NCA CSCC: The Essential 2026 Guide to the Critical Systems Cybersecurity Controls
A guide to the NCA Critical Systems Cybersecurity Controls (CSCC-1:2019): who it applies to, how it extends the…
Read More
HACCP Corrective Action: The Essential 2026 Guide to Handling CCP Deviations
What a HACCP corrective action must cover when a critical limit is breached: restoring control, product disposition, root…
Read More
IMS Document Control: The Essential 2026 Guide to One System for Every Standard
How to run IMS document control once for ISO 9001, ISO 14001 and ISO 45001: one register, one…
Read More
Gap Analysis Remediation Plan: The Essential 2026 Guide to Closing Findings
How to turn gap assessment findings into a remediation plan: the ten fields, prioritization by severity and effort,…
Read More
Privacy Risk Register: The Essential 2026 Guide with 12 Fields for Harm to Individuals
How to build a privacy risk register: 12 fields, scoring harm to individuals using GDPR Recital 75, links…
Read More
Supplementary Measures for Data Transfers: The Essential 2026 Guide to the EDPB Six Steps
When a transfer tool is not enough, supplementary measures may be needed. The EDPB six steps, the three…
Read More
Vendor Risk Tiering: The Essential 2026 Guide to 4 Tiers, Criteria and Review Cycles
How to tier vendors by risk: four tiers, weighted scoring criteria, override rules and how each tier drives…
Read More
ROPA Exemption: The Essential 2026 Guide to GDPR Article 30(5) for Small Organizations
Does a small organization need a record of processing activities? The ROPA exemption in GDPR Article 30(5), the…
Read More
Legitimate Interests Right to Object: The Essential 2026 Guide to GDPR Article 21
What happens when someone objects to processing based on legitimate interests: the Article 21 test, the absolute marketing…
Read More
ISO 27001 Risk Assessment Methodology: The Essential 2026 Guide to Choosing an Approach
How to define an ISO 27001 risk assessment methodology: what clause 6.1.2 requires, asset-based versus event-based approaches and…
Read More
Risk Heat Map: The Essential 2026 Guide to Building a 5×5 Matrix Executives Trust
How to build a risk heat map: define 5x5 likelihood and impact scales, set colour bands from risk…
Read More
DPIA Prior Consultation: The Essential 2026 Guide to GDPR Article 36
When a DPIA leaves high residual risk, GDPR Article 36 requires prior consultation. Learn the trigger, the submission…
Read More