GRC Best Practices
Practical guidance on all elements of your GRC program
8 articles
Governance
Learn how to implement effective governance practices in your GRC program.
Do cloud-hosted systems need Contingency Plans?
Are we required to have an independent Board of Directors?Board of Directors Guidance
How to Adjust Controls When You Don’t Have a Board of Directors
Risk
Identify, assess, and manage organizational risks effectively.
How to Determine Key Vendors to include in Drata?Determine key vendor or vendors to include in Drata
What Is a Subprocessor?An overview of how compliance frameworks use the term "subprocessor."
Compliance
Maintain and strengthen compliance across your organization.
Annual Compliance ReviewEnsure your security posture is maintained year to year
Disaster Recovery Checklist: Simple Steps for Business Resilience
The backup policy and version controlHow should backups be done for your version control system