# 30-day setup checklist

> A week-by-week plan to take a new cSquare GRC workspace from sign-up to audit-ready foundations.

Source: https://docs.csquaregrc.com/getting-started/setup-checklist


Harden the foundation first: profile, scope, owners, connectors. Everything after that gets faster. Tick these off in order.

## Week 1: Foundation

- [ ] Complete the organization profile in **Settings > Organization**.
- [ ] Create your first program ([guide](/getting-started/first-program)).
- [ ] Run the Control Applicability Wizard and justify every not-applicable control.
- [ ] Invite admins and a backup owner ([guide](/getting-started/invite-your-team)).

```text
I am in week 1 of setting up cSquare GRC. Check what I have done so far against this list: organization profile, first program, applicability decisions, admins invited. Tell me what is left.
```

## Week 2: Connect systems

- [ ] Connect your identity provider.
- [ ] Connect your cloud account(s).
- [ ] Connect your code host and ticketing tool.
- [ ] Confirm evidence is arriving under **Evidence**.

See [Connectors](/connectors) for each setup guide.

```text
Which connectors should I set up this week to cover the most controls in my program? Give me the setup order and what evidence each will collect.
```

## Week 3: Policies and owners

- [ ] Import existing policies or generate drafts ([Policies](/guides/policies)).
- [ ] Route policies for approval.
- [ ] Assign an owner to every in-scope control.
- [ ] Invite control owners as members.

```text
Compare my approved policies with the controls in my program. Which controls have no supporting policy, and which policies should I write first?
```

## Week 4: Risk, vendors and review

- [ ] Build your risk register ([Risks](/guides/risks)).
- [ ] Add critical vendors and send assessments ([Vendors](/guides/vendors)).
- [ ] Review the readiness score and agree a remediation plan.
- [ ] Set milestones up to audit fieldwork.

```text
Give me a readiness summary for my program suitable for an executive update: score, top five risks, top five gaps, and what we will close in the next 30 days.
```