XLSX • 3 sheets
GRC Maturity Self-Assessment
Evaluate governance, risk, controls, compliance, third-party oversight, issue management, and reporting maturity.
Download template ↓Resource library
Practical tools.
Stronger decisions.
Downloadable templates designed to help teams turn GRC expectations into repeatable operating practices.
Standard templates
Each workbook includes instructions, examples, structured inputs, and formulas where calculation adds value. Adapt the tools to your organization’s methodology and obligations.
XLSX • Formula driven
Enterprise Risk Register
Document risk statements, inherent and residual scoring, controls, treatments, owners, dates, and decisions.
Download template ↓XLSX • 3 sheets
Third-Party Risk Tiering Tool
Calculate vendor tiers using five inherent-risk factors and apply a practical due-diligence questionnaire.
Download template ↓XLSX • 3 sheets
Audit Evidence & Remediation Tracker
Manage evidence requests, owners, due dates, review status, findings, corrective actions, and validated closure.
Download template ↓XLSX • Formula driven
KRI & Executive Dashboard
Define measurable indicators, warning and critical thresholds, required actions, and executive status reporting.
Download template ↓XLSX • 3 sheets
AI Governance Intake Assessment
Inventory AI uses and screen transparency, data, privacy, security, regulatory, and human-oversight risk.
Download template ↓XLSX • 2 sheets
GRC Program Roadmap
Sequence governance, risk, controls, assurance, and reporting initiatives with owners, dependencies, milestones, and formula-driven progress tracking.
Download template ↓XLSX • 3 sheets
Control-Mapping Workbook
Maintain a reusable internal control library and map coverage across SOC 2, ISO 27001, NIST CSF, and other obligations.
Download template ↓XLSX • Formula driven
Policy Lifecycle Tracker
Manage policy ownership, approvals, versions, review dates, acknowledgements, exceptions, and overdue actions.
Download template ↓XLSX • 3 sheets
Risk Acceptance Form
Document a time-bound residual-risk decision, business rationale, compensating controls, approval, conditions, and expiry.
Download template ↓XLSX • Formula driven
Corrective-Action & Remediation Tracker
Move findings from root cause through corrective action, preventive action, validation evidence, and sustainable closure.
Download template ↓XLSX • 4 sheets
Incident-Response Tabletop Guide
Plan and facilitate a ransomware tabletop with timed injects, decision prompts, observations, and an after-action plan.
Download template ↓XLSX • 4 sheets
Board Risk-Reporting Template
Present top risks, risk appetite, trends, KRIs, management responses, and decisions required in board-ready language.
Download template ↓XLSX • 3 sheets
GRC Roles & Responsibilities Matrix
Clarify RACI assignments, independent assurance, governance forums, decision rights, and recurring operating cadence.
Download template ↓XLSX • 4 sheets
Vendor Security Questionnaire
Perform evidence-backed due diligence across governance, access, data protection, incident response, resilience, privacy, compliance, and AI.
Download template ↓XLSX • 3 sheets
SOC 2 Readiness Checklist
Organize Common Criteria readiness, control design, expected evidence, ownership, status, gaps, and remediation before examination.
Download template ↓These resources provide general guidance and are not legal advice. Review and adapt each tool for your organization, regulatory obligations, and approved risk methodology.