| Topic | Details |
| Topic 1 | - Perform Component: This subsection emphasizes executing GRC activities and implementing controls to manage risks effectively. A key skill assessed is the ability to perform risk assessments and implement necessary actions.
|
| Topic 2 | - Learn Component: This subsection focuses on the learning aspect of the GRC Capability Model, emphasizing foundational knowledge necessary for effective governance practices. A key skill assessed is understanding basic GRC principles to support strategic initiatives.
|
| Topic 3 | - Review Component: This subsection focuses on reviewing and evaluating GRC practices to ensure continuous improvement. A critical skill evaluated is conducting audits and assessments to identify areas for enhancement in governance practices.
|
| Topic 4 | - GRC Capability Model Details: This section of the exam measures the skills of GRC Strategy Makers and covers detailed components of the GRC Capability Model. It includes understanding various elements and practices, key actions, and controls necessary for effective governance, risk management, and compliance.
|