#	Question	Status
Governance (0% completed)
1	Is there a governance framework in place?	Select Yes No
2	Are roles and responsibilities clearly defined?	Select Yes No
3	Are the organization’s policies documented?	Select Yes No
4	Are the policies aligned with regulatory requirements?	Select Yes No
5	Is a board or committee overseeing governance?	Select Yes No
6	Are there mechanisms for stakeholder feedback?	Select Yes No
7	Are KPIs and KRIs defined for governance?	Select Yes No
8	Is there a periodic review of governance practices?	Select Yes No
9	Are employees aware of governance policies?	Select Yes No
10	Is there a governance policy for third-party relationships?	Select Yes No
Risk Management (0% completed)
11	Is there a documented risk management framework?	Select Yes No
12	Are risks identified across all departments?	Select Yes No
13	Are risk registers updated regularly?	Select Yes No
14	Is a risk matrix used for prioritization?	Select Yes No
15	Are KRIs tracked effectively?	Select Yes No
16	Is there a process to escalate critical risks?	Select Yes No
17	Are risk mitigation plans developed for key risks?	Select Yes No
18	Are there regular risk assessments conducted?	Select Yes No
19	Are incidents linked back to identified risks?	Select Yes No
20	Is there a business continuity plan in place?	Select Yes No
Compliance (0% completed)
21	Are compliance requirements for your industry identified?	Select Yes No
22	Are compliance obligations tracked in a centralized system?	Select Yes No
23	Are compliance policies regularly reviewed?	Select Yes No
24	Is there evidence management for compliance audits?	Select Yes No
25	Are staff trained on compliance requirements?	Select Yes No
26	Are compliance violations documented and reviewed?	Select Yes No
27	Is there a process for reporting compliance breaches?	Select Yes No
28	Are all third-party contracts reviewed for compliance?	Select Yes No
29	Are regulatory updates monitored and integrated?	Select Yes No
30	Is there a compliance calendar to track deadlines?	Select Yes No
31	Is there an internal audit plan in place?	Select Yes No
32	Are external audits conducted periodically?	Select Yes No
33	Are audit observations documented?	Select Yes No
34	Is there a process to track audit remediation?	Select Yes No
35	Are risk-based audit approaches implemented?	Select Yes No
36	Is there a mechanism to audit third-party compliance?	Select Yes No
37	Are audits aligned with regulatory requirements?	Select Yes No
38	Are audit results communicated to senior management?	Select Yes No
39	Is audit data stored securely?	Select Yes No
40	Are audit timelines adhered to consistently?	Select Yes No
Additional Components (0% completed)
41	Is the organization using a centralized GRC platform?	Select Yes No
42	Are workflows automated for key GRC processes?	Select Yes No
43	Are evidence and documentation version-controlled?	Select Yes No
44	Is the organization tracking its maturity level for GRC?	Select Yes No
45	Are incidents linked to their resolutions in the system?	Select Yes No
46	Are all assets registered and risk-assessed?	Select Yes No
47	Are third-party risks integrated into GRC workflows?	Select Yes No
48	Are employees engaged in governance and compliance awareness?	Select Yes No
49	Is there a ticketing system for GRC-related issues?	Select Yes No
50	Are reports customized to meet management requirements?	Select Yes No