A practical space for governance, risk & compliance

Understand the work.
Build the confidence to do it.

Bridge the gap between knowing GRC and doing GRC. Clear explanations, practical guides and resources to help you take the next step.

Free to explore No account needed Built for practice
Inside the workshop
A little structure. A clearer next step.

From “what is it?”
to “I can do this.”

A practical approach to learning GRC.

1Understand the essentials
2Work through the process
3See an example in context
4Put your knowledge to work
Less jargon. More “now I understand.”
Knowledge that goes somewhere

A clearer path from learning to doing.

01

Understand the concept

Get clear on the ideas behind the task. Start with the why, then build from there.

02

Follow a practical guide

See the inputs, decisions and steps involved in getting the work done.

03

Explore a worked example

Connect the dots with fictional examples of what a deliverable can look like.

04

Make it your own

Use a resource as a starting point, with its assumptions and limitations in view.

On the workbench

Something useful for your next step.

Explore the library
Learning article9 min

What Does a GRC Analyst Actually Do? A Practical Guide to the Role

Explore the day-to-day responsibilities of a GRC analyst, from risk assessments and vendor due diligence to security control testing and compliance monitoring. Discover the skills, tools, and practical workflows needed to succeed in a GRC role.

GRC Fundamentals

Practical by design.
Thoughtful by nature.

GRC work involves judgement, context and people. This workshop makes the fundamentals easier to understand, with clear guidance and examples you can learn from.

About the workshop