Mediand AI
Free GRC and IR Resources
Every resource here is free to use for GRC and Incident Response students. Mediand AI study templates and playbooks are open for anyone to use, adapt and share; external frameworks (NIST, BSI, ENISA, CISA, EU law) are official, publicly available publications, linked to their source.
Study templates & playbooks
Dual-track control mapping workbook
Synthetic incident response playbook
Evidence & framework study guide
NIST
NIST Cybersecurity Framework (CSF) 2.0
Govern, Identify, Protect, Detect, Respond, Recover.
Official referenceNIST
NIST SP 800-61r3 · Incident Response Recommendations
How incident response fits into CSF 2.0 risk management.
Official referenceNIST
NIST SP 800-53r5 · Security and Privacy Controls
Control catalogue (AC, AU, IR, SI, CM …).
Official referenceNIST
NIST SP 800-63B · Digital Identity Guidelines
Authentication and re-authentication.
Official referenceBSI
BSI IT-Grundschutz-Kompendium
German baseline modules, e.g. DER.2.1 incident handling, ORP.4 identity.
Official referenceBSI
BSI C5 · Cloud Computing Compliance Criteria
Cloud security criteria for auditors.
Official referenceENISA
ENISA Good Practices · Phishing & Awareness
EU awareness and education resources.
Official referenceCRA
EU Cyber Resilience Act (Regulation (EU) 2024/2847)
Official EU law text: security requirements and vulnerability reporting for products.
Official referenceDORA
Digital Operational Resilience Act (Regulation (EU) 2022/2554)
Official EU law text: ICT risk management and incident reporting for finance.
Official referenceISO
ISO/IEC 27001:2022 · Public overview
Free public summary from ISO. The full standard text is paid and not reproduced.
Official reference