CGRC › Control Selection
Control Selection covers choosing, tailoring, and documenting security controls from NIST SP 800-53 baselines for federal systems. On the CGRC exam, it is tested through scenario questions about FedRAMP-authorized cloud providers, RMF roles, baseline applicability, and how tailoring decisions are justified and recorded in the system security plan.
CGRC Control Selection — All 52 Questions
Every question in this domain with answers and detailed explanations.