Portfolio Index — Badr Karim

Cybersecurity GRC Intern | Security Assurance | Risk-Based Controls | Privacy-Driven TPRM

Fastest way to review my US-grade GRC and vendor risk work.

---

Start Here (60 seconds)

1. TPRM — US Privacy + Cloud Data Protection https://github.com/badrnkarim/TPRM-US-Privacy-Cloud
   Open: 00_Start-Here/ → 06_Evidence/EV-INDEX.csv → 13_Business-Decision-Pack/ → 10_Examples/

2. SDG GRC Portfolio — Multi-Framework Assurance https://github.com/badrnkarim/grc-portfolio-sdg

3. Secure Database Gateway (SDG) Showcase https://github.com/badrnkarim/sdg-secure-db-gateway-showcase

4. ISO/IEC 27001 ISMS Portfolio — Audit-Grade Documentation Pack https://github.com/badrnkarim/ISO27001-ISMS-GRC-Portfolio

---

What I Build

• Risk-based control decisions supported by traceable documentation
• Privacy-driven vendor governance: purpose limitation, minimization, retention/deletion, DSAR readiness
• Evidence discipline: EV indexing, validation notes, remediation closure
• Decision-maker artifacts: executive briefs, approval authority, committee-ready summaries
• Operational proof and robust evidence of implemented security controls (RBAC, SQL safety, Integrity checks)

Connect

LinkedIn: https://www.linkedin.com/in/badrkarim/