Terms of Use & Disclaimer

This page explains the rules for using this website, including the GRC Practice Lab. By accessing or using the site, you agree to these terms.

1. Who This Is For

This site is intended for individuals learning cybersecurity, governance, risk, compliance (GRC), and related frameworks. It provides simulated workflows (assets, risks, controls, vendors, incidents, SoA, reports) .

2. No Professional Advice

Content and outputs on this site are provided for general educational information only. Nothing on this site constitutes legal advice, compliance advice, audit advice, certification guidance, financial advice, medical advice, or professional consulting. If you need professional help, consult a qualified professional in your jurisdiction.

3. Framework References and Paraphrased Content

The site may reference well-known standards and frameworks (for example ISO/IEC 27001, NIST CSF, PCI DSS, HIPAA, SOC 2, CIS, GDPR, CMMC, COBIT). Any control statements, mappings, or descriptions presented in this site may be summarized, paraphrased, or simplified for training purposes. This site is not affiliated with, endorsed by, or sponsored by any standards body or framework owner.

4. User Responsibilities and Acceptable Use

• Do not enter sensitive data (real personal data, payment card data, protected health information, secrets, passwords, API keys, customer data, proprietary incident details, etc.).
• Do not use the site for illegal activities, harassment, malware, or unauthorized access attempts.
• You are responsible for ensuring your use of the site complies with local laws, employer policies, and contractual obligations.
• If you use the site for portfolio/demo purposes, clearly communicate that it is a simulation.

5. Data Storage and Privacy (localStorage)

The tools on this site may store your entries (e.g., assessment answers, risks, controls) locally in your browser using technologies such as localStorage. This means:

• Data is generally stored on your device/browser profile, not on our servers.
• Clearing your browser storage, using private browsing, or switching devices may remove or hide your saved data.
• If you use a shared device, other users of that device/browser profile may be able to access your stored data.

You are responsible for managing your local data and protecting your device. If the site includes export features (JSON/PDF), you are responsible for how exported files are stored and shared.

6. Intellectual Property and Trademarks

All trademarks, product names, and logos mentioned are the property of their respective owners. References are for educational identification purposes only. Nothing here grants you a license to use any third-party trademark.

7. Availability, Changes, and Security

We may change, suspend, or discontinue any part of the site at any time. While we aim for a secure and reliable experience, no website is guaranteed to be error-free or fully secure. Use the site at your own risk.

8. Disclaimer of Warranties

To the maximum extent permitted by applicable law, this site is provided "as is" and "as available," without warranties of any kind—express or implied—including (without limitation) implied warranties of merchantability, fitness for a particular purpose, accuracy, completeness, or non-infringement.

9. Limitation of Liability

To the maximum extent permitted by applicable law, we will not be liable for any indirect, incidental, special, consequential, or punitive damages, or any loss of profits, data, goodwill, or business interruption, arising out of or related to your use of (or inability to use) the site—even if we have been advised of the possibility of such damages.

Some jurisdictions do not allow certain limitations of liability. In those jurisdictions, liability will be limited to the minimum extent allowed by law.

10. Indemnity

You agree to indemnify and hold harmless the site owner/operator from and against claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of your misuse of the site, violation of these terms, or violation of any law or third-party rights.

11. Third-Party Services and Links

The site may include third-party libraries (e.g., CSS/JS/CDN resources) and may link to third-party websites. We do not control those services and are not responsible for their content, policies, or availability. Your use of third-party services is subject to their terms and privacy policies.

12. International Use

This site may be accessed globally. Laws vary by country/state. You are responsible for determining whether your use is permitted under the laws and regulations applicable to you. Where required, these terms apply to the maximum extent permitted by applicable law.

13. Governing Law

Unless otherwise required by your local consumer protection laws, these terms will be governed by the laws of the site owner's place of operation, without regard to conflict of laws rules. If a court finds any provision unenforceable, the remaining provisions will remain in effect.

14. Contact

If you have questions about these terms, you can contact the site owner via the contact methods listed on the Home/Portfolio page.

Practical Safety Checklist

• Use fictional/demo company names and sample data only.
• Don't paste internal client documents, policies, logs, tickets, or incident details.
• Review and validate any exported report with a qualified professional before using it in real work.
• If you are in a regulated environment, follow your organization's policies and legal requirements.