Why this publication exists
Policies, registers and responsibilities can become disconnected. GRC.me.uk brings the questions together: who decides, what could go wrong, what applies, how the controls work, and what evidence supports the next decision.
Founded by Mihail Florin Gavrila, the publication sits alongside the related independent resources AML.me.uk and GDPR.me.uk. It is a separate information project from the founder’s professional practices and other business interests.
What you can use
The library provides 15 practical guides, five dated implementation briefings, five playbooks, twelve working templates and eighteen illustrative control starters. Four focused browser-local tools sit alongside a connected review workspace linking risks, controls, obligations and actions to a board pack. The tools organise self-reported information; they do not examine your systems, independently review evidence or determine whether your organisation complies with the law.
How the content is prepared
Research and drafting are AI-assisted. We prioritise current primary sources, state their scope and keep source-check dates visible. No independent human legal review, regulator approval or professional certification is claimed. Read the editorial standards and assessment methodology.
A useful boundary
This site does not offer a professional retainer through browsing, tool use or downloads. Its content is general information. Use qualified advice for decisions requiring interpretation of your circumstances, and apply the rules of your actual profession and sector. See the full disclaimer.