General Controls Review (GCR) / Governance Risk & Compliance Review (GRC)

General Controls Review (GCR) /
Governance Risk & Compliance Review (GRC)

Home » Assessment & Compliance Services » General Controls Review (GCR) / Governance Risk & Compliance Review (GRC)

RedZone Compliance provides comprehensive GCRs/GRC reviews that validate the efficacy of the controls, processes and procedures within your organization. Audits are tailored to your individual risk profile and will focus on security and privacy control families outlined in NIST SP 800-53 guidance:

NIST SP 800-53 Security and Privacy Control Families

Network Penetration Testing

Access Control
Physical and Environmental Protection
Awareness and Training
Planning
Audit and Accountability
Assessment, Authorization, and Monitoring
Personnel Security
Configuration Management
PII Processing and Transparency
Contingency Planning Risk Assessment
Identification and Authentication
System and Services Acquisition
Incident Response
System and Communications Protection
Maintenance
System and Information
Integrity
Media Protection
Risk Assessment

Your RedZone Compliance GCR/GRC review will provide a holistic, enterprise-wide snapshot of your information and security environment, what is working and what gaps need attention.

Protecting your information systems, PII and confidential information is essential to effectively manage and support your organization, and will directly impact your overall compliance to regulatory requirements.