Document creation and editing in NorthGRC

In NorthGRC, you can create documents that contain various document elements of your own choosing.

There are many different elements available, allowing you to tailor the document to your specific needs and the purpose for which the document will be used.

Creating New Documents

You can create new documents from the Library in NorthGRC. Under the Library tab, click + Create, and then select Create a new blank document:

Next, you need to give the document a name and click Create:

The document is now created and will open automatically. You can now start adding new fields to the document.
To do this, hover your mouse over the small blue plus icon at the bottom of the document.
By clicking it, you will see different categories of fields to choose from:

Documents have two modes: View Mode and Edit Mode.
You enter Edit Mode by clicking the settings icon in the top-right corner of one of the fields:

Here, you will be able to edit the individual field. Some fields have the option to enable Allow editing in view mode, which lets the field be edited directly while in view mode.
After enabling this option, remember to click Done editing:

View mode is the default mode when opening a document. By default, documents cannot be edited in this mode — you need to access the settings first, as shown earlier.

Certain document elements are designed to be filled out directly in view mode. We will cover this in the next part of the guide.

 

Add New Content to the Document

In this part of the guide, we will walk through the different types of fields that can be added under each tab when inserting new content into a document.

As mentioned earlier, new fields are added by first clicking the blue plus icon, after which the tabs will appear:

Add Content

The fields under this tab are intended to be filled out by the user who is creating the document — the one editing it and who wants to add content immediately.
Once these fields are added, they can only be edited in Edit Mode:

Add Field

The fields under this tab are intended to be filled out by other individuals — for example, when sending out a vendor assessment or when creating a processing activity.

These fields will always be editable in View Mode:

These fields are intended for use cases such as vendor questionnaires, where an external person needs to complete a form without editing any text fields.

They are also designed for processing activities, where various types of fields need to be completed — such as dropdown menus and date fields.

Add Risk Field

The risk fields are designed to display the results of risk assessments — such as risk result tables, threat catalogs, risk heatmaps, and similar content.

These fields are primarily intended for risk reports and DPIA documents, but they can be freely used in any documents you create.

 

Add ESG Field

ESG fields are intended for ESG reporting, where you can add elements such as Financial Year, Disclosure Requirements, Data Points, and more.

 

Document Settings

The document settings can be accessed by clicking the three dots, then selecting Settings:

Under Settings, you will find the following tabs: Document, Relations, Users, Comments, and Changes:

 

Document

In this tab, you can write a description of the document, change its logo, and enable the option to display the document on the My Overview page:

Relations

Under Relations, the document can be linked to other entities in the system, such as tasks, requirements, controls, assets, and more:

Users

In this tab, you can specify who should be the Owner, Responsible, Consulted, and Informed on the document:

The role you have on the document also affects how much you can edit and view within the document. Read more about roles and user rights here.

 

Comments

Here, the owners and the responsible person for the document can add comments. Existing comments can also be edited or deleted by the user who wrote them:

 

Changes

In this tab, all changes made to the document will be logged. It shows the time the change was made, which user made the change, and details about the change:

 

Once a document has been finalised, it can be versioned and approved. You can read more about this process here.