Free downloads

Take it offline

Every topic and the full set, generated from the same question bank as this site. PDF for reading and printing, CSV for spreadsheets or flashcard tools.

Free — just enter your email once to unlock all downloads.

Full question set

Every topic in one file, with an introduction and contents page.

PDF · 357 KB CSV

GRC Fundamentals

What GRC is, how the pieces fit together and the core vocabulary every GRC professional uses.

PDF35 KB CSV28 KB

Governance & Policy

How security and risk are directed, overseen and documented — boards, committees, policies and accountability.

PDF33 KB CSV25 KB

Risk Management

Risk assessment, appetite, registers, treatment and the difference between qualitative and quantitative analysis.

PDF34 KB CSV25 KB

Compliance & Audit

Control testing, evidence, audit lifecycles, findings and continuous compliance.

PDF33 KB CSV25 KB

ISO/IEC 27001 & 27002

The international standard for an Information Security Management System (ISMS) and its supporting control guidance.

PDF33 KB CSV26 KB

NIST CSF 2.0 & SP 800-53

The NIST Cybersecurity Framework 2.0, the SP 800-53 control catalogue and the Risk Management Framework.

PDF33 KB CSV25 KB

SOC 2 & PCI DSS

Service organisation assurance reports and the payment card industry security standard.

PDF32 KB CSV24 KB

HIPAA, GDPR & DPDP

US healthcare privacy and security rules, the EU GDPR and India's DPDP Act, plus how privacy applies to AI and health data.

PDF33 KB CSV26 KB

Third-Party & Vendor Risk

Assessing and monitoring suppliers, cloud providers and the wider supply chain.

PDF32 KB CSV24 KB

Business Continuity & Incident Management

Keeping the business running and responding well when things go wrong: BIA, RTO/RPO, DR, incident response and lessons learned.

PDF33 KB CSV24 KB

Metrics, KRIs & Reporting

Measuring and communicating risk and programme performance to management and the board.

PDF29 KB CSV21 KB

Scenario & Behavioural

Situational and behavioural questions. Use the STAR method (Situation, Task, Action, Result) and tailor the examples to your own experience.

PDF31 KB CSV23 KB

Next upTry a free lab