GRC Knowledge Bank

GRC professionals are expected to recall definitions, requirements and crosswalks across a dozen frameworks. The answers live in long publications, and quick references rarely say where an answer came from.

In an assessment or a leadership brief, an unsourced answer is an opinion. A sourced answer is defensible.

Requirements

Seeded the scope from real position descriptions and from the framework outlines themselves, so it covers what employers expect.

Stakeholders

Analysts, assessors, ISSOs and program managers across the GRC field.

Trade-off

Started with three top-level categories and mixed depth rather than an exhaustive encyclopedia, so it is useful now and grows over time.

Key decisions

• 70 entries across Governance, Risk, Compliance, Crosswalk and Playbook categories, at term, concept and playbook depth.
• Every entry carries its authority, section, as-of date and type.
• Framework crosswalks that map one control area across FedRAMP, NIST RMF, ISO 27001, SOC 2 and CMMC.
• Search that filters as you type.

1. Step 1

   Search or filter by category

2. Step 2

   Open an entry

3. Step 3

   Read the source citation

4. Step 4

   Follow the crosswalk to other frameworks