ChecklistDOCXSupplier assurance: assess assurance evidence within its scope3 pagesRisk and assuranceSupplier and cloud services
ChecklistDOCXSecurity in project management: run four project security reviews3 pagesSecure development
ChecklistDOCXSecure disposal and reuse of equipment: review disposal programme performance2 pagesRetention and deletion
ChecklistDOCXSecure development lifecycle: release security testing3 pagesSecure developmentSecure engineering
ChecklistDOCXSecure development lifecycle: development and test environments2 pagesSecure developmentSecure engineering
ChecklistDOCXRisk assessment and treatment: verify treatment implementation and effect2 pagesRisk and assuranceRisk assessment
ChecklistDOCXSecure configuration baseline: testable configuration requirements3 pagesConfiguration managementSecure engineering
ChecklistDOCXRisk assessment and treatment: define testable treatment outcomes2 pagesRisk and assuranceRisk assessment
ChecklistDOCXRisk assessment and treatment: assess evidence and uncertainty2 pagesRisk and assuranceRisk assessment
ChecklistDOCXPrivacy and PII protection: assess a possible personal-data breach as facts develop2 pagesPrivacy management
ChecklistDOCXPrivacy and PII protection: review privacy operation against complaints, changes, and evidence2 pagesPrivacy management