GRC Capstone: Building a Security Program

This capstone applies governance, risk, compliance, policy, assurance, resilience, third-party risk, and executive communication to one fictional B2B software company. The goal is not to produce the biggest register or the longest policy. It is to create a traceable chain from business context and obligations to risk decisions, controls, evidence, accountable action, and leadership oversight.