Practical Guides and White Papers
In-depth resources to structure your GRC program, written by Canadian experts.
Guides and white papers
Complete Law 25 Guide
Everything you need to know about Quebec's Law 25: obligations, timelines and practical steps to bring your organization into compliance.
Read guideDPIA: Practical Guide
How to conduct a Privacy Impact Assessment compliant with Law 25, step by step.
Read guideManaging Multiple GRC Frameworks
Strategies to align ISO 27001, Law 25 and PCI-DSS in a unified GRC program without duplicating efforts.
Read guideRisk Assessment for SMEs
Practical method to identify, assess and treat security risks in a small or medium-sized enterprise.
Read guideTechnical datasheets
CapGRC module overviews. Provide your details to receive the download link.
CapRISK technical datasheet
PDFProduct overview of the risk management module: register, assessments, treatments and reporting (French PDF).
CapCOM technical datasheet
PDFProduct overview of the compliance module: programs, requirement assessments, evidence, gaps and audit preparation (French PDF).
CapPRP technical datasheet
PDFProduct overview of the privacy module: PIAs, processing register, incidents, access requests and privacy reporting (French PDF).
CapAUDIT technical datasheet
PDFProduct overview of the internal audit module: planning, evidence, findings, recommendations and closure (French PDF).
CapPROSEC technical datasheet
PDFProduct overview of the project security module: register, configurable journey, gaps, deliverables, evidence and action plans (French PDF).
CapTRISK technical datasheet
PDFProduct overview of the third-party risk module: vendor inventory, due-diligence questionnaires, scoring, mandates and contractual follow-up (French PDF).
Downloadable templates
Ready-to-use templates to accelerate your compliance, free, no registration required.
These templates are provided as a starting point. They must be adapted to your organization's specific context. For a turnkey compliance solution, discover the CapGRC platform.
Automate with CapGRC
Stop managing compliance in Excel files. CapGRC centralizes your risks, audits, PIAs and frameworks in a single platform.