Video: How to Map GRC Policies and Procedures

by

George Tang continues his exploration of JupiterOne GRC capabilities with this video on how to map policies and procedures to specific controls or requirements within compliance frameworks. 

For compliance purposes, it is frequently a requirement for policy or procedure documents to be mapped to specific controls and requirements. George shows how to navigate the UI in JupiterOne to investigate previously mapped policies, and how to see the attributes and relationships of those existing documents so they can be updated for a specific control.

 

 

J1 Control Central contains a video gallery with dozens of examples and links to other resources to help you take advantage of what JupiterOne offers.  

Other Resources:

George Tang
George Tang

I possess extensive senior information security leadership experience from serving hundreds of clients by assessing, designing, and implementing security + enterprise risk management programs. I assess + advise companies (from Fortune 5 to pre-seed startups) on their businesses', products', and environments’ security architectures. Additionally, I own a rare blend of technical subject matter expertise within the cloud technology space across the major hyperscale cloud service providers, i.e., AWS, Azure, GCP, specifically within the infrastructure security domain. Background: information security, cloud security, cyber security, governance/risk/compliance, assessments + advisory, risk management/risk assessment.

Keep Reading

CNAPP Meets the Graph: Why Cloud-Native Security Needs Asset Context | JupiterOne
February 18, 2026
Blog
CNAPP Meets the Graph: Why Cloud-Native Security Needs Asset Context

JupiterOne's new integration with Upwind brings runtime CNAPP data into the asset graph

Bridge the Gap: How the JupiterOne Collector Brings On-Prem Visibility Into Your Security Graph | JupiterOne
February 11, 2026
Blog
Bridge the Gap: How the JupiterOne Collector Brings On-Prem Visibility Into Your Security Graph

Most security teams can see their cloud but not what's behind the firewall. Learn how the JupiterOne Collector bridges on-prem visibility into your security graph.

CAASM Vendor Change Risk: Why Security Teams Should Plan Ahead
January 22, 2026
Blog
Why Smart Security Teams Plan for CAASM Vendor Change

As acquisition activity continues across the security market, teams are reassessing their CAASM foundations- & future-proofing their visibility strategy.

15 Mar 2022
Blog
One line headline, one line headline

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud eiut.

15 Mar 2022
Blog
One line headline, one line headline

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud eiut.

15 Mar 2022
Blog
One line headline, one line headline

Lorem ipsum dolor sit amet, consectetur adipiscing elit, sed do eiusmod tempor incididunt ut labore et dolore magna aliqua. Ut enim ad minim veniam, quis nostrud eiut.