Compliance (CGRC)" course applied in real-world practice?
Participants apply it to real work such as building a risk register with appetite alignment, constructing an obligation register with control mapping, designing controls and testing their effectiveness, running a third-party diligence review, preparing a GRC dashboard for the board, auditing governance and compliance, and presenting a GRC programme implementation plan. The same methods support assurance mapping and certification revision.
Contact our team and let us help you find the right option.
Introduction
Certified in Governance, Risk, and Compliance (CGRC) Training Course builds the integrated knowledge and discipline that GRC professionals must demonstrate. Participants work through GRC foundations and operating models, corporate governance structures and accountability, enterprise risk management with COSO ERM and ISO 31000, compliance management systems and ISO 37301, obligation mapping and control design, ethics, third-party and supply chain risk, and GRC technology, assurance, and maturity assessment as one connected body of knowledge. The programme links the obligations an organisation carries with the integrated capability that discharges them. As a result, learners gain a practical command of GRC practice. Furthermore, the course strengthens governance judgement, risk oversight, and compliance discipline.
Certified in Governance, Risk, and Compliance (CGRC) Course Objectives
- Explain GRC concepts, integration models, and business drivers.
- Apply corporate governance structures and accountability frameworks.
- Apply the COSO ERM framework across its components.
- Apply ISO 31000 risk principles, framework, and process.
- Apply compliance management systems and ISO 37301 requirements.
- Apply regulatory obligation mapping and control design.
- Apply risk appetite, tolerance, and risk register practice.
- Apply ethics, anti-bribery, and third-party risk controls.
- Apply GRC technology, data, and integrated reporting practice.
- Apply GRC assurance mapping, maturity assessment, and improvement.
Course Methodology
- Interactive sessions built on GRC and certification-style case questions.
- Workshops on governance design, risk registers, and obligation mapping.
- Group exercises on control design, ethics programmes, and reporting.
- Hands-on practice with GRC frameworks, obligation registers, and dashboards.
- Simulation of a GRC committee review and a compliance incident response.
- Facilitator coaching and structured certification revision guidance.
Who Should Take This Course
- Governance, risk, and compliance professionals.
- Compliance, ethics, and regulatory affairs officers.
- Enterprise risk managers and GRC analysts.
- Internal auditors covering governance and compliance.
- IT governance and security professionals with GRC duties.
- Consultants and practitioners preparing for GRC certification.
Certified in Governance, Risk, and Compliance (CGRC) Course Outlines
GRC Foundations and Governance Context
- • GRC definitions, scope, and business drivers.
- • Integrated versus fragmented GRC approaches.
- • Corporate governance principles and accountability theory.
- • Governance structures, boards, and committee architecture.
- • Directors' duties, stakeholders, and stewardship.
- • Roles, mandates, and the three lines model.
- • Case discussion: three functions, three risk languages, one exposure.
Enterprise Risk Management
- • COSO ERM components and strategy alignment.
- • ISO 31000 principles, framework, and process.
- • Risk identification techniques and completeness.
- • Risk assessment methods: scoring, matrix, and calibrated scales.
- • Risk appetite, tolerance, and limit setting.
- • Risk registers, taxonomy, and aggregation.
- • Workshop: building a risk register with appetite alignment.
Compliance Management and Obligations
- • Compliance management systems and ISO 37301.
- • Regulatory obligation registers and compliance mapping.
- • Compliance risk assessment and monitoring plans.
- • Policy architecture and policy lifecycle management.
- • Control design, control ownership, and effectiveness testing.
- • Whistleblowing, speak-up, and compliance culture.
- • Exercise: building an obligation register with control mapping.
Ethics, Third-Party Risk, and Assurance
- • Ethics programme design and code of conduct.
- • Anti-bribery frameworks: FCPA, UK Bribery Act, and equivalents.
- • Fraud risk assessment and anti-fraud controls.
- • Third-party due diligence and supply chain compliance.
- • Assurance mapping across the three lines.
