Skip to content

Commit fd919ab

Browse files
p4gsclaudehappy-otter
committed
Add GRC Engineering Cheat Sheet page
Legacy GRC vs. GRC Engineering comparison table with governance, risk, compliance, and trust & assurance program breakdowns. Generated with [Claude Code](https://claude.ai/code) via [Happy](https://happy.engineering) Co-Authored-By: Claude <noreply@anthropic.com> Co-Authored-By: Happy <yesreply@happy.engineering>
1 parent 16ae8de commit fd919ab

2 files changed

Lines changed: 164 additions & 0 deletions

File tree

‎docs/projects/grcengineering-cheat-sheet.md‎

Lines changed: 163 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,163 @@
1+
# The GRC Engineering Cheat Sheet
2+
3+
## Legacy GRC vs. GRC Engineering in practice
4+
5+
<div class="cheat-sheet-table" markdown>
6+
7+
<table>
8+
<thead>
9+
<tr>
10+
<th style="width: 120px; text-align: center;">Program</th>
11+
<th>Legacy GRC</th>
12+
<th>GRC Engineering</th>
13+
</tr>
14+
</thead>
15+
<tbody>
16+
<tr>
17+
<td style="text-align: center;"><em>All</em></td>
18+
<td>
19+
<ul>
20+
<li>Framework-first focus</li>
21+
</ul>
22+
</td>
23+
<td>
24+
<ul>
25+
<li>Threat-informed, systems thinking, design thinking</li>
26+
</ul>
27+
</td>
28+
</tr>
29+
<tr>
30+
<td style="text-align: center;">Governance</td>
31+
<td>
32+
<ul>
33+
<li>Policies, standards, procedures</li>
34+
<li>Docs =/= control reality</li>
35+
<li>Metric-less committees &amp; decisions</li>
36+
<li>Annual/semi-annual training (boring)</li>
37+
</ul>
38+
</td>
39+
<td>
40+
<ul>
41+
<li>PaC enforces &ldquo;risk tolerance&rdquo; (pre-deploy/change)</li>
42+
<li>&ldquo;Autocorrect/reconcile&rdquo; docs &larr;&rarr; controls</li>
43+
<li>Metrics-focused committees &amp; decisions</li>
44+
<li>Real-time behavioral interventions &amp; scientific pedagogy</li>
45+
</ul>
46+
</td>
47+
</tr>
48+
<tr>
49+
<td style="text-align: center;">Risk</td>
50+
<td>
51+
<ul>
52+
<li>Qualitative risk analysis (manual)</li>
53+
<li>Subjective data &amp; heatmaps</li>
54+
<li>Fragmented weaknesses &amp; issues</li>
55+
<li>Accountability police</li>
56+
<li>Fear, Uncertainty, &amp; Doubt (FUD)</li>
57+
<li>TP<u>C</u>M, heavily third-party focused</li>
58+
</ul>
59+
</td>
60+
<td>
61+
<ul>
62+
<li>Quantitative risk analysis (automated)</li>
63+
<li>Objective data &amp; histograms</li>
64+
<li>Holistic risk scenarios (threat + vector + asset + impact)</li>
65+
<li>Decision support partners</li>
66+
<li>Evidence, Logic, Math, Reason (ELMR &gt;&gt;&gt; FUD)</li>
67+
<li>TP<u>R</u>M, balanced third + first-party focus</li>
68+
</ul>
69+
</td>
70+
</tr>
71+
<tr>
72+
<td style="text-align: center;">Compliance</td>
73+
<td>
74+
<ul>
75+
<li>Periodic, isolated control monitoring</li>
76+
<li>Evidence samples</li>
77+
</ul>
78+
</td>
79+
<td>
80+
<ul>
81+
<li>Automated, holistic control monitoring &amp; active testing</li>
82+
<li>Evidence populations (full)</li>
83+
</ul>
84+
</td>
85+
</tr>
86+
<tr>
87+
<td style="text-align: center;">Trust &amp;<br>Assurance</td>
88+
<td>
89+
<ul>
90+
<li>Opaque, abstracted annual artifacts</li>
91+
<li>RFIs handled via email</li>
92+
</ul>
93+
</td>
94+
<td>
95+
<ul>
96+
<li>Transparent, real-time, historical visibility into controls</li>
97+
<li>Self-service RFIs &amp; questionnaire completion</li>
98+
</ul>
99+
</td>
100+
</tr>
101+
</tbody>
102+
</table>
103+
104+
</div>
105+
106+
<style>
107+
.cheat-sheet-table table {
108+
border-collapse: collapse;
109+
width: 100%;
110+
font-size: 0.9rem;
111+
}
112+
113+
.cheat-sheet-table table thead th {
114+
background-color: #ffa84f !important;
115+
color: #000 !important;
116+
font-weight: 700;
117+
font-size: 1.05rem;
118+
padding: 14px 16px;
119+
border: 1px solid #ccc;
120+
}
121+
122+
.cheat-sheet-table table tbody td {
123+
padding: 12px 16px;
124+
border: 1px solid #ddd;
125+
vertical-align: top;
126+
}
127+
128+
.cheat-sheet-table table tbody tr:nth-child(odd) {
129+
background-color: rgba(0, 0, 0, 0.02);
130+
}
131+
132+
.cheat-sheet-table table tbody td:first-child {
133+
font-weight: 700;
134+
text-align: center;
135+
vertical-align: middle;
136+
white-space: nowrap;
137+
}
138+
139+
.cheat-sheet-table table tbody ul {
140+
margin: 0;
141+
padding-left: 20px;
142+
}
143+
144+
.cheat-sheet-table table tbody li {
145+
margin-bottom: 4px;
146+
}
147+
148+
.cheat-sheet-table table tbody li:last-child {
149+
margin-bottom: 0;
150+
}
151+
152+
[data-md-color-scheme="grcengineering-dark"] .cheat-sheet-table table tbody tr:nth-child(odd) {
153+
background-color: rgba(255, 255, 255, 0.04);
154+
}
155+
156+
[data-md-color-scheme="grcengineering-dark"] .cheat-sheet-table table thead th {
157+
border-color: #555;
158+
}
159+
160+
[data-md-color-scheme="grcengineering-dark"] .cheat-sheet-table table tbody td {
161+
border-color: #444;
162+
}
163+
</style>

‎mkdocs.yml‎

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -8,6 +8,7 @@ nav:
88
- Learning Hub: learning-hub.md
99
- Blog: "https://blog.grc.engineering"
1010
- Projects: projects.md
11+
- GRC Engineering Cheat Sheet: projects/grcengineering-cheat-sheet.md
1112
extra_css:
1213
- stylesheets/extra.css
1314
extra_javascript:

0 commit comments

Comments
 (0)