Library

Illustrations

Framework comparisons, step-by-step processes, maturity models and control maps for GRC, IT and project teams, drawn in one style and free to use in decks, policies and training with the credit "Source: SmartSuite".

All
GRC
IT service delivery
Project and portfolio management
Comparison
Process
Model
Checklist
Matrix
SLA, OLA, underpinning contract – SmartSuite
IT service delivery
·
Model
SLA, OLA, underpinning contract
What a CMDB connects – SmartSuite
IT service delivery
·
Model
What a CMDB connects
Anatomy of a major incident – SmartSuite
IT service delivery
·
Process
Anatomy of a major incident
Incident, problem or change? – SmartSuite
IT service delivery
·
Comparison
Incident, problem or change?
The ITIL 4 service value chain – SmartSuite
IT service delivery
·
Model
The ITIL 4 service value chain
The policy lifecycle – SmartSuite
GRC and resilience
·
Process
The policy lifecycle
Regulatory compliance: program, policy, reporting and change management
Five trust services criteria – SmartSuite
GRC and resilience
·
Checklist
Five trust services criteria
Regulatory compliance: program, policy, reporting and change management
RTO, RPO, MTPD: one timeline – SmartSuite
GRC and resilience
·
Model
RTO, RPO, MTPD: one timeline
Operational resilience: business impact analysis, business continuity plan and DORA
The vendor lifecycle – SmartSuite
GRC and resilience
·
Process
The vendor lifecycle
Third-party risk management: program, vendor risk assessment and questionnaire
The five pillars of DORA – SmartSuite
GRC and resilience
·
Model
The five pillars of DORA
Operational resilience: business impact analysis, business continuity plan and DORA
The ISO 31000 risk process – SmartSuite
GRC and resilience
·
Process
The ISO 31000 risk process
What is GRC: governance, risk and compliance explained, with a maturity model
The internal audit lifecycle – SmartSuite
GRC and resilience
·
Process
The internal audit lifecycle
IT risk assessment and the compliance audit: process and checklist
Six types of control – SmartSuite
GRC and resilience
·
Matrix
Six types of control
Internal controls, the risk-control matrix and control testing, with a SOX 404 walkthrough
Seven elements of a compliance program – SmartSuite
GRC and resilience
·
Model
Seven elements of a compliance program
Regulatory compliance: program, policy, reporting and change management
Inherent, residual, target risk – SmartSuite
GRC and resilience
·
Model
Inherent, residual, target risk
Risk management frameworks: ISO 31000, NIST RMF and COSO ERM compared, and how to pick one
The 5×5 risk matrix – SmartSuite
GRC and resilience
·
Matrix
The 5×5 risk matrix
Risk register and risk assessment matrix: how to build one (with template)
The three lines model – SmartSuite
GRC and resilience
·
Model
The three lines model
What is GRC: governance, risk and compliance explained, with a maturity model
Third-party risk in 12 steps – SmartSuite
GRC and resilience
·
Process
Third-party risk in 12 steps
Third-party risk management: program, vendor risk assessment and questionnaire
NIST CSF 2.0 vs ISO/IEC 27001 – SmartSuite
GRC and resilience
·
Comparison
NIST CSF 2.0 vs ISO/IEC 27001
Risk management frameworks: ISO 31000, NIST RMF and COSO ERM compared, and how to pick one
Four layers of a GRC program – SmartSuite
GRC and resilience
·
Model
Four layers of a GRC program
What is GRC: governance, risk and compliance explained, with a maturity model
From outputs to benefits – SmartSuite
Project and portfolio management
·
Model
From outputs to benefits
Demand against supply – SmartSuite
Project and portfolio management
·
Model
Demand against supply
What goes in the RAID log – SmartSuite
Project and portfolio management
·
Checklist
What goes in the RAID log
The PMO maturity ladder – SmartSuite
Project and portfolio management
·
Model
The PMO maturity ladder
Five gates, one question each – SmartSuite
Project and portfolio management
·
Process
Five gates, one question each
Value against effort – SmartSuite
Project and portfolio management
·
Matrix
Value against effort
One record, five stages – SmartSuite
IT service delivery
·
Process
One record, five stages
The shortest path to fulfilled – SmartSuite
IT service delivery
·
Process
The shortest path to fulfilled
Three lanes for change – SmartSuite
IT service delivery
·
Comparison
Three lanes for change
The risk iceberg – SmartSuite
GRC and resilience
·
Model
The risk iceberg
Risk register and risk assessment matrix: how to build one (with template)

Want one drawn for your framework?

Tell us the standard or the process and we will add it to the queue, or see how the program runs in SmartSuite.

Suggest one
Schedule a demo