- • Internal audit over governance and compliance.
- • Simulation: running a third-party diligence review.
Technology, Reporting, and Maturity
- • GRC data models and integrated platforms.
- • Continuous controls monitoring and automation.
- • GRC metrics, dashboards, and board reporting.
- • Programme performance measurement and review.
- • GRC maturity models and improvement roadmaps.
- • Certification readiness and documentation practice.
- • Capstone: presenting a GRC programme implementation plan.
Conclusion
By successfully completing Certified in Governance, Risk, and Compliance (CGRC), participants will gain a practical command of GRC foundations and governance structures, enterprise risk management with COSO ERM and ISO 31000, compliance management with ISO 37301, obligation mapping and control design, ethics and third-party risk controls, and GRC technology, assurance and maturity assessment. They will acquire skills in GRC integration, risk and compliance mapping, control design, and GRC reporting that support both professional practice and certification preparation. Gentex Training Center designs the programme to help professionals build GRC capability with confidence.
FAQs for the Certified in Governance, Risk, and Compliance (CGRC) course
— What is the "Certified in Governance, Risk, and Compliance (CGRC)" course about?
It builds the integrated knowledge and discipline that GRC professionals must demonstrate. The course spans GRC foundations and governance context, enterprise risk management, compliance management and obligations, ethics, third-party risk and assurance, and technology, reporting and maturity.
— What are the key benefits of the "Certified in Governance, Risk, and Compliance (CGRC)" course?
You gain a practical command of GRC practice that links the obligations an organisation carries with the integrated capability that discharges them. The course improves governance structuring and risk assessment, strengthens compliance management and obligation registers, sharpens control design and third-party controls, and gives you assurance and maturity practice that supports both daily work and certification preparation.
— What skills will I gain from the "Certified in Governance, Risk, and Compliance (CGRC)" course?
You will develop four core skills: GRC integration and governance structure design, enterprise risk management with COSO ERM and ISO 31000, compliance management and obligation mapping with ISO 37301, and control design with third-party risk control and GRC assurance reporting.
— What tools, methods, or standards are covered in the "Certified in Governance, Risk, and Compliance (CGRC)" course?
The course covers GRC definitions, scope and business drivers, integrated versus fragmented GRC approaches, corporate governance principles and accountability theory, governance structures, boards and committee architecture, directors' duties, stakeholders and stewardship, roles, mandates and the three lines model, COSO ERM components and strategy alignment, ISO 31000 principles, framework and process, risk identification techniques and completeness, risk assessment methods across scoring, matrix and calibrated scales, risk appetite, tolerance and limit setting, risk registers, taxonomy and aggregation, compliance management systems and ISO 37301, regulatory obligation registers and compliance mapping, compliance risk assessment and monitoring plans, policy architecture and policy lifecycle management, control design, control ownership and effectiveness testing, whistleblowing, speak-up and compliance culture, ethics programme design and code of conduct, anti-bribery frameworks of FCPA, UK Bribery Act and equivalents, fraud risk assessment and anti-fraud controls, third-party due diligence and supply chain compliance, assurance mapping across the three lines, internal audit over governance and compliance, GRC data models and integrated platforms, continuous controls monitoring and automation, GRC metrics, dashboards and board reporting, programme performance measurement and review, GRC maturity models and improvement roadmaps, and certification readiness and documentation practice.
— How is the "Certified in Governance, Risk, and Compliance (CGRC)" course applied in real-world practice?
Participants apply it to real work such as building a risk register with appetite alignment, constructing an obligation register with control mapping, designing controls and testing their effectiveness, running a third-party diligence review, preparing a GRC dashboard for the board, auditing governance and compliance, and presenting a GRC programme implementation plan. The same methods support assurance mapping and certification revision.
Partners in Learning
Our Partners in Learning include leading companies and organizations that trust Gentex Training Center for high-quality training courses and professional development programs. Together, we deliver impactful training programs that support skills growth, leadership development, and organizational excellence.
.png)
