MY WORKSPACE

My Tasks

Manage assigned work, approvals and upcoming deadlines in one place.

Assigned to me

0

Due this week

0

Overdue

0

All tasks

12

My responsibilities Records where you are the responsible person

0

No records assigned to you

Records where you are marked as responsible will appear here.

12 records

TASK	RELATED MODULE	OWNER	PRIORITY	TARGET DATE	STATUS

TECHNICAL CONTROL

Agent Management

Monitor status and heartbeat of installed endpoint compliance agents.

HOST NAME	IP ADDRESS	OS PLATFORM	LAST HEARTBEAT	STATUS
srv-prod-db-01	10.0.12.44	Ubuntu 22.04 LTS	2 mins ago	Online
srv-app-api-02	10.0.12.98	Amazon Linux 2023	1 min ago	Online

TECHNICAL CONTROL

Shadow IT Management

Track unauthorized cloud services and unapproved SaaS usage across network logs.

Discovered SaaS Apps

28

Unapproved Services

6

High Risk Services

2

TECHNICAL CONTROL

Configuration Management

CIS Benchmarks and AWS Cloud Hardening checks.

AWS S3 Bucket Public Access Block

Ensure all buckets have block public access enabled

Passed

KMS Key Rotation Enabled

Ensure customer managed keys are rotated yearly

Passed

TECHNICAL CONTROL

Domain Risk Monitoring

DNS, WHOIS, SSL expiry and typosquatting domain alerts.

demo-teknoloji.com

Primary Domain • SSL Certificate valid until Dec 2026

Secure

TECHNICAL CONTROL

External Vulnerability Scanning

Dispatch isolated ZAP, Nuclei, or OpenVAS containers on AWS ECS Fargate Spot.

Select Scanning Engine

Target URL or Host IP

TECHNICAL CONTROL

Vulnerability Tracking

CVSS scores, remediation deadlines and owner assignments for scanned vulnerabilities.

VULNERABILITY	CVSS SCORE	SEVERITY	STATUS
CVE-2024-21626 (runc Container Breakout)	8.6	High	In Progress

GOVERNANCE

Management Systems

Active Information Security and Quality Frameworks.

ISO/IEC 27001:2022

Information Security Management System

92% Compliant

SOC 2 Type II

Trust Services Criteria (Security & Confidentiality)

84% Compliant

GOVERNANCE

Standards & Regulations

Legal regulations, KVKK, GDPR and industry requirements.

KVKK (6698 Sayılı Kişisel Verilerin Korunması Kanunu)

VERBİS kayıt yükümlülükleri ve veri işleme politikaları

Active

GOVERNANCE

Documents & Evidence Vault

Encrypted document store backed by AWS KMS Customer Managed Keys (CMK).

Evidence Title

Payload / Sensitive Content

GOVERNANCE

Risk Management

Risk register, impact/likelihood matrix and treatment plans.

RISK TITLE	CATEGORY	LIKELIHOOD x IMPACT	SCORE
Unencrypted Backups in S3	Data Protection	4 x 4	16 (High)

GRCex User Guide & Documentation

Platform architecture, multi-tenant isolation, KMS encryption and scanning workflows.

Architecture Overview

GRCex utilizes AWS Serverless Architecture (Lambda, CloudFront, RDS PostgreSQL with Row-Level Security, AWS KMS CMK and ECS Fargate Spot) for high-scale multi-tenant isolation and security compliance.