ISO 42001 Impact Assessment: The Essential 2026 Guide to Clauses 6.1.4 and 8.4
How the ISO 42001 impact assessment works: clause 6.1.4, clause 8.4, Annex A.5, and the evidence auditors ask…
Read More
ROPA Example: A Complete 2026 Worked Record of Processing Activities
A ROPA example for a fictional 320-person delivery company: controller details, the exemption check, three activities in full,…
Read More
Controller vs Processor ROPA: The Essential 2026 Guide to Both Records
Controller vs processor ROPA: what Article 30(1) and 30(2) each require, a side-by-side comparison, which record an activity…
Read More
GDPR Data Mapping: The Complete 2026 Guide From Systems to ROPA
GDPR data mapping explained: what to capture, how a data map differs from the records of processing, a…
Read More
Is ISO 20000 Worth It? The Complete 2026 Cost-Benefit Case
Is ISO 20000 worth it in 2026? 27,332 certificates worldwide, 89% of them in one country, and audit…
Read More
Vendor Offboarding Checklist: The Complete 2026 Guide to Exiting a Vendor
A vendor offboarding checklist by phase: before notice, transition, access removal, data return and deletion, and close out,…
Read More
SaaS Vendor Risk Assessment: The Essential 2026 Guide
What a SaaS vendor risk assessment should check: assurance scope, tenant isolation, SSO, sub-processors, logs, AI features and…
Read More
Third-Party Risk Assessment Example: A Complete 2026 Walkthrough
A third-party risk assessment example for a fictional payments firm: tiering, the vendor profile, due diligence, five High…
Read More
Is Cyber Essentials Worth It? The Complete 2026 Cost-Benefit Case
Is Cyber Essentials worth it in 2026? Only 3% of UK businesses require it from suppliers, yet the…
Read More
Legitimate Interests Examples: 12 Proven Cases and Where They Fail (2026)
Legitimate interests examples from the GDPR recitals and everyday practice: fraud, marketing, security, CCTV, staff monitoring and analytics,…
Read More
Legitimate Interests vs Consent: The Essential 2026 Guide to Choosing
Legitimate interests vs consent compared: who decides, what each requires, when ePrivacy rules force consent, the usual basis…
Read More
Legitimate Interests Assessment Example: A Complete 2026 Walkthrough
A legitimate interests assessment example for a fictional retailer: the screening, the purpose, necessity and balancing tests, the…
Read More