GRCP-03
A living GRC workbook for the HIPAA Security Rule
A risk register with inherent and residual scoring, cross-walked to the HIPAA Security Rule and the evidence behind each control, maintained alongside a cloud migration rather than after it.
AI governanceP-04
AI usage guidelines aligned with the NIST AI RMF
Practical acceptable-use and AI usage policies for a small regulated firm, structured around the NIST AI Risk Management Framework.