Practical Guides and White Papers
In-depth resources to structure your GRC program, written by Canadian experts.
Guides and white papers
Complete Law 25 Guide
Everything you need to know about Quebec's Law 25: obligations, timelines and practical steps to bring your organization into compliance.
Read guideDPIA: Practical Guide
How to conduct a Privacy Impact Assessment compliant with Law 25, step by step.
Read guideManaging Multiple GRC Frameworks
Strategies to align ISO 27001, Law 25 and PCI-DSS in a unified GRC program without duplicating efforts.
Read guideRisk Assessment for SMEs
Practical method to identify, assess and treat security risks in a small or medium-sized enterprise.
Read guideDownloadable templates
Ready-to-use templates to accelerate your compliance — free, no registration required.
These templates are provided as a starting point. They must be adapted to your organization's specific context. For a turnkey compliance solution, discover the CapGRC platform.
Automate with CapGRC
Stop managing compliance in Excel files. CapGRC centralizes your risks, audits, PIAs and frameworks in a single platform.