Question 1
Which document establishes the overall security and privacy posture of an organization and defines the framework for managing risk?
Correct Answer:
Enterprise Risk Management Policy
Question 2
According to NIST SP 800-37 Rev. 2, who is ultimately responsible for the security and privacy risks associated with an information system?
Correct Answer:
Senior Accountable Official for Risk Management
Question 3
What is the primary purpose of a risk assessment in the context of security and privacy governance?
Correct Answer:
To identify, estimate, and prioritize risk to organizational operations and assets
Question 4
In the NIST Risk Management Framework, during which step does the organization categorize the information system based on impact analysis?
Correct Answer:
Step 1: Categorize
Question 5
An organization is establishing its compliance program and needs to define the acceptable level of risk that aligns with its business objectives. What document should be created first?
Correct Answer:
Risk Appetite Statement
Question 1
Exam overview

About this Exam

Prepare with the CGRC Practice Questions - ISC2 CGRC Certified in Governance, Risk and Compliance Exam practice quiz. This question bank includes 100 questions covering security, information, risk, nist, and organization. Use it to review important concepts, identify knowledge gaps, and build confidence for the related exam, course, or assessment.

More details

Additional Information

CGRC Practice Questions - ISC2 CGRC Certified in Governance, Risk and Compliance Exam

This practice set contains 100 questions from the matching question bank and focuses on security, information, risk, nist, and organization. Work through each question carefully, review the provided solutions, and revisit topics that need more study before your next attempt.

This is an independent study resource intended for practice and review; it is not an official examination or an endorsement by any organization named in the title.

Quiz information

Frequently Asked Questions

The complete question count is available after full access is unlocked.
No fixed duration is currently configured for this quiz.
Question explanations are included where they are available in the quiz content, helping you review the reasoning after answering.
Yes. You can retake the practice test again as you continue studying during your available access period.
After your access is confirmed, you can continue into the complete practice exam from this quiz flow.
Unless explicitly stated otherwise, this page provides independent practice material for study and exam preparation and is not the official examination itself.
Keep studying

Related Questions