Skip to content
GovernanceInternational

OCEG GRC Capability Model (Red Book 2.1)

What is OCEG GRC Capability Model (Red Book 2.1)?

OCEG's open capability model for governance, risk management and compliance, version 2.1: 136 practices across eight components, from understanding context and organising accountability through assessing risk, preventing, detecting and responding to issues, to monitoring performance and managing information and technology. It comprises 136 controls organised across 8 domains, and applies in International.

Map this against the frameworks you already hold

The compliance knowledge graph holds cross-framework control mappings for hundreds of standards, including the ones you are likely to be certified against already.

Browse the framework graph →

Where OCEG GRC Capability Model (Red Book 2.1) overlaps with the standards you already hold

What OCEG GRC Capability Model (Red Book 2.1) means in your sector

What OCEG GRC Capability Model (Red Book 2.1) means for your job

Questions people ask about OCEG GRC Capability Model (Red Book 2.1)

What is OCEG GRC Capability Model (Red Book 2.1)?
OCEG's open capability model for governance, risk management and compliance, version 2.1: 136 practices across eight components, from understanding context and organising accountability through assessing risk, preventing, detecting and responding to issues, to monitoring performance and managing information and technology.
How many controls does OCEG GRC Capability Model (Red Book 2.1) have?
OCEG GRC Capability Model (Red Book 2.1) contains 136 controls organized across 8 domains.
Where does OCEG GRC Capability Model (Red Book 2.1) apply?
OCEG GRC Capability Model (Red Book 2.1) applies in International. Organizations operating in or serving customers in this jurisdiction should check whether its requirements reach them.
Which version of OCEG GRC Capability Model (Red Book 2.1) is covered here?
This page covers GRC Capability Model (Red Book) version 2.1.

Query OCEG GRC Capability Model (Red Book 2.1) programmatically

OCEG GRC Capability Model (Red Book 2.1), its 136 controls and every mapping into other standards are available over a REST endpoint and an MCP server, so an agent can read them directly. The free tier is 10 calls a day and needs no signup.

OCEG GRC Capability Model (Red Book 2.1) API reference and MCP config →

How ready are you for OCEG GRC Capability Model (Red Book 2.1)?

Answer 25 questions and get a professional readiness report with gap analysis, maturity scores, and prioritised action items. Results in 5 minutes.

Written and maintained by Gerard Blokdyk, The Art of Service.Last updated .