GRC policies, risk registers and financial models — editable, deploy-in-a-day, and priced for SMBs, not enterprise budgets.