Empire Certified Governance, Risk, and Compliance Analyst
The ECGRC credential shows that you can do the full job of a GRC analyst: frame governance, assess and treat risk, select and test controls, and audit and report compliance against the frameworks organizations depend on.
You complete your purchase and sit the exam on the Empire eLearning platform.
At a glance
- FormatMultiple choice (computer-adaptive)
- Number of questions100 to 125
- Duration2 hours
- ResultPass / Fail
- Exam languageEnglish
- Attempts4 per 12 months
- Voucher includes2 attempts
- Voucher validity1 year
- Credential validity3 years
- PrerequisitesNone required
- CredentialVerifiable Open Badge 3.0
About this certification
The Empire Certified Governance, Risk, and Compliance Analyst (ECGRC) credential shows that you can do the full job of a GRC analyst: frame governance, assess and treat risk, select and test controls, and audit and report compliance against the frameworks organizations depend on.
It is the capstone credential for Empire’s Governance, Risk, and Compliance Analyst path, proving you can connect day-to-day security work to business governance and regulatory obligations.
The exam is computer-adaptive: the difficulty adjusts to your performance and the number of questions varies within a set range, so no two candidates see the same set and your ability is measured efficiently. Results are reported as pass or fail against a set standard.
Exam blueprint
Questions are drawn across these areas, weighted as shown.
What to expect
The ECGRC exam is a computer-adaptive, proctored exam with a two-hour time limit. The number of questions varies within a set range as the engine measures your ability, so no two candidates see the same set. It is closed book: notes and outside resources are not allowed. You complete identity verification and an automated proctoring check before you start. You cannot return to or change a previous answer. Your result is pass or fail against a set standard.
Who it's for
ECGRC is for anyone moving into a governance, risk, compliance, audit, or assurance role, and for security professionals who want to prove they can connect security work to business governance and regulatory obligations. Roles it supports include GRC Analyst, IT Auditor, Compliance Analyst, and Internal Auditor.
- Aspiring and practicing GRC analysts
- IT auditors and internal auditors
- Compliance analysts and specialists
- Security professionals moving into governance, risk, and compliance roles
How to get certified
Prepare
Work through the recommended learning path so you are ready for every exam area.
Get your voucher
Purchase your ECGRC exam voucher.
Verify
Complete identity verification and the automated proctoring check, and accept the exam terms.
Take the exam
Sit the adaptive exam online within the time limit.
Earn your credential
Receive your certificate and badge on passing.
Validity & renewal
Your certification is valid for 3 years from the day you pass. Keep it current through continuing education, tracked automatically when you complete eligible content on Empire platforms.
Up to 4 attempts within 12 months, with a required waiting period between attempts.
What you earn
- A verifiable digital certificate with a unique verification link.
- A shareable Open Badge 3.0 credential employers can confirm instantly.
Ready to earn your ECGRC?
Get your voucher and complete identity verification, then sit the adaptive, proctored exam online. On passing, you receive your certificate and verifiable badge. Not exam-ready yet? Start the recommended career path first to prepare.
Frequently asked questions
Do I need experience or another certification first?
No. No prior certification or work experience is required to sit the ECGRC exam. Completing the Governance, Risk, and Compliance Analyst path is strongly recommended, since the exam assesses the full workflow those courses teach.
How is the exam delivered?
ECGRC is an online, proctored, computer-adaptive exam with a two-hour time limit. The number of questions varies within a set range as the exam adapts to your answers, so no two candidates see the same set. You complete identity verification and an automated proctoring check before you start, and it is closed book.
How is it graded?
The exam is pass or fail against a set standard. Because it is adaptive, you receive a pass or fail decision rather than a numeric score.
How many attempts do I get?
Up to 4 attempts within 12 months, with a required waiting period between attempts. Each voucher includes 2 attempts and is valid for 1 year from purchase.
How long is the credential valid, and how do I keep it current?
Your ECGRC credential is valid for 3 years from the day you pass. You keep it current through continuing education, tracked automatically when you complete eligible content on Empire platforms.
What do I earn?
A verifiable digital certificate with a unique verification link, and a shareable Open Badge 3.0 credential that employers can confirm instantly.