ISO 27001 Risk Owner: Role and Duties 2026
What an ISO 27001 risk owner is, who should hold the role, and how owners approve treatment plans…
Read More
Single Point of Failure Analysis for Continuity 2026
How to run single point of failure analysis for business continuity: map dependencies, find the weak links, rate…
Read More
Risk Assessment Workshop: How to Run One 2026
A step-by-step guide to running a risk assessment workshop: who to invite, how to prepare, how to facilitate…
Read More
AI Risk Assessment Scoring: A Practical Method 2026
A practical approach to AI risk assessment scoring: define scales for likelihood, impact and detectability, calibrate them and…
Read More
DPIA Residual Risk: Rating Risk After Controls 2026
How to assess DPIA residual risk: rate risk before and after measures, decide who accepts it and know…
Read More
Transfer Impact Assessment: Third Country Laws 2026
How to assess a destination country's laws and practice in a transfer impact assessment, using the EDPB roadmap…
Read More
AI Impact Assessment Screening: Who Needs One 2026
How AI impact assessment screening works: the questions to ask, how to set thresholds, and how to record…
Read More
Legitimate Interests Balancing Test Explained 2026
How to run the legitimate interests balancing test: data sensitivity, reasonable expectations, likely impact and safeguards, with a…
Read More
Third Party Risk Assessment Findings and Remediation 2026
How to record, rate and close third party risk assessment findings so vendor assessments lead to real remediation,…
Read More
RoPA Review Process: Keep Your Records Current 2026
A practical RoPA review process for Article 30 records: what to check, who owns it, how often to…
Read More
Security Awareness Training Metrics That Show Real Change 2026
Which security awareness training metrics prove behavior change: reporting rates, phishing outcomes, incident data and program health.
Read More
PCI DSS Targeted Risk Analysis: 12.3.1 and 12.3.2 Guide 2026
How to write a PCI DSS targeted risk analysis for flexible-frequency requirements and the customized approach, with content…
Read More