Build your GRC foundations
A practical 90-day starting plan. Suggested project phases. These are not statutory deadlines and urgent obligations must be handled immediately.
Follow the steps ↗Implementation playbooks
Make the next step practical.
Follow a task from scope and evidence to an accountable decision. Suggested workflows help organise the work; actual requirements depend on your circumstances.
Review a new supplier
A practical onboarding playbook. Suggested workflow. Apply specific legal and contractual requirements to the actual service, data and parties.
Follow the steps ↗Prepare a board GRC review
A practical assurance playbook. Adapt this workflow to the organisation’s size, powers, constitution and applicable governance requirements.
Follow the steps ↗Review a control in practice
A practical control-testing playbook. Suggested assurance workflow. Set the scope, criteria and degree of independence appropriate to the organisation and the specific risk.
Follow the steps ↗Turn a source change into controlled action
A practical regulatory-change playbook. Suggested implementation workflow. Verify the source, legal status, applicability and actual deadlines before deciding the response.
Follow the steps ↗