The GRC Lab: your control environment in one platform.
A GRC platform built by auditors for companies and training teams. Manage controls, testing, evidence requests and issues without the spreadsheets.
Inside the platform
See what the GRC Lab does
What it solves
From scattered to structured
Evidence lives in email and shared drives
Evidence requests are tracked in one place, linked to the control and the test.
Spreadsheets nobody trusts
One control library with owners, frequencies and framework mappings.
No clear view of open issues
An issue register with severity, owners, target dates and overdue alerts.
Reviews happen at the last minute
Workpapers move through testing, review and approval with a full audit trail.
Features
Everything a GRC team needs
Control library
ITGC, ITAC, ISO 27001 and SOC 2 controls with risk, frequency and references.
Workpapers and sampling
Test steps, samples and conclusions with preparer and reviewer sign-off.
Evidence requests
Request evidence from control owners and track every response.
Issue management
Log findings, track remediation and validate fixes.
Application inventory
Systems, owners, hosting and SOX scope in one register.
Users and roles
Admin, tester, reviewer and evidence contact roles with secure email sign-in.
Audit log
Every sign-in and change recorded for accountability.
Dashboards
See testing progress, overdue items and open issues at a glance.
For companies
Run your SOX, ISO 27001 or SOC 2 programme on one platform, hosted securely for your organisation.
- Your own private, hosted instance
- Your controls, applications and owners
- Secure sign-in with one-time email codes
For training and upskilling
Give learners realistic practice: real-looking controls, samples, evidence and review comments.
- Hands-on SOX ITGC and TPRM exercises
- Trainer review and feedback in the tool
- Access controlled per learner and batch
GRC Practice Lab
Want to practise on the platform?
Individuals can get a one-month practice instance with assigned controls, evidence, sample workpapers and expert review of 5 controls.
Per user, for one month of access.
Organisations: ask for detailed pricing.
See the GRC Lab with your own controls.
Book a walkthrough and we'll show how it fits your programme.