Question bank
GRC questions & answers
GRC interview and scenario questions across key topics, each with a practical example and why it matters. Pick a topic, or search for a specific question.
- All levelsbasic to advanced
- Scenariosreal-world cases
- Cert guidesexam prep
- PDF · CSVfree downloads
Search questions
Browse by topic
GRC FundamentalsWhat GRC is, how the pieces fit together and the core vocabulary every GRC professional uses.BasicIntermediateAdvancedScenarioOpen topicGovernance & PolicyHow security and risk are directed, overseen and documented — boards, committees, policies and accountability.BasicIntermediateAdvancedScenarioOpen topicRisk ManagementRisk assessment, appetite, registers, treatment and the difference between qualitative and quantitative analysis.BasicIntermediateAdvancedScenarioOpen topicCompliance & AuditControl testing, evidence, audit lifecycles, findings and continuous compliance.BasicIntermediateAdvancedScenarioOpen topicISO/IEC 27001 & 27002The international standard for an Information Security Management System (ISMS) and its supporting control guidance.BasicIntermediateAdvancedScenarioOpen topicNIST CSF 2.0 & SP 800-53The NIST Cybersecurity Framework 2.0, the SP 800-53 control catalogue and the Risk Management Framework.BasicIntermediateAdvancedScenarioOpen topicSOC 2 & PCI DSSService organisation assurance reports and the payment card industry security standard.BasicIntermediateAdvancedScenarioOpen topicHIPAA, GDPR & DPDPUS healthcare privacy and security rules, the EU GDPR and India's DPDP Act, plus how privacy applies to AI and health data.BasicIntermediateAdvancedScenarioOpen topicThird-Party & Vendor RiskAssessing and monitoring suppliers, cloud providers and the wider supply chain.BasicIntermediateAdvancedScenarioOpen topicBusiness Continuity & Incident ManagementKeeping the business running and responding well when things go wrong: BIA, RTO/RPO, DR, incident response and lessons learned.BasicIntermediateAdvancedScenarioOpen topicMetrics, KRIs & ReportingMeasuring and communicating risk and programme performance to management and the board.BasicIntermediateAdvancedScenarioOpen topicScenario & BehaviouralSituational and behavioural questions. Use the STAR method (Situation, Task, Action, Result) and tailor the examples to your own experience.BasicIntermediateAdvancedScenarioOpen topic
Free — just enter your email once to unlock all downloads.