Articles Archives - Governance Docs

How to define business continuity risk criteria so continuity risks are scored consistently and escalated at the right…

What an ISO 27001 risk register should contain, how to keep it current and what auditors sample.

How to run an ISO 27001 risk review with planned intervals, change triggers and evidence that satisfies auditors.

How to calculate, approve, record and review ISO 27001 residual risk so your treatment plan and audit evidence…

How to identify ISO 27001 threats and vulnerabilities: threat sources, vulnerability types, linking them to assets and controls,…

How to define ISO 27001 risk criteria: risk acceptance criteria and assessment criteria, likelihood and impact scales, approval…

How to run a privacy risk assessment for employee data: mapping HR data, rating risks from monitoring and…

How to run privacy risk monitoring: choosing indicators, setting thresholds, gathering evidence, reporting to leaders and triggering reassessment…

How to use a privacy harms taxonomy: categories of harm to individuals, problematic data actions, how to apply…

How to plan privacy risk treatment: options to reduce, avoid, share or accept risk, writing an actionable plan…

How to approach privacy risk scoring: rating likelihood and impact of harm to individuals, building a matrix, scoring…

How to plan AI impact assessment mitigation: technical, organizational and procedural safeguards, owners and dates, evidence and residual…

Category: Articles