Practical GRC resources.
Built by practitioners.
Download the checklists, templates, and briefings used by leading security and compliance teams to accelerate audits, manage risk, and report to the board.
Explore the resource library
Compliance Guides
Framework deep-dives, gap assessments, and implementation playbooks.
Risk Management Templates
Risk registers, heat maps, and treatment plan templates.
Audit Checklists
Internal audit and readiness checklists across major frameworks.
Vendor Risk Templates
Third-party assessment questionnaires and onboarding workflows.
Policy Templates
Editable information security and privacy policy templates.
Executive Briefings
Board-ready briefings on regulation, risk posture, and program ROI.
Datasheets
Product and framework datasheets for quick reference and sharing.
Webinars
On-demand sessions with GRC practitioners and regulators.
Start with our
first downloadable assets.
Hand-picked checklists and templates that map directly to the most common audit, risk, and vendor management workflows. Each asset is editable, framework-aligned, and ready to drop into your program.
ISO 27001 Gap Assessment Checklist
Annex A control-by-control gap assessment template aligned to ISO/IEC 27001:2022.
SOC 2 Readiness Checklist
Trust Services Criteria readiness review covering Security, Availability, and Confidentiality.
GDPR Compliance Checklist
Lawful basis, data subject rights, DPIAs, and cross-border transfer obligations.
Vendor Risk Assessment Template
Tiered third-party due diligence questionnaire with scoring rubric.
Risk Register Template
Enterprise risk register with likelihood, impact, treatment, and ownership fields.
Audit Evidence Checklist
Pre-audit evidence collection list mapped to common control families.
Product & framework
datasheets.
Single-page visual overviews you can share with stakeholders, attach to RFPs, or send in outbound campaigns. Each datasheet maps Waaqi capabilities directly to a specific framework or use case.
ADHICS V2 Compliance Datasheet
One-page overview of how Waaqi supports Abu Dhabi Healthcare Information & Cyber Security (ADHICS V2) compliance across 151 controls and 18 domains.
View / DownloadNeed a resource we haven't published yet?
Tell us what your team needs, checklists, board templates, or framework mappings, and we'll send it your way.