$49
PDF · 65 pages · 1.2 MB
Secure checkout. Your download link appears the moment payment is confirmed.
Ravens AI Academy Series
The GRC Playbook
From Framework to Boardroom
Two things separate an analyst who operates a platform from one who runs a program: understanding the frameworks and regulations the platform's controls are supposed to satisfy, and the judgment to turn a screen full of data into a decision a skeptical executive will actually act on.
This book covers both — moving out of the platform and into the meetings where its output gets used: a regulatory exam, a board presentation, a hiring decision, a budget fight.
Inside the book
- Part One — COSO ERM, ISO 31000, NIST CSF, SOC 2, ISO 27001, PCI DSS
- Major privacy laws, sector-specific regulation, and harmonizing into one control library
- Part Two — Writing findings that land and presenting risk to skeptical stakeholders
- The board memo, and handling pushback
- Part Three — Leading the program: managing a team and building a business case
- Capstone board presentation, plus Appendix A lab answer key
Written for
GRC analysts moving into leadershipCompliance and audit managersRisk program ownersAnyone presenting risk to a board