When a DORA major incident must be reported, what each of the three reports contains, who receives them, and a template to prepare before you need it.

Structured handover from an outgoing leader covering open risks, incidents, commitments, suppliers and access. The document from section 1, as you will receive it. Highlighted [[text]] is for you to ...

Pre-emptive security overview that answers the common questions before a questionnaire is sent. The document from section 1, as you will receive it. Highlighted [[text]] is for you to replace; shaded ...

Runs a questionnaire from receipt through answer reuse, SME input, approval and submission. The document from section 1, as you will receive it. Highlighted [[text]] is for you to replace; shaded ...

Public information with no personal data in it may go into any tool (P15 CL-19), but never through a work account and never under the organisation's name (AG-02). Personal data inside Public ...

Contract exhibit stating the security commitments the organisation offers by default. A questionnaire answer is a statement the organisation is held to. A customer reads it as a description of what ...

Specifies requirements for LLM applications covering input handling, output validation, data exposure, logging and agent permissions. An LLM application puts instructions and data in one channel. The ...

States permitted AI uses, prohibited uses, data rules and accountability; the AI domain's single policy. Most organisations do not build AI. They use other people's AI: an assistant inside the office ...

Reviews what tools, data and actions an AI agent can reach and whether a human approves high-impact actions. 1 Use this workbook with the Generative AI Security Standard and the LLM Application ...

Why an index. A questionnaire answer is a statement the organisation is held to. A customer reads it as a description of what the organisation does, relies on it when it decides to buy, and may point ...

A questionnaire answer is a statement the organisation is held to. A customer reads it as a description of what the organisation does, relies on it when it decides to buy, and may point to it later if ...

Reviews an LLM feature or agent before release against the standard and threat catalogue. This procedure sets out how [[Organisation Name]] reviews a generative AI feature before it goes live, and ...