As I’m preparing for the CGRC certification, I’ve compiled a list of NIST Special Publications focused on Governance, Risk, and Compliance (GRC). The original raw list can be found on the ISC2 Common Body of Knowledge . This list is my laziness (maybe even efficiency) attempting to save time in searching for each publication while I’m on the go or need a quick link in a place I know I’ll have it, my own website.