HIPAA Required Policies & Documentation Checklist
HIPAA requires documented policies and procedures. Here are the essential HIPAA policies, the records you must keep, and…
Read More
SOC 2 Cost & Timeline: What to Expect
What does SOC 2 cost and how long does it take? Here are the main cost factors, the…
Read More
How to Prepare for a SOC 2 Audit
The SOC 2 audit tests your controls independently. Here is what it involves, the process, how to prepare,…
Read More
SOC 2 Policies & Documentation Checklist
SOC 2 documentation turns security practice into an auditable report. Here are the essential policies, the evidence you…
Read More
SOC 2 Type 1 vs Type 2: What’s the Difference?
SOC 2 Type 1 vs Type 2: one tests control design at a point in time, the other…
Read More
SOC 2 Trust Services Criteria Explained
The SOC 2 Trust Services Criteria define what your auditor evaluates. Here are all five - security, availability,…
Read More
How to Run a GDPR Gap Analysis
A GDPR gap analysis shows exactly where you stand against the regulation. Here is a step-by-step method to…
Read More
GDPR Data Subject Rights Explained
The GDPR data subject rights put individuals in control of their data. Here are all eight rights, how…
Read More
GDPR Data Processing Agreement (DPA): A Complete Guide
A GDPR DPA is required whenever a third party processes personal data for you. Here is what a…
Read More
The 7 GDPR Principles Explained
The seven GDPR principles are the foundation of the whole regulation. Here is what each one requires in…
Read More
GDPR Documentation Requirements Checklist
The accountability principle makes documentation central to GDPR. Here is a complete checklist of the records you need…
Read More
ISO 27001 Policy Templates & Examples
The right ISO 27001 policy templates turn documentation from daunting to achievable. Here are the policies you need…
Read More