GRC Compliance Automation Toolkit

A Python-based toolkit for automating Governance, Risk, and Compliance (GRC) workflows across healthcare and security frameworks.

This project automates:

• Control mapping across NIST, HIPAA, and HITRUST
• Regulatory detection (e.g., HIPAA 164.x references)
• Risk scoring and gap analysis
• HITRUST 06.c access control relevance analysis
• Interactive dashboard reporting

Features

• Detects HIPAA references (e.g., 164.x)
• Maps controls across frameworks
• Scores controls and assigns risk levels
• Exports processed audit artifacts
• Interactive Streamlit dashboard for compliance analysis
• Evaluates HITRUST 06.c relevance
• Streamlit dashboard for interactive analysis

Installation

git clone https://github.com/GeoJordan/grc-python-toolkit.git
cd grc-python-toolkit
pip install -r requirements.txt

Project Structure

grc-python-toolkit/
├── app.py
├── data_loader.py
├── pipeline.py
├── requirements.txt
├── README.md
├── .gitignore
└── images/

Business Value

Manual control mapping is often performed in spreadsheets, making audits slow and inconsistent.

This toolkit helps organizations:

• Improve audit readiness
• Reduce manual compliance effort
• Standardize control analysis
• Support healthcare security assessments

How to Run

pip install -r requirements.txt
streamlit run app.py

Dashboard Preview

Live Demo

Try the app here: https://grc-python-toolkit-munwvhugqwteynxkdxrcs9.streamlit.app/

Built by George Jordan using Python + GRC automation.