Here's some information that you need before you proceed.
Most important - do NOT assume that this is all I know about this subject, or that it even represents the truth of it. This is me trying my best to polish the turd that is the official content. If I were to teach you this properly, you'd fail the official exam.
This section contains all the topic lessons relevant to governance from the official perspective.
More details on the official take on how to run a security programme.
...from the official perspective.
Here is where the additional irrelevant crap that they shoehorned into the CRISC course but won't fit anywhere is can be found.
Getting ready for the exam.