Documentation engineered like software.
Governance, risk, and compliance.
A governance, risk, or compliance programme starts from a blank page: charters, policies, procedures, and registers to write, then mappings to the frameworks an auditor will ask about. GRC Library gives you 360 cross-referenced documents, free to adopt and adapt under CC BY-SA 4.0, each with its owner, classification, review cadence, and framework mappings. Every count on this site is computed from the library at build time.
Start from the seat you hold
Start here
- Browse the library360 documents5 paths by need, 358 documents across 12 domains plus 2 library specifications, and 17 document types, every count computed at build time.
- Open a domain: Governance43 documents43 documents grouped by type, from the library charter to the role authority register.
- Open a documentexampleException and Risk Acceptance Management Policy: a policy page with its governance record, outline, framework mappings, and related documents.
- Open the crosswalk19 instrumentsThe corpus domains set against 19 standards, laws, frameworks, and programmes in the full table, every cell and count generated from the alignment matrices at build time.
- Standards & frameworks258 citationsEvery standard, law, framework, and programme in the canonical citations register, grouped by register section, each edition read from the register at build time.
- Meet an obligationcomplyWork from a framework, law, or programme to the mappings, the documents, and the evidence an audit will ask for; the other need paths, Make a decision, Govern a programme, Find a solution, and Write a policy, sit beside it on Browse.
- Search the librarysearchFilter by title, type, area, purpose, and the frameworks a document maps to.
What it gives you
Starting a governance, risk, or compliance programme means writing dozens of documents before the first control is reviewed. GRC Library gives you 360 documents that already fit together, each with its owner, approver, and classification, and mapped to the frameworks an auditor will ask about. They are free to adopt and adapt under CC BY-SA 4.0. They are organization-neutral templates: you adapt them with your own names and details and approve them; adopting them confers no certification, and legal advice is outside the library.
About this project
Contributors For AI Disclosure Licence Privacy (opens in a new tab) Security (opens in a new tab)
The library's governance rule pack, the automated contribution rules an AI assistant follows, is now the AIQT (opens in a new tab) project.