Founding cohortBe among the first to sit GRCP examinations when registration opens.Register interest →
Verify a certificateSupportSign in
GRCP™
Get certified

About GRCP

A UK certification body for governance, risk and compliance professionals.

GRCP sets the standard, writes the exams and makes every certification decision. We are based in London and operated by Complify Limited.

Why GRCP exists

Governance, risk and compliance has become a profession in its own right, but the evidence of competence available to employers is uneven. Many credentials test recall of a single framework; few test whether someone can apply several of them together to a real problem.

GRCP credentials are built around the international standards and regulations organisations are actually audited against, and our exams use scenarios to test judgement rather than memory. The result is a credential an employer, client or regulator can rely on.

How the scheme is governed

The GRCP scheme is structured to the requirements of ISO/IEC 17024, the international standard for bodies that certify persons. Each function below is separate, and the people who train candidates take no part in any of them.

Scheme CommitteeOwns the body of knowledge, credential requirements and exam blueprints. At least two subject experts for each domain.
Examinations BoardWrites, reviews and maintains the question bank. Sets pass marks using a structured expert-judgement method and reviews question performance after every exam window.
Certification decisionGrants, suspends and withdraws credentials based on exam results and eligibility evidence. Decided by at least two reviewers with no involvement in training.
Appeals panelHears appeals against results and certification decisions. Members are independent of the original decision.
Impartiality CommitteeOversees the whole scheme for conflicts of interest and commercial pressure. A majority of members are independent of GRCP and its operator.

Impartiality statement

GRCP is committed to making certification decisions fairly, consistently and only on the basis of objective evidence. In particular:

  • Training partners have no access to exam content and no role in results or certification decisions.
  • Anyone involved in training a candidate is excluded from decisions about that candidate.
  • GRCP is operated by Complify Limited, which also develops compliance software. Holding or obtaining a GRCP credential never requires buying or using any Complify product, and Complify's commercial interests play no part in certification decisions.
  • Fees, eligibility rules and exam conditions are the same for every candidate.
  • The Impartiality Committee reviews threats to impartiality at least once a year and can require changes to the scheme.

Accreditation

GRCP is a new scheme and is not yet accredited by UKAS or any other accreditation body. We are building it to the requirements of ISO/IEC 17024 from the start, and intend to apply for accreditation once the scheme has an operating record that an assessor can review. We will publish any change in status on this page.

Policies

The following scheme policies are available on request: impartiality and conflicts of interest, examination security, appeals and complaints, reasonable adjustments, and use of the GRCP name and marks.