GRCLibrary.ai

Annex

Public Sector GRC Requirements Annex

This annex identifies the obligations that overlay the core GRC library when an entity is a public sector body or a contractor providing services to one. It covers freedom of information, accessibility, public procurement, records management, audit and transparency, official languages, lobbying and ethics, and the elevated expectations on technology, AI, and data protection that public sector buyers and citizens apply.

Type
Annex
Version
0.0.6
Date
2026-09-04
Owner
Chief Compliance Officer
Approving authority
Governance Library Maintainer
Classification
Public
Confidentiality
Public
Category
Compliance: Sector-Specific
Review frequency
Annual and upon material public-records law, accessibility, or procurement guidance change
Licence
CC BY-SA 4.0

Read the full text on GitHub (opens in a new tab)

Outline

  • Purpose
  • Applicability triggers
  • Overlay area 1: freedom of information and transparency
  • Overlay area 2: accessibility
  • Overlay area 3: public procurement
  • Overlay area 4: records management
  • Overlay area 5: audit and external scrutiny
  • Overlay area 6: ethics, lobbying, and conflict of interest
  • Overlay area 7: AI in the public sector
  • Overlay area 8: official languages
  • Library gaps requiring additional documentation
  • Framework alignment
  • Limitations

Frameworks it maps to

Related documents