GRC FlowGRC Flow
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
FeedbackSign inGet started
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • Share feedback
  • Sign in
GRC Flow

Governance, risk and compliance workspace: policies, risk assessments, gap assessments and evidence that stay connected.

Product

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • About

Frameworks

  • ISO/IEC 27001
  • GDPR
  • NIS2
  • DORA
  • HIPAA
  • PCI DSS

Legal

  • Terms
  • Privacy
  • Legal notice

© GRC Flow

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact

Run Gap Assessment

No account needed. Answer a few questions, pay securely, and receive your deliverable right away.

Your company

Your company

The company named in the deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Deliverable

Deliverable

Its title, its author and its structure are yours: they steer what is written.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

As it will appear on the deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Shown as the author of the deliverable; never filled in by the AI.

What is assessed

What is assessed

The requirements to compare your company with, and why.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

The laws and standards to assess against. Each one selected brings its requirements.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Why the assessment is run (e.g. prepare a customer audit, check NIS2 readiness).

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Entities, sites, processes or systems assessed.

RequirementCurrent state

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Internal rules, contractual clauses or requirements of another standard, one row each, with their state if you know it.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

When the gaps must be closed: each action's date falls at least two weeks before. If left empty: 45 days for a high priority, 120 for a medium one.

Current state

Current state

What you already know. Anything left unstated is reported as not assessed, never as met.

Choose a framework above: its requirements appear here.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

A selected control assessment or compliance questionnaire is read automatically; a state chosen here takes precedence. ISO/IEC 27001: the key Annex A controls are always assessed, the others once you state them.

Owners and context

Owners and context

Who owns the actions, and anything else to take into account.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Who is responsible for which area. Owners in the deliverable are taken from here; where no role covers an area, the owner is left for you to fill.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Anything the service should take into account.

What the AI provider receives

Your answers, to write this deliverable.

Replaced first, then put back in your deliverable: Email addresses, People's names, Company names.

€1.00

What a free account adds

Running a service never requires an account. An account adds:

  • Your company details filled in for you on every form
  • Every result saved, reusable as a source by any service
  • Results editable in the browser and in the layout editor, with their saved versions
Create a free account