GRCLibrary.ai

Browse

Start from the seat you hold

360 documents: 358 across 12 domains plus 2 library specifications, in 17 types, one connected corpus. Pick a path by what you need to do, or go straight to a domain or a document type.

To see every corpus document on one page, open All Documents; its filters, by type, by area and by words, cover the documents across the domains. The adopter documents, outside the corpus, are listed further down this page, under Adopter documents.

Scope

Organization-neutral reference material to adapt to your obligations; it confers no certification, and legal advice is outside it. Vendored third-party material and quotations keep their own licences. A document page holds the record and, where the document has them, its outline, frameworks, and related documents; the full text is read on GitHub.

At a glance

360documents
12domains
17document types

By need

By need

  1. Make a decisiondecideWhat the board should ask: decision briefs, oversight questions, and the evidence to expect back.
  2. Govern a programmegovernStand up a programme, run it, or assess its maturity, with charters, policies, and registers ready to adapt.
  3. Meet an obligationcomplyChoose a framework, see the mappings and the gaps, and assemble the evidence an audit will ask for.
  4. Find a solutionsolutionsStart from a problem or a lifecycle event and follow it to the leadership pages and documents that resolve it.
  5. Write a policypoliciesChoose a policy or template, by type or by subject, and adapt it to your organization.

Executive path

The executive path

The executive path serves a governing body or accountable executive leadership. Make a decision is its hub: 14 leadership concerns, each a topic page, and 34 leadership pages in 6 kinds, each kind with its own generated index.

By domain

By domain

  • AI65AI governance, assurance, and lifecycle risk controls
  • Privacy57Data protection, privacy engineering, and multi-jurisdiction obligations
  • Governance43Charters, policies, registers, and the programme operating model
  • Compliance38Regulatory mapping, control frameworks, and sector audit readiness
  • Security38Information-security controls, architecture, and operations
  • Operations27Operational security, monitoring, and IT service management
  • Resilience22Business continuity, disaster recovery, and incident response
  • Supply chain19Third-party, vendor, and supply-chain security management
  • Dev security18Secure development lifecycle, CI/CD, and pipeline controls
  • Risk15Risk methodology, assessment, and treatment
  • Architecture8Reference architectures and secure-design control patterns
  • Crypto8Crypto-asset and blockchain governance: classification, custody, and platform risk

By type

By type

Each count covers the 360 corpus documents, the 2 library specifications included; the 12 adopter documents listed below are not counted here. Of the Specification row's 5, 3 sit in the domains and 2 are the library specifications. The search page's list adds the adopter documents and leaves out the library specifications.

Adopter documents

Adopter documents

The 12 adopter documents under docs/ are listed here. Each entry is read from the leading metadata block of its file, so the list follows the repository at every build.

By instrument

By instrument

The crosswalk sets the corpus domains against 19 standards, laws, frameworks, and programmes in its full table, and the 27 instrument pages, the full table's columns and its Also in the corpus instruments alike, are listed here; every cell and count is generated from the alignment matrices and the taxonomy at build time.