Practise real audit work on the GRC Lab, with expert review.
A one-month practice instance for individuals who want hands-on IT audit and GRC experience: test controls, document your work and get feedback from a practitioner.
Pricing
Simple, transparent pricing
Individual practice is priced per user for one month. Organisations can ask for team and batch pricing.
GRC Practice Lab
- Your own practice instance on the GRC Lab for one month
- Controls assigned to you to test, like a real audit engagement
- Evidence supplied for each control: populations, screenshots and reports
- Sample workpapers to guide your documentation
- Your audit documentation and conclusions reviewed by an experienced auditor
- Written review comments on 5 controls
Prices are per user. Access runs for one month from the day your instance is set up. See our refund and cancellation policy.
For organisations and training institutes
Train your audit, risk or compliance team together, or run the lab for a batch of students. Pricing depends on the number of users, the duration and how many controls you want reviewed.
- Team and batch pricing
- Your own controls and evidence, if you prefer
- Trainer dashboard and progress tracking
- Extended review and feedback options
How it works
Your month in the GRC Lab
Enrol
Send the form below. We confirm your start date and share payment details.
Get your instance
Sign in with your email. Your assigned controls, evidence and sample workpapers are waiting.
Test and document
Work through each control: walkthrough, sampling, testing and your conclusion.
Get reviewed
An experienced auditor reviews 5 controls and leaves comments to help you improve.
What you can solve for a company
Be the person who gets the company audit-ready
Every company with SOX, ISO 27001 or SOC 2 audits faces the same problems. After a month in the lab, you can help solve them.
- Failed audits and surprise findings: test access, change, operations and backup controls before the external auditor does
- Evidence auditors reject: confirm populations are complete and accurate, and pick samples that hold up
- Messy, last-minute documentation: turn evidence into clear workpapers and well-supported conclusions
- Weak or missing controls: spot design gaps and explain the risk to the business in plain language
- Issues that never get fixed: raise findings with the right severity and a remediation plan management can act on
Let's connect
Enrol or ask a question
Tell us when you would like to start. We reply within one business day with your start date and payment details.