About me

Naresh Thalla Mudhiraj

GRC professional · Cyber risk governance

Giving back to the GRC community, one free resource at a time.

• CISA
• ISO 27001 Lead Auditor

I am a cyber risk and GRC professional, currently working in cyber risk governance. My work covers risk management, identity and access management, cloud security, application security and IS audit.

I built this site to pull the core ideas of GRC into one calm place, written the way you would explain them to a colleague, so you can prepare for interviews, refresh before an audit and practise in safe, simulated labs.