30-day setup checklist
A week-by-week plan to take a new cSquare GRC workspace from sign-up to audit-ready foundations.
Updated 2026-10-21
Harden the foundation first: profile, scope, owners, connectors. Everything after that gets faster. Tick these off in order.
Week 1: Foundation
- Complete the organization profile in Settings > Organization.
- Create your first program (guide).
- Run the Control Applicability Wizard and justify every not-applicable control.
- Invite admins and a backup owner (guide).
I am in week 1 of setting up cSquare GRC. Check what I have done so far against this list: organization profile, first program, applicability decisions, admins invited. Tell me what is left.
Week 2: Connect systems
- Connect your identity provider.
- Connect your cloud account(s).
- Connect your code host and ticketing tool.
- Confirm evidence is arriving under Evidence.
See Connectors for each setup guide.
Which connectors should I set up this week to cover the most controls in my program? Give me the setup order and what evidence each will collect.
Week 3: Policies and owners
- Import existing policies or generate drafts (Policies).
- Route policies for approval.
- Assign an owner to every in-scope control.
- Invite control owners as members.
Compare my approved policies with the controls in my program. Which controls have no supporting policy, and which policies should I write first?
Week 4: Risk, vendors and review
- Build your risk register (Risks).
- Add critical vendors and send assessments (Vendors).
- Review the readiness score and agree a remediation plan.
- Set milestones up to audit fieldwork.
Give me a readiness summary for my program suitable for an executive update: score, top five risks, top five gaps, and what we will close in the next 30 days.