ISC2 · ISC2 CC
Governance, risk, and compliance
ISC2 CC · Lesson 5 of 16 · 35:25
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the ISC2 Certified in Cybersecurity (CC) exam, on the 2026 outline. In this lesson: what governance, risk, and compliance (GRC) is, why it matters, GRC frameworks, and GRC tools and compliance in practice. Includes three original practice questions, with Maplewood Schools, a fictional school district, as the example.
Preview the topics
- Maplewood passed its last compliance audit, so the superintendent says the district is now fully secure. What is wrong with this reasoning?
- Maplewood’s risks, policies, and audit evidence sit in spreadsheets owned by different teams, and nobody has the full picture. Which solution helps most?
- One school must keep an old lab system for six more months, and it cannot meet the new encryption standard. What should happen?