grc

What problem does it solve?

This Skill automates governance, risk, and compliance documentation and assessment workflows, reducing manual effort and improving audit readiness.

Core Features & Use Cases

• Policy Management: Generate, manage, and map security policies across multiple frameworks.
• Control Assessment: Document control implementations and evaluate effectiveness.
• Risk Management: Maintain risk registers and track mitigation progress.
• Compliance Tracking: Monitor framework compliance and generate status reports.
• Framework Mapping: Align controls across frameworks (e.g., NIST, ISO 27001, SOC 2, CIS).
• Audit Support: Produce evidence indexes and findings summaries for audits.

Quick Start

Use the grc skill in your environment with Python 3.9+ and the grc_utils module. Import PolicyGenerator, create a policy, add sections and controls, and generate outputs. For example, create an Information Security Policy, add a Purpose section, attach controls, and print the resulting Markdown policy.