GRC Project Tools
Hands-on GRC project work, built on fictional companies. No real employer data.
GRC Project Tools — $20 one-time
Six linked tools for doing real GRC work, not just reading about it. Work a fictional company end to end, then export your work and show a hiring manager what you can actually do.
How buying works: sign in with your email (we send you a 6-digit code), pay $20 once, and the workbench opens. Use the same email for sign-in and payment. Sign-in uses the same email code sign-in as the GRC Academy app.
What’s inside
Risk Register
Log risks as cause, event, impact. Score likelihood and impact 1–5 and the tool does the math.
Control Assessment
Pull controls from the Control Bank, name your evidence, and rate each control honestly.
Finding Tracker
Turn findings into corrective actions with an owner, a date, and a way to verify the fix.
Vendor Assessment
Assess the vendors that touch your data: what they hold, what paperwork exists, and what’s missing.
NIST CSF Gap Assessment
Score where you are now against where you need to be, and see the gap.
Policy Draft
Write a policy in plain English, then track it to done.
Also included
Control Bank Practice Labs Worksheet CSV export Cloud save 25 AI checks
A Control Bank of 58 NIST 800-53 Rev. 5 controls to pull from. Four guided Practice Labs that chain the tools together on one fictional company. A Documentation Worksheet that feeds everything else. Export each tool to CSV for your portfolio. Your work saves to your account. And 25 AI checks are included — they flag weak statements, missing owners and dates, and gaps before you call a piece of work done.
Who it’s for
Anyone learning GRC and building proof they can show. Work the tools on a fictional company, export your work, and hand a hiring manager something they can actually open and read.
This is a separate product from the Excel templates, not an upgrade to them. Own either one, or both: the templates are files you keep; this is the web version with linked tools, cloud save, guided labs, and AI checks.