The Reading Room.
Practitioner-grade GRC writing · guides and rubrics · no whitepaper bloat
Former CCOs and risk leads wrote every one of these compliance resources for working teams like yours. So you won’t find vendor explainers or “what is UDAAP” tutorials here. You get the work itself, with the rubrics attached.
- 03
- RESOURCES TO START WITH
- Practitioner-built
- WRITTEN BY FORMER CCOS AND RISK LEADS
- Free
- TAKE THEM, ADAPT THEM, USE THEM
The CFPB Exam
Readiness Assessment
A practitioner self-assessment built on how examiners actually grade a CFPB exam. Use it to score your program across the domains examiners weight, before the OCC, CFPB, or your sponsor bank does.
Assessment
The three we’d start with.
Three practitioner resources you can use today. More are on the way, but we hand these three to every new customer first.
-
CFPB Exam Readiness Assessment
A self-assessment across the domains examiners weight. Find your gaps before the exam letter arrives.
Read the assessment -
Vendor Due Diligence Questionnaires
The expert-built, industry-standard DDQ templates we use to score third parties. Adapt them for your own vendor program.
Read the templates -
Starter Regulatory Requirements
The regulations and top requirements we pre-load to stand up a program on day one. A starting point you map \
Read the starter set
to your products and lifecycle.
Compliance · Risk · Fintech · AI in GRC.
Working notes from the practitioner team. Every post we publish, newest first.
-
What GRC Platforms Help Credit Unions Meet NCUA Third-Party Risk Management Expectations in 2026?
Compare top GRC platforms helping credit unions meet NCUA third-party risk management expectations in 2026. Find your exam-ready solution today.
Read the post -
Reading a CFPB Exam Letter: What Examiners Weight First
Former CCOs on how to read the first-day letter, which request-list items signal exam focus, and how to triage the sixty days before fieldwork.
Read the post -
How Agents Draft a Risk Register (and Why a Human Signs Off)
A walk through the first fifteen minutes of a Guardial onboarding: what the agents propose, what they cite, and where your practitioners take over.
Read the post -
The Complete Billing-Defect Remediation Checklist: How Mortgage Servicers Can Build Examiner-Ready Records for CFPB and GSE Audits (with AI-Drafted Audit Files)
The billing-defect patterns we see most in loan-servicing audits, and the remediation steps examiners expect to find documented before they ask.
Read the post