GRC FlowGRC Flow
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
FeedbackSign inGet started
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • Share feedback
  • Sign in

Projects

Your services, together in one project

Run the services in the order you choose, reuse any result already produced, and keep every deliverable versioned and editable.

Start a project
GRC Flow

Governance, risk and compliance workspace: policies, risk assessments, gap assessments and evidence that stay connected.

Product

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • About

Frameworks

  • ISO/IEC 27001
  • GDPR
  • NIS2
  • DORA
  • HIPAA
  • PCI DSS

Legal

  • Terms
  • Privacy
  • Legal notice

© GRC Flow

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
2 services

Policies & Procedures

Build a coherent set of policies and procedures for any domain, each under the title and sections you write.

  1. 1Company profile
  2. 2Policies
  3. 3Procedures
  4. 4Documentation package export

For Small companies · Startups · Teams delivering documentation packages

Start this project
6 services

Risk Management Project

Produce a complete, defensible risk management package.

  1. 1Company profile
  2. 2Asset identification
  3. 3Risk identification
  4. 4Risk assessment
  5. 5Risk register
  6. 6Risk treatment plan
  7. 7Risk summary report

For Companies focusing on risk · Existing security programmes · Risk assessment practitioners

Start this project
5 services

Compliance Assessment Project

Evaluate compliance maturity and get a prioritised improvement roadmap.

  1. 1Company profile
  2. 2Compliance questionnaire
  3. 3Control register
  4. 4Gap assessment
  5. 5Non-conformity report
  6. 6Remediation roadmap

For Companies preparing an audit or a certification · Companies reviewing existing programmes · Readiness review practitioners

Start this project
11 services

ISO 27001 Certification Project

End-to-end preparation from context analysis to certification readiness.

  1. 1Company profile
  2. 2Context analysis (SWOT, PESTEL, interested parties)
  3. 3Scope definition
  4. 4Policies & procedures
  5. 5Risk assessment
  6. 6Risk register
  7. 7Risk treatment plan
  8. 8Statement of Applicability
  9. 9Evidence register
  10. 10Gap assessment
  11. 11Non-conformities & improvements
  12. 12Certification readiness review

For SMEs pursuing certification · Internal compliance teams · ISO practitioners

Start this project
4 services

Network Design & Deployment Project

Design a network from its addressing plan to ready-to-review device configurations and firewall rules, documented end to end.

  1. 1Company profile
  2. 2IP addressing plan
  3. 3Network documentation
  4. 4Device configurations
  5. 5Firewall rules

For Network engineers and integrators · MSPs building a customer network · IT teams opening a new site

Start this project
4 services

Network Security Audit Project

Document the network, audit it against its objectives and standards, review the firewall rules and plan the remediation.

  1. 1Company profile
  2. 2Network documentation
  3. 3Network audit
  4. 4Firewall rule review
  5. 5Remediation roadmap

For Network auditors and security specialists · MSPs reviewing a customer network · IT managers before a certification or a customer audit

Start this project
4 services

Managed Network Service Onboarding Project

Take over a customer network as a managed service: document it and agree responsibilities and service levels.

  1. 1Company profile
  2. 2Network documentation
  3. 3IP addressing plan
  4. 4Responsibilities (RACI)
  5. 5Service level agreement

For MSPs and IT service providers · Internal IT teams formalising their network service

Start this project
7 services

Vulnerability Management Project

The programme, the register, priorities, remediation, exceptions, verification and the KPIs, each one able to reuse the IDs, dates and owners of the others.

  1. 1Company profile
  2. 2Vulnerability management plan
  3. 3Vulnerability register
  4. 4Prioritisation and triage
  5. 5Remediation plan
  6. 6Exception and risk acceptance
  7. 7Remediation verification
  8. 8KPI report

For Security and IT teams running vulnerability management · Service providers managing vulnerabilities for others · Companies preparing a certification or a customer audit

Start this project
5 services

EBIOS Risk Management Project

The five workshops of the EBIOS Risk Manager method, each one able to reuse the results of the others: scoping and baseline, threats, strategic scenarios, attack paths and the treatment plan.

  1. 1Company profile
  2. 2Workshop 1: Scoping and Security Baseline
  3. 3Workshop 2: Risk Sources and Objectives
  4. 4Workshop 3: Strategic Scenarios
  5. 5Workshop 4: Operational Scenarios
  6. 6Workshop 5: Risk Treatment

For Security managers running a risk analysis · Risk and compliance professionals · Companies subject to NIS2 or asked for an EBIOS RM study

Start this project
7 services

NIST Risk Management Framework Project

The seven steps of the NIST RMF for one system, each one able to reuse the results of the others: preparation, categorization, control selection, implementation, assessment, authorization package and continuous monitoring.

  1. 1Company profile
  2. 2Prepare: Preparation & Context
  3. 3Categorize: System Categorization
  4. 4Select: Security Control Selection
  5. 5Implement: Control Implementation Record
  6. 6Assess: Control Assessment Plan & Results
  7. 7Authorize: Authorization Package
  8. 8Monitor: Continuous Monitoring Plan

For Security managers preparing a system for authorization · Risk and compliance professionals · Companies asked for a NIST RMF authorization by a partner

Start this project
Your services

Custom project

Choose the services you need, the runs of each and the saved versions. The price adjusts as you choose, and you pay once.

Build my project