Skip to main content

EARN ACT Workforce Development Program

Powering Maryland’s
Next GRC Professionals.

BCR Cyber’s GRC-AF Training & Certification

The Advanced Cybersecurity Training (ACT) program delivers BCR Cyber’s Governance, Risk, and Compliance Applied Fundamentals (GRC-AF) training and certification through the Maryland Department of Labor’s Employment Advancement Right Now (EARN) initiative — at no cost to participants. ACT prepares Marylanders for careers in governance, risk, and compliance, and is open to both jobseekers and incumbent workers looking to upskill in their current roles.

And it’s all delivered virtually — no need to attend in person. Participants can complete the full program remotely, making it flexible and accessible for working adults, career changers, and students across Maryland.

Governance, Risk, and Compliance is the strategic discipline that connects technical cybersecurity operations to executive leadership, legal compliance, and enterprise risk management. Through a combination of self-paced instruction and immersive, hands-on range experience, participants build the skills employers are looking for — from framework fluency and risk assessment to incident response and governance reporting.

The training and certification includes:

  • Part I – Asynchronous Training – 40 Hours: Self-paced GRC instruction covering governance and IT oversight, enterprise risk management, compliance foundations, and major frameworks and standards including NIST, ISO, and COBIT.
  • Part II – Experiential Range Training – 8 Hours: Live, instructor-led training on the BCR Cyber Series 3000 Cyber Range — four hours of instruction and four hours of hands-on practical application, including incident response and governance reporting in a live, simulated environment.
  • Certification Exam: Earn the GRC-AF Certification by passing the Certification Final Exam and completing both parts of the program.

Getting Started is Easy!

Enrollment is direct through BCR Cyber — simply complete the digital application to get started. Applications are reviewed on the 1st and 15th of each month.

Registration is digital – you do not need to physically register in-person.

To ensure readiness for the training, participants must meet at least one background pathway. Please review the eligibility criteria shown here.
Graduates walk away with the GRC-AF Certification — a credential aligned with leading industry frameworks and standards, including NIST, ISO, and COBIT, and built to employer expectations. That means they’re not just ready to work — they’re ready to contribute on day one.

Apply Now

EARN-ACT Participant Eligibility

  • Domiciled in Maryland
  • Legally authorized to work in the United States
  • 18 years of age or older
  • Seeking employment, career advancement, or upskilling in an IT, cybersecurity, or GRC-related field
  • Meet at least one background pathway: (a) an associate’s degree or higher — completed or in progress — in IT, cybersecurity, business, or a related field; (b) current or prior professional experience in IT, cybersecurity, IT management, audit, risk, compliance, or a governance-related role; (c) a relevant industry certification; or (d) demonstrated responsibility for systems, data, or users (e.g., an administrative, management, or oversight role)

Strategic Industry Partner Consortium:
Aligning Training with Workforce Needs 

BCR Cyber maintains a Strategic Industry Partner Consortium made up of more than 40 cybersecurity employers — including organizations such as Northrop Grumman, Booz Allen Hamilton and Accenture. This consortium plays an active role in informing BCR Cyber’s training programs, helping ensure content remains aligned with current industry standards, technologies, and workforce demands. 

Employer input shapes the design and delivery of training — from foundational knowledge to applied skills — providing participants with relevant, job-focused instruction. Consortium members also engage with program graduates, regularly recruiting from the trained talent pool to fill critical roles within their organizations. 

This industry-informed model ensures that BCR Cyber training remains current, practical, and directly connected to real workforce opportunities. 

Benefits of the EARN-ACT Program

  • No-cost to participants
  • Experiential training and education
  • GRC knowledge and hands-on application
  • 48 hours of training, delivered in two parts
  • Delivered virtually statewide
  • GRC-AF Certification
  • Open to jobseekers and incumbent workers
  • Career and advancement opportunities