CGRC ((ISC)² Certified in Governance, Risk and Compliance) — Free Online Mock Test
CGRC · 125 Q in 180m. Information security risk management & authorization (RMF) — scope, controls selection, assessment, authorization & monitoring. · Official language: English.
CGRC exam at a glance
CGRC key facts & eligibility
| Conducting body | ISC2 |
|---|---|
| Official website | isc2.org ↗ |
| Mode | Certified in Governance, Risk and Compliance (CGRC) — an ISC2 certification (formerly the Certified Authorization Professional, CAP) validating the skills to authorise and maintain information systems within a risk management framework: selecting, implementing, assessing and monitoring controls, and system authorisation. It is delivered at Pearson VUE. |
| Frequency | Offered year-round by appointment. |
| Scoring & marking | The exam has 125 questions in 3 hours, scored on a 1000-point scale with a passing score of 700, across seven domains — the governance, risk-management and compliance program; scope of the system; selection and approval of controls; implementation of controls; assessment/audit of controls; system compliance (authorisation); and compliance maintenance (continuous monitoring). |
| Score validity | The certification runs on a 3-year cycle, maintained with continuing professional education (CPE) credits and an annual maintenance fee. |
| Language | English. |
Who is eligible for CGRC?
At least two years of cumulative paid work experience in one or more of the CGRC domains; candidates without the experience can pass the exam and become an Associate of ISC2 while earning it.
Last verified July 2026 against ISC2 — CGRC. Always confirm current details on the official website before you register.
CGRC section breakdown
The CGRC mock test on Wrexa Edge replicates the real exam's section structure — same names, same question count per section, same time limits. No inter-section breaks — the timer runs continuously.
-
CGRC (60 Q)
CGRC scoring & marking scheme
Strategy: CGRC has no negative marking. Attempt every question — blank answers cost you potential marks but cannot pull your score down.
Scale: CGRC (pass 700/1000).
How CGRC is conducted
- Mode
- Test format
- Backtracking
- Mark for review
CGRC time strategy
With 60 questions in 180 minutes, you have about 180 seconds per question on average. Successful candidates aim for the following pacing on each section:
- CGRC (60 Q)
Wrexa Edge's analytics show your actual time-per-question after every mock so you can spot which sections you're losing time on.
CGRC topics covered
Across the 50 Wrexa Edge variants of CGRC, the following topics appear most often (sample distribution from one variant):
CGRC (60 Q)
- Governance — COBIT · 8
- Continuity — DR · 3
- Audit — Risk · 2
- Audit — Sampling · 2
- Risk — Calculations · 2
- Compliance — ISO 27001 · 2
- SDLC — Change · 2
- SDLC — Testing · 2
CGRC difficulty calibration
Advanced tier. Advanced-level: high-stakes exam with rigorous content depth. Expect 4-8 months of structured prep.
CGRC · 125 Q in 180m. Information security risk management & authorization (RMF) — scope, controls selection, assessment, authorization & monitoring. · Official language: English.
Verified content — Wrexa Edge's CGRC bank has been deeply curated with real exam-aligned content (estimated 100% syllabus coverage).
How Wrexa Edge prepares you for CGRC
- Real test-day interface
- 50 distinct variants
- Detailed analytics
- Spaced repetition (Notebook)
- Optional proctoring
- Free to start
Expert take: what CGRC really tests
Certified in Governance, Risk and Compliance (CGRC), from ISC2 and formerly known as CAP (Certified Authorization Professional), validates the skills to authorise and maintain information systems within a risk management framework. It has 125 questions in 3 hours, scored on a 1000-point scale with a passing score of 700, across seven domains from the GRC program through continuous monitoring. It requires two years of relevant experience (or the Associate of ISC2 path) and runs on a three-year maintenance cycle.
Preparation tips
- Know the risk management framework steps in order.
- Study control selection, implementation, assessment and monitoring.
- Aim above the scaled passing score of 700.
⚠️ Common mistakes to avoid
- Overlooking that CGRC is the renamed CAP — study current materials.
- Applying without the required experience (or the Associate path).
CGRC study plan
A phase-by-phase roadmap from your first concept to test-ready. Stretch or compress each phase to fit the time you have before your attempt.
