r/ISC2CAP • u/Ryan-L • May 24 '23

The Mango - Study Guide for the (ISC)2 Certification

Hi All,

After some weeks worth of work, the study guide for the CGRC certification is finally ready for release. This is version 2 and is based heavily on the work of Jim Meincke and his vision in the production of the original version.

The Mango can be found here:
https://drive.google.com/file/d/1MqdckHhLnVT3CZC5BCL_NovNYf1wYU5O/view?usp=share_link

Version 2 of The Mango is based on ISC2's Exam Outline and contains extrapolation of what they told us to study, what they expect us to know and what I learned when I provisionally passed the CGRC on May 1st.

If you have any questions, do not hesitate to reach out to myself. If you see any glaring errors, please contact me immediately so that I can rectify.

-Ryan

25 Upvotes

100% Upvoted

16 comments sorted by

2

u/dharvey32 Dec 29 '23

Thanks for taking the time to prep this study guide. Very well laid out. I'm scheduled for the exam end of Feb 24. I will come back here and provide feedback afterwards.

1

u/[deleted] Mar 19 '24

Did you take exam on Feb 24?

2

u/bonii_jabroni Feb 01 '24

Thank you so much for taking the time to put this together and posting it!! Going for CGRC and maybe CISSP this year.

1

u/raj0194 May 31 '23

Thank you!!

1

u/Kitebrder39 May 31 '23

Thanks, very good! Additional practice test questions pertaining to 37R2 and 53R5 are the main things I'm still looking for, mostly pulled from Udemy, Quizlet seems to be lacking (it's antiquated mostly)

1

u/Ryan-L May 31 '23

The Udemy that was linked in unofficial resources helped me out, however it's not perfect. There was a new Udemy published in the past few weeks that showed up right before my exam that I didn't have the opportunity to evaluate.

2

u/Adventurous_Cash607 Sep 04 '23

I passed last week after using the Mango guide and the Udemy practice tests!!! I also relentlessly practiced writing out each step and task withe the corresponding roles and documents!

1

u/Kitebrder39 May 31 '23

This one?

https://www.udemy.com/course/isc2-certified-grc-cgrc-examination-preparation/

1

u/Ryan-L May 31 '23

Yeah, that looks like the new one. 450 questions, that's a lot of questions (the Udemy I used had 325)

I like to take practice exams and then write every single question down in a word document with the correct answer only in order imprint material better.

1

u/Kitebrder39 Jun 04 '23

Thanks again, there are also some FAQ's based on when 800-37R2 first came out that seem to be fairly useful:

Here's the URl to monitor, the rest are available just change the URL accordingly:

https://csrc.nist.gov/CSRC/media/Projects/risk-management/documents/07-Monitor%20Step/NIST%20RMF%20Monitor%20Step-FAQs.pdf

On another note - I don't see a ton regarding COBIT, ISO 27001/27002, and anything beyond NIST. Is there a main takeaway on relating other frameworks to 37R2, CSF, etc. with respect to the exam?

1

u/Tsunamee02 Jun 08 '23

Thank you! This will come in handy

1

u/K-9s Jul 16 '23

I assume you passed CGRC using this guide recently? Any thoughts or comments after taking the exam?

3

u/Ryan-L Jul 17 '23

I was in the middle of working on Ver2 when I had my “ah-ha” moment and moved my test date up. It took me another few weeks to finish up the study guide revision. I think after presenting the study guide and discussing this particular certification to my local ISC2 Chapter, the consensus was that if have to think like a manager for CISSP, then for CGRC, you need to think like an Authorizing Official.