| Topic | Details |
| Topic 1 | - Align Component: This subsection covers aligning GRC practices with organizational objectives and regulatory requirements. A vital skill evaluated is the ability to integrate GRC processes into business operations effectively.
|
| Topic 2 | - Perform Component: This subsection emphasizes executing GRC activities and implementing controls to manage risks effectively. A key skill assessed is the ability to perform risk assessments and implement necessary actions.
|
| Topic 3 | - Review Component: This subsection focuses on reviewing and evaluating GRC practices to ensure continuous improvement. A critical skill evaluated is conducting audits and assessments to identify areas for enhancement in governance practices.
|
| Topic 4 | - Learn Component: This subsection focuses on the learning aspect of the GRC Capability Model, emphasizing foundational knowledge necessary for effective governance practices. A key skill assessed is understanding basic GRC principles to support strategic initiatives.
|
| Topic 5 | - GRC Capability Model Details: This section of the exam measures the skills of GRC Strategy Makers and covers detailed components of the GRC Capability Model. It includes understanding various elements and practices, key actions, and controls necessary for effective governance, risk management, and compliance.
|