Continuum GRC's integrated risk management solution provides a Roadmap to Risk Reduction by delivering comprehensive, customizable, and intuitive enterprise solutions.

Select the modules you need

More than 100 Frameworks and counting, including yours, are added perpetually, representing hundreds of modules and 2.5 million auto-mapped data points.

Audit & Compliance Frameworks

Continuum GRC has auto-mapped the world's standards and frameworks seamlessly together. These are the most commonly requested modules, but certainly not our entire inventory!

• CIS
• StateRAMP CSP
• StateRAMP 3PAO
• SOC 1, SOC 2, SOC 3
• SEC, NFA, & FINRA
• Plan of Action and Milestones (POA&M)
• PCI ROC & SAQ A, A-EP, B, B-IP, C, C-VT, D
• NTIS Limited Access DMF Information Security Guidelines
• NIST CSF
• NIST 800-66 HIPAA
• NIST 800-63A
• NIST 800-53
• NIST 800-53A
• NIST 800-218 Secure Software Development Framework
• NIAP Common Criteria
• NERC CIP & 693
• MPA Content Security Best Practices (TPN)
• ISO 27001, 27002, 27005, 27007, 27017, 27018, 27701, 17020, 17021, 17025, 17065, 9001, 90003, 42001, 13485
• IRS 1072, 4812
• HITRUST CSF
• FIPS 199, 200
• FedRAMP CSP
• FedRAMP 3PAO
• FDA 21 CFR Part 11 GxP
• EUCS - Basic, Substantial, High
• ENS - Low, Intermediate, High
• EHS (Environment, Health, and Safety) Checklist
• DoD Cloud Computing SRG
• DFARS NIST 800-172
• DFARS NIST 800-171
• CTPAT
• CSF
• COSO
• Continuous Monitoring (CONMON)
• Commonwealth Security and Risk Management Directorate
• CMMC L3
• CMMC L2
• CMMC L1, L2, L3
• CMMC L1
• Cloud Computing Compliance Criteria Catalogue (C5)
• CJIS
• Cisco CCF

And so many more!

Risk Assessment & Management Frameworks

All of our Continuum GRC modules calculate risk and maturity, but these modules are specifically aligned to common industry standards.

• COSO ERM
• Enterprise Risk Management - Impact, Likelihood and Velocity
• ISO/IEC 27005
• NIST 800-30 Guide for Conducting Risk Assessments
• NIST 800-37 Risk Management Framework for Information Systems and Organizations
• NIST 800-218 Secure Software Development Framework
• Physical Security Risk Assessments
• Data Risk Register
• Site Visit Risk Assessments
• Third-Party Risk Assessments
• Vendor Risk Assessments

And so many more!

Privacy Frameworks

Identify your organization’s privacy protection risks against any legislative, regulatory requirements, or international best practices leveraging our patent pending automation, all the while cross-mapping to your compliance requirements.

Modules include:

• ISO 27701
• GDPR
• CCPA
• DPIA
• PIPEDA
• DPIA
• DPDP
• LGPD

And so many more!

Governance & Policies

Our extensive library of customizable policy templates includes but is not limited to the following documents.

• Information Systems and Technology Security Charter
• Information Systems and Technology Security Policy
• Asset Identification and Classification Standard
• Asset Protection Standard
• Asset Management Standard
• Acceptable Use Standard
• Vulnerability Assessment and Management Standard
• Threat Assessment and Monitoring Standard
• Security Awareness Standard

And so many more!

These are popular policy suites that are custom created to comply with these common standards.

• AICPA SOC Compliant Policy Suite - Do It Yourself ($1,649 USD)
  
  
• ISO 27001 Compliant Policy Suite - Do It Yourself ($1,699 USD)
  
  
• FedRAMP-FISMA Compliant Policy Suite - Do It Yourself ($2,799 USD)
  
  
• PCI Compliant Policy Suite - Do It Yourself ($1,649 USD)
  
  
• HIPAA Compliant Policy Suite - Do It Yourself ($1,799 USD)

You will be redirected to the Policy Machine by selecting any of these options.