The Associate of ISC2 status allows an individual to demonstrate competence in the field by passing the rigorous CGRC exam, and work toward gaining the experience required to become CGRC certified. The vendor-neutral CGRC credential confirms knowledge, skill, and experience required for authorizing and maintaining information systems within the new Risk Management Framework as outlined in NIST SP 800-37 Rev 1.