Study
Study with real-world flashcards
Scenario flashcards that train you to act like a GRC professional: what to do first, why, which control applies and the mistake to avoid. Each topic also has a one-page study guide.
Your progress
š„ 0 day streak Ā· Level 1 Ā· 0 XP
Saved in this browser only.
30-second quiz Ā· what would you do first?
Badges
ā”Quick thinkeršCard flipperš§ŖLab explorer
Access Management & PAMShared admins, leavers, MFA gaps and access reviews that really work.Start studyingRisk ManagementOwners, appetite, acceptance and registers that drive decisions.Start studyingISO 27001Scope, SoA, internal audit, evidence and nonconformities.Start studying
SOC 2Trust Services Criteria, Type I vs Type II and evidence.
Third-Party RiskDue diligence, contracts, monitoring and exit.
Incident Response & BCPTriage, reporting clocks, recovery and testing.
Privacy (GDPR & DPDP)Lawful basis, consent, rights requests and breach notice.
Cloud SecurityShared responsibility, misconfigurations and identities.
Threat ModelingData flows, STRIDE and turning threats into controls.
Audit FundamentalsSampling, evidence, findings and working papers.
Your progress is saved in this browser only. Framework references are given for study; always check the current edition of each standard.