A questionnaire answer is a statement the organisation is held to. A customer reads it as a description of what the organisation does, relies on it when it decides to buy, and may point to it later if ...

When a DORA major incident must be reported, what each of the three reports contains, who receives them, and a template to prepare before you need it.

Pre-emptive security overview that answers the common questions before a questionnaire is sent. The document from section 1, as you will receive it. Highlighted [[text]] is for you to replace; shaded ...

Establishes the risk criteria, scales and scoring rules that make assessments comparable between assessors and defensible to an auditor. This methodology is how [[Organisation Name]] turns "what could ...

Contract exhibit stating the security commitments the organisation offers by default. A questionnaire answer is a statement the organisation is held to. A customer reads it as a description of what ...

Documents the assessment outcome in a form the business owner can act on and an auditor can rely on. Use this report to close every supplier security assessment at [[Organisation Name]]. One report ...

Decides how much assurance each supplier warrants before any questionnaire is sent, which is the control that makes the whole programme sustainable. This model decides how much assurance ...

Templates for notification to the supervisory authority and communication to affected data subjects. These templates hold the words of every notice a personal data breach can need under the GDPR: the ...

Covers the full document lifecycle from drafting through consultation, approval, publication, attestation, review and retirement. This procedure sets out how a single security document moves through [ ...

Why an index. A questionnaire answer is a statement the organisation is held to. A customer reads it as a description of what the organisation does, relies on it when it decides to buy, and may point ...

Specifies requirements for LLM applications covering input handling, output validation, data exposure, logging and agent permissions. An LLM application puts instructions and data in one channel. The ...

Monthly operational view for the security and IT leadership team with trend, threshold and owner commentary. 1 Metric Settings: one row per metric you report, from the Security KPI & KRI Catalogue.