Skip to content
Contributor

Harry West

Founder, GRCMANA. Lead maintainer.

Harry is a former Global CISO with around 20 years in cybersecurity. He is GRCP certified, and Certified Lead Implementer for ISO 27001, ISO 27701 and ISO 42001.

He founded GRCMANA and leads GRC Skills and GRC OS. The skills encode how he runs GRC programmes in practice: start from the business's real context, write controls an auditor can test, and keep a human accountable for every decision.

Skills by Harry West

Foundationsv0.1.0

company-context

Builds the company profile, scope and framework choice every other skill reads.

All 5 frameworks
Foundationsv0.1.0

grc-status

Turns your workspace into a one-page status, board report or management review pack.

All 5 frameworks
Risk managementv0.1.0

ai-impact-assessment

Inventories your AI and assesses its risks and impacts on people.

ISO 42001GDPR
Risk managementv0.1.0

risk-register

Identifies, scores and treats your risks, with each treatment mapped to controls.

All 5 frameworks
Policy managementv0.1.0

policy-gap-review

Reviews your existing policies the way an auditor would.

All 5 frameworks
Policy managementv0.1.0

policy-writer

Recommends the policies you actually need and drafts them for your stack.

All 5 frameworks
Audit & evidencev0.1.0

audit-readiness

Scores how ready you are for audit and lays out the roadmap to get there.

All 5 frameworks
Audit & evidencev0.1.0

evidence-request-list

Plans what evidence to collect, from which system, by whom and when.

All 5 frameworks
Audit & evidencev0.1.0

evidence-review

Checks collected evidence before your auditor sees it.

All 5 frameworks
Frameworksv0.1.0

cyber-essentials-scoping

Scopes Cyber Essentials and finds the hard fails before you submit.

Cyber Essentials
Frameworksv0.1.0

dpia

Screens for and drafts a GDPR data protection impact assessment.

GDPR