- 125 questions in 3 hours, scaled 1000, pass 700
- Seven domains around the risk management framework
- Requires 2 years relevant experience (or Associate path)
- Governance, risk and compliance program
- Control selection, implementation and assessment
- System authorisation and continuous monitoring
- Full CGRC practice exams
- Review the RMF steps
- Aim above the scaled 700
Where CGRC can take you
A strong CGRC result opens up these careers and higher-study paths:
- Governance, risk & compliance
- 3-year maintenance
Best books & official prep for CGRC
- Official (ISC2) CGRC guide — ISC2
- CGRC practice tests — Various
Official practice: Prepare from the official ISC2 CGRC exam outline on isc2.org; focus on the risk management framework, control selection/implementation and continuous monitoring.
Previous-year papers: ISC2 publishes the exam outline; commercial practice tests are widely used.
Frequently asked questions
- What is the CGRC exam pattern?
- (ISC)² Certified in Governance, Risk and Compliance contains 60 questions across 1 section: CGRC (60 Q). Total duration is 180 minutes (about 180 seconds per question).
- Does CGRC have negative marking?
- No — CGRC has no negative marking. Each correct answer is worth 1 mark, so attempt every question.
- How is CGRC scored?
- Scaled score range: 100 to 1000. CGRC (pass 700/1000).
- How can I practise CGRC online for free?
- Wrexa Edge gives you 10 free full-length CGRC mock tests — with instant scoring, detailed explanations and analytics — plus 40 more with Pro. Start practising in under a minute, no card required.
- What is the difficulty level of CGRC?
- CGRC is rated Advanced difficulty on Wrexa Edge. Advanced-level: high-stakes exam with rigorous content depth. Expect 4-8 months of structured prep. CGRC · 125 Q in 180m. Information security risk management & authorization (RMF) — scope, controls selection, assessment, authorization & monitoring. · Official language: English.
- How long is the CGRC exam?
- CGRC runs for 180 minutes total. On Wrexa Edge the timer is enforced exactly as on the real exam — including no inter-section breaks.
- What topics are covered in CGRC?
- CGRC is split into: CGRC (60 Q). Each section is timed and weighted separately. CGRC · 125 Q in 180m. Information security risk management & authorization (RMF) — scope, controls selection, assessment, authorization & monitoring. · Official language: English.
- What tools or aids are allowed during CGRC?
- No special tools are required. Note: real exam is proctored — Wrexa Edge mirrors this with a webcam-based proctoring flow you can enable.
- Is the CGRC test adaptive?
- No — CGRC is a fixed-form (linear) test. Every candidate sees the same number of questions per section.
- How many CGRC mock tests does Wrexa Edge offer?
- Wrexa Edge generates 50 distinct CGRC variants — each with different question content, not just shuffled options — the first 10 free for everyone and 40 more with Pro. That's 3000 unique practice questions in the real test-day interface.
- Is there a free CGRC test series 2026?
- Yes. The Wrexa Edge CGRC test series for 2026 gives you 10 free full-length mock tests (50 in total) plus subject-wise and topic-wise tests — instant scoring and detailed analysis, no card required.
- Are CGRC previous year question–style papers included?
- Every CGRC mock is modelled on the official exam pattern and the style of previous years' papers — the same 60-question structure, sections and marking — so your practice mirrors the real paper you'll sit.
- Which is the best free CGRC mock test online?
- Wrexa Edge's CGRC mock test replicates the real exam interface, timing and marking scheme, with instant score, section-wise analysis and 50 fresh variants — a strong free choice for 2026 preparation.
- Can I take the CGRC mock test on mobile?
- Yes. CGRC mock tests run in any browser on mobile, tablet or desktop — no app or download needed. Start on your phone and your progress and analytics sync when you sign in.
- What is the CGRC syllabus?
- The CGRC syllabus maps to its 1 section: CGRC (60 Q). Wrexa Edge's mock tests cover the complete syllabus topic by topic — see the topics-covered breakdown above — so you practise every area at real exam difficulty.
- What is the eligibility for CGRC?
- Eligibility for CGRC — age, qualification and number of attempts — is set by the official conducting body and can change each cycle, so always confirm the current official notification before applying. Wrexa Edge focuses on realistic CGRC practice: 10 free full-length mocks in the exact exam pattern, ready whenever you are.
- When is the CGRC exam and how should I prepare?
- Official CGRC exam dates are announced by the conducting body for each cycle — check the latest notification for the current schedule. To be ready, follow a phased study plan and take full-length timed mocks; Wrexa Edge gives you 10 free CGRC mocks with instant scoring so you can track your readiness week by week.
Related exams & practice tests
Candidates preparing for CGRC also practise these on Wrexa Edge:
Browse more: All Tech & IT Certifications exams → · Full exam catalog →
Ready to ace CGRC?
Join thousands of candidates practising on Wrexa Edge. Free signup, 50 variants per exam, instant scoring.
Start practising free →