> For the complete documentation index, see [llms.txt](https://handbook.mattermost.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://handbook.mattermost.com/operations/research-and-development/organization/grc.md).

# GRC

The team is responsible for the implementation and monitoring of the companies governance, risk, and compliance program within the company.

## Areas of Ownership

* Third-Party Risk Management
* Security Policies
* Security Risk Register
* Customer Security Questionnaires / RFPs
* Security Compliance
  * SOC 2