GRC-COCKPIT is web-based software for organizing governance, risk, and compliance processes. Its Basic plan covers core risk and compliance processes, risk assessments, measures tracking, central master data, and a Compliance HealthCheck. The product supports policy management, a risk register, audit management, and evidence collection. Advanced adds requirements and identifications, a risk matrix with linked views, compliance topic fields, and templates, archive, and export. Professional adds integrated whistleblowing and event management, an information security module, risk scenarios and quantitative risk assessment, and business continuity management. Supported frameworks include ISO 27001, IT-Grundschutz, ISO 31000, ISO 37301, ISO 27701, ISO 5001, ISO 9001, ISO 14001, ISO 45001, and ISO 26000. GRC-COCKPIT is paid software with pricing on request and a 30-day trial. There is no free plan. It runs on the web, and its headquarters are in Hamburg, Germany.
Who it is for
GRC-COCKPIT suits organizations managing governance, risk, compliance, policies, audits, and evidence in a web application. Its higher tier is aimed at teams needing whistleblowing, information security, quantitative risk, or continuity functions.
What is good
- Supports policy and risk registers
- Includes audit and evidence management
- Covers many listed ISO frameworks
- 30-day trial available
- Professional adds whistleblowing and continuity
What to know first
- No free plan
- Pricing is available on request
- Web platform only
Verdict
GRC-COCKPIT offers tiered governance, risk, and compliance capabilities, from core assessments to information security and business continuity. The 30-day trial helps evaluation, while pricing requires a request and there is no free plan.
GRC-COCKPIT plans and pricing
All plansCompared on governance, risk and compliance software
- Free plan
- No
- Policy management
- Yes
- Risk register
- Yes
- Audit management
- Yes
- Evidence collection
- Yes
- Supported frameworks
- ISO 27001, IT-Grundschutz, ISO 31000, ISO 37301, ISO 27701, ISO 5001, ISO 9001, ISO 14001, ISO 45001, ISO 26000


