Free GRC Project Tools
Three free tools to start doing real GRC work: a risk register, a control assessment tracker, and a corrective action plan tracker. Each one comes with a worked example, so you are not staring at a blank page.
No sign-in. No payment. Your work saves in this browser, on this device.
The three free tools
Risk Register
Log risks as cause, event, impact. Score likelihood and impact 1 to 5 and the tool does the math.
Control Assessment
Assess a control honestly: how it is implemented, how effective it is, and what you found.
CAP Tracker
Turn a finding into a corrective action with an owner, a date, and a way to verify the fix.
What is included
Risk Register Control Assessment CAP Tracker Worked examples CSV export Saves in your browser
Each tool ships with one worked example row, so you can see the format before you add your own work. Export any tool to CSV for your portfolio. Everything is free, and there is no account to create.
Want the full set?
The $20 tools add vendor assessment, NIST CSF gap assessment, and policy draft, plus cloud save across devices, 25 AI checks, a 58-control NIST bank, practice labs, and portfolio export.
Who it is for
Anyone learning GRC and building proof they can show. Work the tools on a fictional company, export your work, and hand a hiring manager something they can actually open and read.
Prefer spreadsheets? The same three templates are free as Excel files: Free GRC Project Templates on Whop. This is the web version of those templates, not an upgrade to them. Own either one, or both: the templates are files you keep; this is the web version you can open anywhere.