September 28, 2026 - Governance Docs

A vendor offboarding checklist by phase: before notice, transition, access removal, data return and deletion, and close out,…

What a SaaS vendor risk assessment should check: assurance scope, tenant isolation, SSO, sub-processors, logs, AI features and…

A third-party risk assessment example for a fictional payments firm: tiering, the vendor profile, due diligence, five High…

Is Cyber Essentials worth it in 2026? Only 3% of UK businesses require it from suppliers, yet the…

Legitimate interests vs consent compared: who decides, what each requires, when ePrivacy rules force consent, the usual basis…

A legitimate interests assessment example for a fictional retailer: the screening, the purpose, necessity and balancing tests, the…

AI impact assessment vs DPIA: how an ISO 42005 AI system impact assessment and a GDPR Article 35…

AI impact assessment vs risk assessment under ISO 42001: what each covers, how they differ, how the impacts…

An AI impact assessment example for a recruitment agency using an AI tool to rank job applicants: screening,…

Transfer risk assessment vs TIA: how the UK TRA and the EU transfer impact assessment differ, where the…

Data Privacy Framework TIA rules: when a DPF certification removes the need for a transfer impact assessment, when…

Day: September 28, 2026