Vendor Concentration Risk: How to Assess It 2026
How to assess vendor concentration risk: supplier, service, geographic and sub-supplier concentration, with measures, thresholds and mitigation options.
Read More
RoPA International Transfers: Recording Them Right 2026
How to record international transfers in your RoPA under Article 30(1)(e): naming countries, transfer tools, derogations and links…
Read More
RoPA Retention Periods: Recording Erasure Limits 2026
How to record RoPA retention periods under Article 30(1)(f): setting limits, citing legal bases, linking to a retention…
Read More
IMS Context of the Organization: Practical Guide 2026
How to handle the IMS context of the organization: identify internal and external issues, interested parties, scope and…
Read More
HACCP Records: What to Keep and How 2026
Which HACCP records to keep, how to complete and review them, how long to retain them and what…
Read More
IATF 16949 Control Plan: Requirements Guide 2026
What an IATF 16949 control plan must contain: three phases, required controls, reaction plans, review triggers and how…
Read More
NCA ECC Defense Domain: Controls Explained 2026
A guide to the NCA ECC defense domain: its subdomains from asset management to web application security, and…
Read More
Data Governance Metrics That Prove Value 2026
Which data governance metrics to track: adoption, data quality, stewardship, policy compliance and business value, with definitions and…
Read More
IMS Internal Audit: Combined Audit Guide 2026
How to run an IMS internal audit that covers ISO 9001, 14001 and 45001 together: programme, planning, auditor…
Read More
Gap Assessment Scoring and Prioritisation 2026
How to design gap assessment scoring: define compliance ratings, weight by risk and effort, and produce a prioritised…
Read More
Business Impact Analysis Financial Impact Guide 2026
How to estimate the financial impact in a business impact analysis: direct and indirect costs, impact over time,…
Read More
Privacy Review Process for New Features 2026
How to build a privacy review process that assesses new products and features before launch: triggers, intake, depth…
Read More