Video: Managing GRC with JupiterOne

George Tang
•
Feb 24th, 2021

George Tang has recorded a series of videos to show how JupiterOne can be used for GRC. In this session, George covers the usage of policies and procedures within J1 for compliance purposes. 

Not only as the foundation of your security program, but also your compliance program, you'll want to confirm you have a standardized set of policies and procedures for your organization. Within the Policies App, JupiterOne provides nearly three dozen standard security policies that are applicable to most organizations. Each of the policies has one or more procedures associated with each policy. 

During the initial J1 account setup, your admin was given access to the Policy Builder UI. Any changes to your company, officers within your company, or various security and technology tooling can be done through this interface. Updating this information will tailor your policies and procedures so that they are specific to your organization. Documentation for policies and procedures can be appended to, deleted or edited directly from within the J1 interface, including revision and tracking functionality. This documentation can be exported from JupiterOne as a pdf or zip file. 

Watch the video to see George step through the interface. If you like what you see, setup your free account and test it out yourself. 

 

 

For more videos in this series, plus a 15 part series on interrogating your AWS environments with JupiterOne, join us at Command Central for full access. 

Other articles

Exposure assessment decides which vulnerabilities are reachable, unprotected and critical.

John Le
•
Nov 3rd, 2026
  • Exposure Assessment
  • CAASM
  • CTEM
  • Exposure Management
Continuous Threat Exposure Management (CTEM) Guide

Continuous threat exposure management (CTEM) is a systematic approach that allows organizations to manage cyber threats as an ongoing program instead of a string.

John Le
•
Oct 28th, 2026

A measured look at PHP2Shell: what is known, how to scope where PHP runs, and how to prioritize updates by exposure.

John Le
•
Oct 21st, 2026
  • Vuln Mgmt
  • UVM
  • CAASM

Tools are silent.
Risks aren't.

See your full security program as one connected picture in a 30-minute demo tailored to your environment.