CGIC study guide
CGIC · Work through your exam, one topic at a time.
The Certified in Governance, Risk and Compliance (CGIC) is a professional credential aimed at practitioners who build and run the control environment of an organisation: the policies and oversight structures that direct it, the risk processes that anticipate what could go wrong, the compliance programmes that keep it inside its legal and regulatory obligations, and the assurance work that tests whether any of it actually functions. It suits compliance officers, risk analysts, internal auditors, governance and company-secretarial staff, and consultants moving into an integrated GRC role, particularly those who currently specialise in one pillar and need fluency across all four. The CGIC study guide has 5 sections and about 1,591 words.
01Governance: Accountability, Structure, and the Board's Role
Governance is the system of direction and control that determines how objectives are set, how performance is monitored, and who answers for outcomes. For a CGIC candidate the working definition matters less than the logic: governance allocates authority and accountability, and it must be documented so that authority can be traced.
322 words, about 2 min02Risk Management: From Appetite to Treatment
Risk management identifies, assesses, treats, and monitors uncertainty that could affect objectives. A standard lifecycle: establish context, identify risks, analyze (likelihood and impact), evaluate against appetite, treat, and monitor/report.
330 words, about 2 min03Compliance: Obligations, Controls, and Culture
Compliance is the discipline of identifying applicable obligations, translating them into controls, and evidencing that those controls operate. Obligations come from law, regulation, contracts, standards, and internal policy.
300 words, about 2 min04Audit and Assurance: Evidence, Risk-Based Planning, and Reporting
Assurance provides an independent opinion on whether controls are designed and operating effectively. Audit work follows a cycle: plan (understand the process, assess risk), design procedures, gather sufficient appropriate evidence, evaluate findings, and report.
315 words, about 2 min05Ethics and Professional Conduct: Judgment Under Pressure
Ethics tests whether a candidate can recognize a conflict and choose the response that preserves objectivity and public trust. Frameworks typically rest on integrity, objectivity, confidentiality, competence, and professional behavior.
324 words, about 2 min