CGIC study plan

Define each core governance concept (board oversight, accountability, delegation, policy hierarchy) in your own words

Map the roles of board, executives, and control functions against a written authority matrix

Identify the three governance failures most commonly cited in public enforcement actions

Distinguish the major governance frameworks and state the purpose of each

Draft a policy-and-committee structure for a hypothetical mid-size firm

Explain how governance failures cascade into risk and compliance failures

Classify risks by likelihood and impact using a documented rating scale

Build a risk register with owners, controls, and residual ratings for ten risks

Differentiate inherent risk, residual risk, and risk appetite

Apply a risk treatment decision (accept, mitigate, transfer, avoid) to each register item

Explain how risk appetite is set and translated into tolerances

Describe the components of an enterprise risk management cycle

Distinguish laws, regulations, and internal policies by source and enforceability

Translate a regulatory requirement into an internal control and monitoring step

Identify the elements of an effective compliance program

Design a monitoring and testing schedule for the mapped controls

Differentiate first-line, second-line, and third-line responsibilities

Select appropriate audit testing methods for a given control

Draft findings with condition, criteria, cause, effect, and recommendation

Explain the audit lifecycle from planning through reporting and follow-up

Distinguish assurance from consulting engagements

Apply an ethical decision framework to three conflict-of-interest scenarios

Recite the professional conduct obligations (integrity, objectivity, confidentiality, competence)

Complete a timed mixed-domain practice set and review every missed item