Sub-Processor Transfer Assessment Guide 2026
How to run a sub-processor transfer assessment: SCC sub-processor clauses, mapping the chain, onward transfers, questions for processors,…
Read More
Vendor Risk Scoring Guide 2026: Methods and Examples
How to build vendor risk scoring: inherent risk factors, control assessment, residual scores, weights, thresholds, overrides, calibration and…
Read More
ERM Maturity Model Guide 2026: Levels and Assessment
What an ERM maturity model is, typical levels, attributes to assess, how to run an assessment, how to…
Read More
AI Impact Assessment for Recruitment Guide 2026
How to run an AI impact assessment for recruitment: legal context, mapping the hiring funnel, harms to candidates,…
Read More
Privacy by Design Risk Assessment Guide 2026
How to run a privacy by design risk assessment: Article 25 duties, when to assess in the product…
Read More
Legitimate Interests for Website Analytics Guide 2026
When legitimate interests for website analytics can be used: GDPR test, ePrivacy consent rules for cookies, server-side and…
Read More
ISO 27001 Scenario-Based Risk Assessment Guide 2026
How an ISO 27001 scenario-based risk assessment works: what a scenario contains, how to build a library, rate…
Read More
Business Continuity Risk Treatment Guide 2026
How business continuity risk treatment works: options to avoid, reduce, transfer or accept, choosing strategies, costing, ownership, plans…
Read More
Transfer Impact Assessment for Cloud Services Guide 2026
How to run a transfer impact assessment for cloud services: mapping hosting and support access, transfer tool, encryption…
Read More
DPIA for AI Systems Guide 2026
When and how to complete a DPIA for AI: triggers under Article 35, describing models and data, necessity,…
Read More
Gap Assessment Scoping Guide 2026
How to scope a gap assessment: choosing the framework and version, setting organizational and system boundaries, applicability, depth,…
Read More
Application Criticality from a BIA Guide 2026
How to rate application criticality from a business impact analysis: mapping systems to activities, deriving tiers, setting recovery…
Read More