Matrix
GRC Library Compliance Alignment Matrix
This matrix maps the GRC library documents it lists to the control domains and section references of ten compliance, security, assurance, and AI-control frameworks, so a reader can trace which documents support a framework's requirements and which frameworks a document touches. The cross-framework view of the same alignments is the Cross-Framework Alignment Matrix.
- Type
- Matrix
- Version
- 1.12.17
- Date
- 2026-11-07
- Owner
- Chief Information Security Officer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Compliance Management
- Review frequency
- Annual and upon material regulatory or framework change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- How to use this matrix
- Notes
- Governance domain
- Risk domain
- Compliance domain
- Security domain
- Operations domain
- Supply chain domain
- Resilience domain
- Privacy domain
- Architecture domain
- Dev-security domain
- AI domain
- Crypto domain
- Framework coverage summary
Related documents
- Compliance, Audit, and CAPA Management Policycompliance
- Global Regulatory Applicability Registercompliance
- BASC IT and Information Security Responsibilitiescompliance
- UK AEO-S IT and Cybersecurity Requirementscompliance
- Governance Library Chartergovernance
- Cross-Framework Alignment Matrixgovernance
Next
All Documents