Maximum Tolerable Period of Disruption Guide 2026
What the maximum tolerable period of disruption is, how it differs from RTO and RPO, how to set…
Read More
ISO 27001 Risk Acceptance Criteria Guide 2026
How ISO 27001 risk acceptance works: criteria under clause 6.1.2, owner approval under 6.1.3, thresholds, exceptions, records, review…
Read More
Gap Assessment Prioritization Guide 2026
How to prioritize gaps after an assessment: risk, regulatory exposure, effort, dependencies, quick wins, scoring, sequencing into waves…
Read More
Privacy Risk Appetite Guide 2026: Setting Limits
How to set privacy risk appetite: appetite versus tolerance, choosing categories, writing statements, linking to scoring and approvals,…
Read More
Pandemic Risk Assessment Guide 2026 for Business Continuity
How to run a pandemic risk assessment for business continuity: scenarios, absence assumptions, critical roles, suppliers, remote work,…
Read More
Third-Party AI Impact Assessment Guide 2026
How to run a third-party AI impact assessment for vendor models: scoping, supplier questions, evidence gaps, contract terms,…
Read More
RoPA for HR Processing Guide 2026
How to build a RoPA for HR processing: recruitment, payroll, benefits, absence, monitoring, special category data, retention, recipients…
Read More
Risk Aggregation Guide 2026: Portfolio View of Risk
How risk aggregation works in enterprise risk management: grouping methods, common causes, correlation, simple scoring and quantitative options,…
Read More
DPIA for CCTV Guide 2026: When and How to Assess
When a DPIA for CCTV is required, what to include, how to judge necessity, retention, signage, access and…
Read More
Transfer Impact Assessment Template Guide 2026
What a transfer impact assessment template should contain: transfer description, transfer tool, third-country law analysis, supplementary measures, sign-off…
Read More
AI Harm Taxonomy Guide 2026: Categories and Use
What an AI harm taxonomy is, which categories to include, how it links to AI risk assessment, scoring…
Read More
Legitimate Interests for B2B Marketing Guide 2026
When legitimate interests for B2B marketing works under GDPR: the three-part test, ePrivacy limits, sole traders, objections, notices…
Read More