tl;dr GRC — Governance, Risk & Compliance Platform (Mock)

tl;dr

tl;dr GRC

Governance · Risk · Compliance

Strategy

Strategy Roadmap Maturity KPIs Onboarding

Inventory

CMDB / Assets IAM Data Classification Registers

Risk

Risk Management

Methodology Business Processes Information Assets Risk Register Control Measures Threat × Control Matrix Action Plan Snapshots Risk Appetite

Incidents 1

Third-Party Risk

Providers Send Questionnaire

Resilience

Overview

Library New playbook

Tabletop exercises

Generator History

Drills Breach & Attack Sim Pen Test Manager

Overview Business Impact Analysis BCP Plans DR Plans Vendor Exit Plans RTO / RPO Register

Training & awareness

Compliance

Policies 30 Tasks 11 Crosswalk

Frameworks

Register of Information ICT Providers Contracts Business Functions Concentration Risk Controls (20) Gap Assessment Resilience Testing xBRL-CSV Export

Controls (15) Gap Assessment Incident Readiness Mgmt Body Training EU Certification Effectiveness KPIs

Controls (20) Gap Assessment ROPA DPIAs Data Subject Requests DPAs Breach Register International Transfers

Cyber Essentials

Scope & Context Requirements (v3.1) Controls (24) Gap Assessment Evidence Audits & Certifications Management Reviews CE Plus Testing Readiness

Statement of Applicability Annex A Controls Risk Treatment Plan Internal Audits Nonconformities Management Reviews

Control Objectives Controls CUECs CSOCs Evidence Exceptions Auditor Workspace Type I / II Reports

Trust Service Criteria Controls Evidence Exceptions Auditor Workspace

Govern Identify Protect Detect Respond Recover

CDE Scope 12 Requirements SAQ ASV Scans Attestation (AOC)

Governance Design Implementation Verification Operations Maturity Levels

CIS Controls v8

IG1 — Essential IG2 — Foundational IG3 — Organizational 18 Controls Safeguards CIS CDM

Trust Services EU Digital Wallet Qualified Certificates e-Signatures & Seals CAB Audits

Strong Customer Auth RTS Compliance TPPs Open Banking APIs Major Incidents (EBA)

CASP Authorisation White Papers ART/EMT Reserves Governance AML / CFT Market Abuse

PIMS Scope PIMS Controls DPIAs GDPR Mappings Audits

AI System Inventory Risk Classification High-Risk Obligations GPAI Models Conformity Assessment Post-Market Monitoring Serious Incidents

PHI Inventory Safeguards BAAs Breach Notification Workforce Training

VASP Licence Rulebooks Governance AML / CFT Marketing Compliance Reporting

AIMS Scope Annex A Controls AI Impact Assessment AI Lifecycle Audits

Assessments

All Assessments …

Trust

Overview Branding Public Documents Certifications Access Requests Visitors & Leads Public preview Settings

Overview New incident Public preview

Vulnerability Disclosure

Overview Hall of Fame Submit a report Public preview Settings

Security Questionnaires

Inbox Upload questionnaire Knowledge base Answer library Team & reviewers Settings

Overview Clients & tokens Scopes & tools Audit log

Workspace

Board Dashboard Reports Audit Calendar Regulatory Updates Insurance Audit Trail API & Webhooks Settings

MI

Miglen Ivanov

Acme Financial OOD

tl;dr tl;dr GRC

esc

↑↓ navigate ↵ open esc close