Getting Started #
- What is ClearGRC?
- ClearGRC is a web-based Governance, Risk, and Compliance (GRC) platform that helps organizations manage policies, risks, controls, compliance assessments, and vendor relationships in one place. It is powered by Clear Infosec, an Ana-Data Consulting Inc. company.
- What is the GRC Executive Dashboard?
- The screen shown immediately after signing in (also reachable via Home in the navigation bar). It summarizes your organization’s maturity score, risk exposure, compliance posture, critical alerts, and upcoming deadlines across all active modules.
- Which browsers are supported?
- ClearGRC is a web-based application optimized for modern browsers. Use Google Chrome, Microsoft Edge, or Mozilla Firefox for the best experience. No client software installation is required.
- How do I reset my password?
- On the sign-in screen, select Forgot password? to start a self-service reset flow managed by your organization’s Azure AD CIAM tenant. If the reset link does not arrive, contact your identity administrator.
Roles and Access #
- Why can I not see the Admin menu?
- The Admin menu is only visible to users with the Admin role. Contact your ClearGRC administrator to request the appropriate role assignment.
- Why can I not create or edit records in a module?
- Your role may only grant Read access to that module. The User role is read-only across all modules. Check your permissions at My Profile → Permissions and contact your administrator if you need additional access.
Assessments #
- How do I create a new assessment?
- Navigate to Compliance → Assessments and select the assessment type you want (e.g., Self Assessment, Readiness Assessment, Gap Assessment, Third Party Assessment). Each type has its own inventory page with a Create Assessment button.
- Why does an error appear when I try to create an assessment?
- Assessment creation requires prerequisite configuration: Response Options and Parameters must be set up in Governance → Company Setup first, and at least one Authority Document and Question Catalog must exist. See Framework Configuration for setup steps.
Risk #
- What does ATVEC stand for?
- Asset-Threat-Vulnerability-Exploit-Control. The ATVEC Mapping step in the Create Risk wizard lets you link a risk to specific records from each of these inventories, creating an auditable chain of evidence for how the risk score was derived.
- Why does the By Risk Level panel show “No risk levels configured”?
- Risk level bands (Low / Medium / High / Critical) must be defined in Governance → Company Setup → Risk Profile → Risk Level before the dashboard can break down risks by level.
