RESOURCES
Understand the work.
Find your next step.
Explore practical workflow guides, try the sample walkthrough and get familiar with the language of security governance.
TOOLS FOR YOUR NEXT REVIEW
Start with a useful
set of questions.
Practical checklists you can use with your team, whether you are choosing a platform or already running a programme.
Build an AI inventory people can maintain.
The fields, ownership questions and review triggers to capture before an assessment begins.
Read the AI inventory checklistAUDIT PREPARATION · CHECKLISTReview the evidence behind a control.
Eight checks that help your team separate an attached file from a supported assessment.
Read the evidence review checklistA PRACTICAL STARTING POINT
Begin with one
piece of real work.
A requirement to assess, a risk to treat or an AI system to review gives your team a clear place to start.
Try the sample supplier workflow- 01
Define the scope
Choose the project, requirement or system you want to work on. Record why it matters and confirm the content and modules you need.
- 02
Name the responsible people
Identify who owns the work, who completes the assessment and who has authority to review or approve the result.
- 03
Connect the supporting records
Bring together the relevant policy, risk, assessment and evidence. Give missing work an owner and a deadline.
- 04
Record the review and what follows
Keep the decision and its rationale with the work. Set the next review date and retain any conditions or follow-up tasks.
PRODUCT GUIDES
Follow the workflow
that matters to you.
Each guide explains the work, gives an illustrative example and sets out the relevant scope and availability.
Controls & evidence
Keep the requirement, supporting records and review connected.
02Risk management
Assess, treat and document the risks your team accepts.
03Tasks & workflows
Give work an owner, a deadline and the context to act.
04Reporting & audit
Prepare reports and scoped reviews from recorded work.
GRC GLOSSARY
A shared language
for the programme.
Plain-language explanations of the terms used throughout Defensiq.
- GRC
- Governance, risk and compliance: how an organisation assigns responsibility, manages uncertainty and addresses its requirements.
- Framework
- An organised set of requirements or control topics used to structure a programme. Available content, scope and editions vary.
- Control
- A measure used to address a risk or requirement, such as a policy, an access restriction or a review process.
- Applicability
- A recorded decision about whether a requirement applies to the organisation or project, together with the reason.
- Implementation
- The recorded state of putting a measure into practice. It is assessed separately from the review of its supporting evidence.
- Assurance
- The review and verification of the supporting work and records. Attaching a file does not, by itself, establish assurance.
- Evidence
- A file, reference or other record used to support an assessment. Its relevance, scope and review status matter.
- Residual risk
- The risk that remains after the measures taken to address it. Its assessment and any acceptance decision need a recorded rationale.
- Risk acceptance
- A decision by an authorised person to accept a risk within an agreed scope and period, with a reason and review date.
- AI Governance
- The records, responsibilities, assessments and human decisions used to oversee how an organisation uses AI.
- AI use case
- The business purpose for which an AI system is used. Different uses of the same technology may need different oversight.
- Nova
- An assistant inside Defensiq for project questions, drafts and supported actions that people review. Its access is separate from AI Governance.
Questions for your
security review.
Ask for the current hosting and processing scope, access-control information and privacy terms that apply to your organisation. If you plan to enable AI assistance, include the relevant provider and data-handling questions.
Use Defensiq’s Trust Center as a starting point, then request the evidence your procurement review needs.
Visit the Trust Center Ask a security questionPRODUCT AVAILABILITY
Plan around the
workflow available today.
Sign-up is open: try the GRC platform for 14 days or use AI Governance’s free-forever plan. The Platform and Solutions pages explain the available workflows and access conditions. For release details or a capability you cannot find here, ask for its current status and the relevant plan.
Bring future requirements to the conversation, and confirm any delivery commitment separately from the features you can use today.
Ask about product availabilityYOUR NEXT STEP
See the workflow with your team’s priorities.
Bring a framework, risk or AI use case. Confirm the records, roles and outputs you need during a focused demo.