Free GRC tools

Select requirements across risk, compliance, audit, BCM and GCC-specific criteria, set priorities, and export an RFP-ready checklist.

Add risks, score likelihood and impact on a 3×3, 4×4 or 5×5 matrix, see them plotted on a live heat map, and export to CSV for Excel.

Rate your implementation across all 28 subdomains of Saudi Arabia's Essential Cybersecurity Controls and export your gap list.

Rate all 32 subdomains of the SAMA Cyber Security Framework against SAMA's six-level maturity model and see your gap to the required level 3.

Work through controller obligations under Law No. 13 of 2016 — lawful basis, notices, consent, rights, processors, security and 72-hour breach notification.