GRC Starter Kit

Write a plain-language risk, rate likelihood and impact, map safeguards, and record evidence sources. The score is a practice aid—not a universal standard.

Read the GRC beginner guide
NEW RISK

Describe the scenario

Safeguards to review
Potential evidence sources
INHERENT SCORE9 / 25Practice band: Moderate
RESIDUAL ESTIMATE4 / 25Set after safeguards are reviewed

Example RR practice bands: 1–4 Low · 5–9 Moderate · 10–15 High · 16–25 Critical. Use your organization’s approved scoring method for real work.

YOUR LOCAL PRACTICE REGISTER

Recorded scenarios

Your practice register is empty. Add a fictional risk or load the sample example.
ScenarioInherentControls & evidenceTreatment / ownerResidualRemove
GRC beginner guideBack to Cyber ToolsReturn to labs