icon picker
Welcome to the Compliance Dungeon

🧭 Purpose of the Dungeon

The Compliance Dungeon is a gamified governance, risk, and compliance (GRC) tracker designed to transform your organization’s security and compliance tasks into an engaging, fantasy-themed adventure.
Whether you're new to compliance or an experienced security professional looking for a fresh way to drive accountability and visibility, the Dungeon helps you:
Break complex GRC tasks into manageable quests
Track progress across critical control areas
Align with industry-standard frameworks
Make security culture fun and approachable (yes, really)
Instead of dry spreadsheets and endless checklists, you’ll explore dungeons, face boss fights, and earn XP while building a truly resilient program.

🛡️ What Frameworks Are Covered?

This version of the Compliance Dungeon focuses on four foundational frameworks:
SOC 2
ISO 27001
NIST Cybersecurity Framework (NIST CSF)
CIS Critical Security Controls (CIS)
We’ve chosen these to cover a broad range of security and compliance needs—from startups to mid-size organizations, from trust principles to risk mitigation.
👉 For a full breakdown of these frameworks, why they were selected, and links to official documentation, visit the subpage.
Each quest is tagged with relevant frameworks to help you meet your audit goals while keeping your efforts aligned and organized.

💼 Assigned Classes – Navigate by Role

Already know your role on the team? Head over to the to see all quests relevant to you.
Whether you're a 🧙 Policy Mage, a 🛡️ Risk Barbarian, or a 📜 Audit Bard, you’ll find filtered views of your quests, starter recommendations, and downloadable tools to help you slay your compliance beasts faster.
👉 🧩 Learn what each class covers, see matching control areas, and find the next quest in your lane.

🧙‍♀️ How to Use the Dungeon

The Dungeon is made up of 5 dungeon levels, each representing a phase of your compliance journey. Within each level are quests—individual tasks tied to control areas like policies, asset inventory, access control, risk, and more.
For each quest, you’ll track:
💼 Class: Your role type (Policy Mage, IAM Ranger, etc.)
🧭 Control Area: What part of compliance this addresses
💥 XP Value: How much it contributes to your journey
🎯 Status: Whether the quest is not started, in progress, or complete
Each dungeon level has its own:
Short fantasy story to immerse you in the world
Professional explanation of its GRC focus
Progress bar powered by XP
Linked quest table filtered to that level
You’ll gain XP by completing quests and watch your progress unfold like a true adventurer.

🚪 Getting Started Guide

“Every hero starts somewhere. Usually with a scroll and a confused expression.”
Start here:

📍 Step 1 – Visit the Courtyard of Curiosity

This is Level 0 and should be your first stop. Focus on quests like:
Complete Framework Selection
Assign Stakeholders
Run a GRC Awareness Session
Survey Existing Documentation

🧩 Step 2 – Review the Dungeon Map

Use the interactive Dungeon Map page to jump to different levels. Start with Level 1 – Foundational Policies once Level 0 is at least 60% complete.

📋 Step 3 – Add Your First Custom Quest

Click the “📝 Add Custom Quest” button on the main Quest Log to begin tailoring the Dungeon to your org’s unique needs.

🧠 Step 4 – Track Your XP

Each completed quest earns you XP and fills the progress bars across the levels. Progress bars are visual and satisfying. Use them to motivate your team.

🏆 You Win When…

You complete all core quests across all levels
Your documentation is audit-ready and mapped to frameworks
You’ve created a repeatable, enjoyable compliance process
And most importantly—you’ll win when compliance no longer feels like a burden, but like a meaningful part of how your organization protects, thrives, and grows.

🛠️ Patch Notes

Track the evolution of the Compliance Dungeon as new quests, classes, and features are added.
🗓️ Date
🔖 Update Title
📜 Description
2025-08-03
🌟 Initial Build Launched
Core structure complete with 6 dungeon levels, XP tracking, and class-based quests.
There are no rows in this table

Want to print your doc?
This is not the way.
Try clicking the ⋯ next to your doc name or using a keyboard shortcut (
CtrlP
) instead.