Site map
Browse every GRC resource
Find the topic hub, guide, working tool, template or implementation route for your next task.
About and working resources
- Governance, Risk and Compliance UK
- About the Independent UK GRC Reference Desk
- GRC Editorial Standards, Sources and Corrections
- Understand the review before using the result.
- Privacy & browser storage
- Disclaimer
- Accessibility
- Corrections & review history
- Primary source directory
- Find your GRC starting point
- GRC Workspace: Risks, Controls and Board Reports
- Illustrative GRC control starter library
Guidance
- UK GRC Guidance: Governance, Risk and Compliance
- Risk Appetite Statements and Governance
- Directors’ Duties and Board Decision Records
- Board Assurance and Internal Control Testing
- Policy Ownership and Review: A Practical Guide
- Failure to Prevent Fraud: Scope and Governance
- Enterprise Risk Register: A Practical UK Guide
- Control Testing: Evidence and Sample Reviews
- Third Party Risk Management and Supplier Reviews
- Business Continuity and Scenario Exercises
- Cyber Governance: Board Responsibilities and Evidence
- Compliance Obligations Register: A Practical Guide
- UK GDPR Accountability and DPIA Triage
- AML Scope, Controls and Assurance
- Incident and Personal Data Breach Escalation
- Compliance Training and Monitoring Plans
- Corporate governance guidance for UK organisations
- Risk management guidance and registers for UK teams
- Compliance management guidance and obligation registers
- What is GRC? A practical framework for UK organisations
News
- GRC news & analysis
- Provision 29: Board Evidence and Reporting
- Fraud Prevention: Review Controls in Operation
- FCA Operational Resilience after the Transition
- Data Protection Accountability: Board Evidence
- DUAA: Managing Data Protection Regulatory Change
- FRC revises auditing standards for legal and regulatory non-compliance
- NCSC highlights how cyber incident sharing can meet market disclosure duties
- FCA consults on a second phase of SM&CR reforms
Tools
- GRC working tools
- GRC Readiness Assessment: 24 Practical Questions
- Risk Register Tool: Assess, Record and Export
- Compliance Obligations Register Tool
- GRC Action Tracker: Findings and Remediation
Templates
- Risk Register Template: Assessment and Treatment
- Compliance Obligations Register Template
- Internal Control Inventory and Testing Template
- Board Risk Reporting and Decision Pack Template
- Policy ownership & review record
- Supplier due diligence & decision
- Incident assessment & response log
- Role-based training plan
- Assurance finding & remediation
- Regulatory change impact record
- Risk, control & assurance map
- Decision, rationale & conflict record
- GRC templates & working registers
Playbooks
- Build your GRC foundations
- Review a new supplier
- Prepare a board GRC review
- Review a control in practice
- Turn a source change into controlled action
- GRC implementation playbooks