Compliance & GRC articles
Frameworks, controls, audit evidence, policies, and GRC workflows
Learn how cybersecurity connects with compliance frameworks, audits, evidence collection, risk management, policies, and control implementation.
Collection snapshot
—
Published articles in this collection
Best for: GRC analysts, IT auditors, compliance managers, and security leaders
…
Published articles
8
Example topics
3
Learning paths
How to use this collection
Read → apply → reference
Each article is written as a practical knowledge block you can use on the job, in labs, or during audits.
Learn the concept
Understand the threat, control, or workflow with clear explanations.
Follow the checklist
Apply steps, commands, or evidence collection in your environment.
Connect to practice
Jump to related labs, tutorials, and tools to reinforce skills.
Example topics in this collection
- SOC 2
- ISO 27001
- CIS Controls
- PCI-DSS
- GDPR
- Risk register
- Audit evidence
- Policy templates
Catalog
Articles in compliance & grc
Practical guides, checklists, and explainers focused on this security domain.
Outcomes
What you'll learn
- Understand SOC 2, ISO 27001, CIS, and related control expectations
- Collect and organize audit evidence IT teams are commonly asked to provide
- Map technical controls to policies, risk registers, and governance processes
- Bridge compliance reading with Linux, cloud, and SOC operational articles
More topics
Explore other article collections
Jump between fundamentals, offensive security, blue team, cloud, compliance, and more.
Cybersecurity Fundamentals
Core security concepts, threat models, and the mindset every defender needs
View collectionEthical Hacking & Penetration Testing
Recon, testing workflows, exploitation basics, and professional reporting
View collectionWeb Application Security
OWASP risks, injection flaws, access control, APIs, and secure development
View collectionLinux Security
SSH hardening, permissions, auditd, firewalls, logging, and CIS controls
View collectionSOC & Blue Team
SIEM alerts, log analysis, triage workflows, and blue-team investigation
View collectionIncident Response
Detect, contain, investigate, eradicate, recover, and learn from incidents
View collectionCloud Security
IAM, logging, network controls, storage security, and misconfiguration detection
View collectionDevSecOps
Secure CI/CD, secret scanning, SAST/DAST, containers, and pipeline automation
View collectionSecurity Tools & Platforms
Practical guides for scanners, SIEM, testing, and investigation platforms
View collectionNetwork Security
Segmentation, firewalls, VPNs, DNS, IDS/IPS, and packet analysis
View collectionCryptography
Encryption, hashing, TLS, certificates, signatures, and key management
View collection