What landed last week
The new regulation, guidance or judgment that matters for European GRC. Already filtered. EUR-Lex link included.
Recent example
Example: "EBA RTS on subcontracting under DORA. What to update in your ICT register before April."
The GRC Brief
Five links. One short take. Monday at 8am.
The newsletter we wish we had when we started in GRC. Written by active CISOs and GRC practitioners, read in three minutes, designed to be forwarded to your team before the standup.
Zero AI summaries. Zero filler. One thing worth knowing.
Monday
every week, 8am CET
3 min
read, top to bottom
1-click
unsubscribe, no questions
0
AI-summarised filler
Free · weekly · one-click off
Subscribe to The GRC Brief.
One email a week, usually Monday at 8am Central European Time. We record the consent submitted with this form. Mailchimp processes delivery; unsubscribe from any issue.
- 3-minute read, written by practitioners
- Real audit findings, not press releases
- Forwardable to your team without an apology
Latest issue
Edition 13 · 31 August 2026
13
Edition 13
100 tech giants warn about rogue AI (and sell the cure), a researcher owns his desk with Claude, 1,200 unofficial AI apps per company, quantum is already harvesting your crypto, and the vendor trap.
100 tech giants warn about rogue AI (and sell the cure), a researcher owns his desk with Claude, 1,200 unofficial AI apps per company, quantum is already harvesting your crypto, and the vendor trap.
Read full issueWhat lands in your inbox
Four sections. Always.
Same structure every week. No surprise format, no padding to hit a word count. If you skim Mondays, you know exactly where each thing lives.
The audit finding worth remembering
One real-world finding from a recent engagement, anonymised, with the fix. The kind of thing your CISO would tell you over coffee.
Recent example
Example: "Stage 2 NC on access reviews. Three line items in your evidence pack that close it cleanly."
A template you can lift today
A risk-register row, a policy paragraph, a control mapping. Built for paste-and-adapt, not for a slideshow.
Recent example
Example: "DPIA template: the three questions that always trigger CNIL follow-up."
A short take
Sixty to ninety words on one thing we are seeing in the field. Written by Christophe or a guest practitioner. No AI summary, no padding.
Recent example
Example: "NIS 2 transposition in France is now law. The board question you will get next month is..."
The newsletter is the one place we get to write the way we actually talk in the audit room. No SEO padding, no thought-leadership theatre. Three minutes of usefulness, every Monday.
Christophe Mazzola · Founder & lead editor
Live · every Monday
The GRC Brief is live.
A new edition lands in your inbox every Monday at 8am Central European Time. Browse the full archive of past editions, or subscribe and the next one is in your inbox next Monday.
Quick answers
Before you hand over your email.
01How often, exactly?
Once a week, every Monday at 8am Central European Time. We skip the last two weeks of December and the first week of August. No mid-week "special editions", no announcements bombs, no PR fluff.
02Who writes it?
Christophe Mazzola and the Cyber Academy trainer pool. Every link, every take, every template comes from someone running GRC for real, not from a marketing intern. Guest authors are named explicitly when they contribute.
03What does it cost?
Free. We do not run paid tiers, do not sell the audience, and do not share emails with sponsors. The newsletter is the asset; the cohorts are the business.
04How do I unsubscribe?
One click in the footer of any issue. We do not run "are you sure?" guilt screens. If you come back later, there is no re-subscription friction either.
05Where is the archive?
Yes. The full archive lives at /resources/newsletter, with every published edition. New issues are added automatically as they ship.
06Will my email be used for anything else?
We use your email for the newsletter and for training updates only when you select that separate option. We record when and how you consented; Mailchimp processes delivery. Unsubscribe at any time.
See you on Monday at 8am
Three minutes of GRC, every week.
Free, one-click unsubscribe, no AI fluff. The newsletter that practitioners actually forward to their team.
Or browse theGRC Brief archive for past editions.