The GRC Architect — eBook (PDF + EPUB)
The GRC playbook for the EU AI Act enforcement year — and the frameworks that run beside it. 600 pages, 42 fill-and-modify templates, free updates for life.
Instant download · watermark-free reading · EU VAT handled at checkout
What you get
600-page practitioner playbook
Governance structure, risk end to end, professional audit, GRC engineering, AI governance, and DORA/NIS2 clocks — with exact regulatory dates and ISO 27001:2022 Annex A numbering.
42 fill-and-modify templates
Risk registers, BIAs, ROPAs, AI governance registers, Statement of Applicability, audit procedures — in markdown and fillable Word form, licensed for internal use.
Built for the enforcement year
High-risk EU AI Act obligations enforceable since 2 August 2026; CRA follows December 2027. The frameworks in this book are the ones auditors will ask for.
Free updates for life
Regulations move. Your purchase follows — every revision of the book and templates is delivered to you automatically, at no extra cost.
About the book
The GRC playbook for the EU AI Act enforcement year - and the frameworks that run beside it.
On 2 August 2026, the EU AI Act's high-risk obligations became enforceable: risk management, technical documentation, human oversight, and logging for any AI system touching employment, credit, education, biometrics, or essential services. The Cyber Resilience Act follows in December 2027. This book is the governance framework for that world.
600 pages, practitioner-written. Build the governance structure (ISSC charters, policy architecture, audit-ready minutes). Run risk end to end (RAM, risk registers, treatment plans, residual-risk acceptance with owner sign-off). Audit like a professional (internal audit lifecycle, 5-Whys corrective action). Engineer GRC (governance data lakes, policy-as-code, evidence pipelines). Govern AI specifically (EU AI Act risk tiers, provider/deployer RACI). Manage operational resilience, third-party risk, and the DORA/NIS2 regulatory clocks.
THE KIT also includes the companion template repository: 42 fill-and-modify templates across 8 domains - risk registers, BIAs, ROPAs, AI governance registers, the Statement of Applicability, internal audit procedures - in both markdown and fillable Word form. ISO 27001:2022 Annex A numbering, exact regulatory dates, fill-in fields. Licensed for internal organizational use.
Every purchase includes all future updates free.
Written by a 25-year IT and security veteran (network architect, Microsoft infrastructure engineer, penetration tester, CISSP). For CISOs, GRC managers, internal auditors, and compliance officers who need systems - not checklists that pretend to be systems.
Questions
What formats do I get?
PDF and EPUB — read on any device, tablet, or e-reader. The PDF uses the book's print layout with a clickable table of contents.
Where are the templates?
The 42 templates live in the free companion repository (github.com/xenprotocol/grc-templates) in markdown and fillable Word form. The book links each template to its file — 31 pointers across 9 chapters.
Do I get updates?
Yes — every purchase includes all future updates free, delivered automatically. The EU AI Act, DORA, and NIS2 are moving targets; the book is updated to match.
Can my team use the templates?
Yes — the templates are licensed for internal organizational use: copy, adapt, and put them through your document control.
Is this the same as the Amazon edition?
Same content, direct from the author — and your purchase here comes with the templates' convenience bundle and lifetime updates.
The enforcement year won't wait.
Systems, not checklists — 600 pages and 42 templates that survive an audit.
Get the eBook — $29.99Instant download · free updates for life