Learn.Implement.
Excel.
Free guides, templates, checklists and whitepapers to help you build a structured GRC programme. The corrected Markdown source is available for each.
Each guide is available as a PDF and as Markdown. Both formats are generated from the same source document.
DPDPA Readiness Checklist 2026
A self-assessment checklist for India's Digital Personal Data Protection Act — consent, notice, rights and grievance, breach response, SDF duties and DPO governance. General information, not legal advice.
Statement of Applicability (SoA) Starter
A blank SoA template with Applicable, Justification, Status and Evidence-Reference columns, a status legend and common SoA mistakes to avoid. Populate control references from your licensed copy.
ISO 27001 Evidence-Request Pack
An auditor's-eye list of the evidence commonly requested across management-system and Annex A themes, with why each artefact is wanted plus a readiness checklist. Genericised, no engagement data.
The Ultimate Guide to ISO 27001 Implementation
A planning guide to the implementation lifecycle — gap analysis, risk assessment, Statement of Applicability, audit preparation and common mistakes.
Security Awareness & Phishing Simulation Playbook
Design a programme, run phishing simulations, measure effectiveness, handle repeat offenders and report to leadership.
GRC Platform Buyer's Guide 2026
Evaluation criteria, 30+ vendor questions, ROI calculator, comparison scorecard, and red flags to watch for.
Risk Register Template & Best Practices
Complete risk register template with 20 example risks, 5x5 matrix, scoring methodology, and risk treatment guidance.
NIST CSF 2.0 Implementation Guide
A planning guide to NIST CSF 2.0 — functions, profiles, gap analysis, an implementation roadmap and cross-framework reuse.
AI in GRC: Transforming Compliance
Where AI may add value in GRC, what to evaluate, risks and limitations.
GDPR Compliance Checklist
A self-assessment checklist across ten themes — lawful basis, data subject rights, DPO, DPIA, ROPA, breach response and more. General information, not legal advice.
HIPAA Compliance Checklist
A self-assessment checklist covering administrative, physical and technical safeguards, breach notification and business associate management. General information, not legal advice.
Vendor Risk Assessment Framework
A suggested tiering methodology, sample assessment questionnaire, scoring approach, contract considerations and ongoing monitoring.
Want More Insights?
Read our blog for in-depth guides on ISO 27001, SOC 2, NIST CSF, HIPAA, GDPR, PCI DSS, and more.
Visit the BlogStay Updated
Get the latest GRC insights, framework updates, and platform news delivered to your inbox.