01 / RISK
Risk assessment & treatment record
Connect a specific objective, risk, control and accountable treatment decision.
Templates & registers
A useful starting point for your records.
Twelve guided working documents, with individually labelled fields, a reusable JSON working copy, print layouts and blank CSV registers. Adapt the content to your organisation.
02 / COMPLIANCE
Obligation & applicability record
Trace a requirement to the business activity, responsible owner and proof.
03 / RISK
Control design & testing record
Distinguish a documented control from one that operates effectively.
04 / GOVERNANCE
Board GRC review & decision pack
Bring material risks, exceptions and decisions to the accountable body.
05 / GOVERNANCE
Policy ownership & review record
Keep a policy connected to the people and processes that use it.
06 / RISK
Supplier due diligence & decision
Review the supplier’s role, dependencies, evidence and exit arrangements.
07 / COMPLIANCE
Incident assessment & response log
Record facts, timestamps, risk decisions and accountable escalation.
08 / COMPLIANCE
Role-based training plan
Connect role, risk, learning needs and understanding.
09 / GOVERNANCE
Assurance finding & remediation
Separate findings, claimed remediation and verification.
10 / COMPLIANCE
Regulatory change impact record
Follow a source change through applicability, implementation and verification.
11 / GOVERNANCE
Risk, control & assurance map
See which material risks have useful assurance and which do not.
12 / GOVERNANCE
Decision, rationale & conflict record
Preserve a clear account of a significant organisational decision.
CSV files are blank. Each web template includes field-by-field completion notes. These records are editorial aids, not prescribed regulatory forms or executed agreements.