GRC FlowGRC Flow
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
FeedbackSign inGet started
  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • Share feedback
  • Sign in
GRC Flow

Governance, risk and compliance workspace: policies, risk assessments, gap assessments and evidence that stay connected.

Product

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact
  • About

Frameworks

  • ISO/IEC 27001
  • GDPR
  • NIS2
  • DORA
  • HIPAA
  • PCI DSS

Legal

  • Terms
  • Privacy
  • Legal notice

© GRC Flow

  • Inside GRC Flow
  • Services
  • Projects
  • Encyclopedia
  • FAQ
  • Contact

Run EBIOS RM Workshop 1: Scoping and Security Baseline

No account needed. Answer a few questions, pay securely, and receive your deliverable right away.

Your company

Your company

The company named in the deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Deliverable

Deliverable

Its title, its author and its structure are yours: they steer what is written.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

As it will appear on the deliverable.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Shown as the author of the deliverable; never filled in by the AI.

  1. 1.
  2. 2.
  3. 3.
  4. 4.
  5. 5.
  6. 6.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

The template's sections are proposed, one per line in order: drag to reorder, rename, remove or add.

What is studied

What is studied

The real situation: the more facts, the closer the workshop is to your company.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

The company or system, what it does, how big it is, what must not stop or leak, e.g. “distribution of medicines to 300 pharmacies from one warehouse in Lyon, orders by a web portal, 24-hour delivery”.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

What it must serve, e.g. “NIS2 compliance before the March inspection”, “opening a second warehouse”, “ISO 27001 certification”. It steers which events matter most.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

What the company does, e.g. “pharmaceutical distribution”.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

What the company or system exists to deliver.

What you already know

What you already know

Kept as you wrote it. What is left empty is proposed from your situation.

Business valueTypeOwner

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “Order handling; process; Sales director”.

Supporting assetBusiness values supportedOwner

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “ERP; Order handling, Invoicing; IT manager”.

Business valueFeared eventImpactsGravity

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

One row per entry, e.g. “Order handling; orders unavailable for more than 2 days; lost revenue, angry customers; G3 Serious”.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Tick only what is really applied.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Measures not applied, and why: one per entry.

Who takes part

Who takes part

Job titles, never people's names.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Who is responsible for which area. Owners in the deliverable are taken from here; where no role covers an area, the owner is left for you to fill.

Keep this field from the AI: its content is replaced before the AI provider receives it, then restored in your deliverable.

Anything the service should take into account.

What the AI provider receives

Your answers, to write this deliverable.

Replaced first, then put back in your deliverable: Email addresses, People's names, Company names.

€1.00

What a free account adds

Running a service never requires an account. An account adds:

  • Your company details filled in for you on every form
  • Every result saved, reusable as a source by any service
  • Results editable in the browser and in the layout editor, with their saved versions
Create a free account