Topics

Information security, privacy, AI governance and more. Find your topic.

Information security

Security policies, questionnaires, assessments and registers.

Access controlPolicies and records for approving and limiting access to systems and information.20 documents Access reviewsReview who has access, confirm owners and record decisions and removals.6 documents Asset managementTrack information and technology assets, owners and handling requirements.18 documents Audit and reviewPrepare assessments, findings and formal security reviews.19 documents AuthenticationSet and review sign-in requirements, factors and credential handling.18 documents Backup and recoveryProtect backups and test restoration and service recovery.16 documents Business continuityPlan how essential services continue during disruption.25 documents Change managementReview, approve and record changes to systems and software.3 documents Cloud securityResponsibilities, controls and reviews for cloud services and hosting.14 documents Configuration managementControl secure settings, baselines and infrastructure changes.21 documents Continuity and responseIncident handling, backups and recovery planning.59 documents Control assuranceCollect evidence and test whether safeguards work as intended.28 documents Corrective actionsRecord findings, owners, fixes and verification of completed actions.5 documents Cryptography and keysControl encryption, signatures and cryptographic keys.19 documents ISMS governanceDefine security scope, responsibilities, objectives and operating decisions.51 documents Identity managementManage accounts, roles and identity changes throughout their lifecycle.40 documents Incident responsePrepare for, record and respond to security incidents.35 documents Information classificationClassify information and specify how it should be handled.18 documents Internal auditPlan audits, gather evidence and follow up findings.7 documents Logging and monitoringDefine event logging, alerting, trustworthy timestamps and review practices.45 documents Management reviewReview security performance, decisions and improvement actions with leadership.7 documents Physical securityControl facilities, equipment and physical access.20 documents Privileged accessControl administrative accounts, elevated permissions and privileged sessions.14 documents Remote workingDefine safe use of devices, services and information away from the workplace.10 documents Risk and assuranceAssess risks and collect evidence of control effectiveness.50 documents Risk assessmentIdentify, evaluate and record information security risks.23 documents Risk treatmentChoose, track and review actions taken in response to identified risks.5 documents Secure developmentBuild security checks into design, coding, testing and release.44 documents Secure engineeringDevelopment, testing and technical change safeguards.33 documents Security operationsDaily operational checks, monitoring and maintenance of safeguards.115 documents Security policiesEditable policies and supporting decisions for information security.14 documents Security questionnairesQuestions and evidence requests for assessing security practices.3 documents Security testingPlan and document tests, findings and verification of fixes.21 documents Service dependenciesRecord important services, subcontractors and their operational dependencies.2 documents Supplier and cloud servicesReviews and safeguards for external services and hosting.44 documents Supplier assessmentsQuestionnaires and records for evaluating a supplier before and during a service.6 documents Supplier riskAssess service providers, dependencies and the security risks they introduce.41 documents Vulnerability managementFind, prioritize and track security weaknesses and fixes.17 documents Workplace securityPeople, devices and physical working conditions.39 documents ISO 27001ISO 27001 documents covering information security management, controls, risk and audits.1 document

Privacy & data protection

Privacy forms, data registers and review checklists.

Data sharingAssess and record transfers and sharing of information.17 documents Document and record controlControl versions, authority and lifecycle of documents and records.18 documents Information governanceControl information and records through their lifecycle.29 documents Privacy impact assessmentAssess privacy risks and document decisions before processing changes.4 documents Privacy managementOrganize personal-data responsibilities, decisions and records.28 documents Retention and deletionSet retention periods and document deletion of information.25 documents GDPRGDPR documents covering personal data, privacy rights and data protection obligations.8 documents

AI governance

AI inventories, review checklists and incident records.

AI assuranceAssess the suitability, safety and governance of AI before and during use.4 documents AI governanceInventory AI use, assign oversight and record decisions and exceptions.19 documents AI incidentsDocument AI-related incidents, impact and follow-up.1 document AI output reviewRecord human checks of AI outputs before they are used.2 documents

Governance & assurance

Funding controls, fraud risk and public-sector assurance records.

Anti-money launderingAssess money-laundering exposure and meet business supervision duties.9 documents Charity governanceRecord trustee decisions, donations, grants and charity asset responsibilities.20 documents Competition complianceApply competition rules and document fair-market and consumer-facing decisions.1 document Consumer contract termsWrite and review fair, clear terms for consumer-facing agreements.4 documents Customs compliancePrepare import declarations, retain customs evidence and document border duties.9 documents Digital accessibilityTest digital services against accessibility obligations and record findings.16 documents Education governanceRecord governance, attendance, finance and operational duties for education providers.14 documents Employee benefits complianceRecord plan reporting and applicable fringe benefit duties.4 documents Equality complianceDocument equality duties, fair treatment and inclusive workplace decisions.6 documents Export controlsCheck controlled exports, licensing conditions and trade-control records.8 documents Fraud preventionIdentify fraud schemes and operate preventive checks and reporting.8 documents Fraud risk assessmentIdentify fraud scenarios, evaluate controls and record residual risk.6 documents Funding assuranceReview funding controls, evidence and compliance findings.5 documents Modern slavery complianceReview supply-chain labour practices and prepare required transparency statements.6 documents Public procurementApply public buying rules, oversight and responsible sourcing requirements.8 documents Sanctions complianceCheck financial and trade sanctions, licences and reporting duties.11 documents Tax complianceKeep tax and customs records, prepare returns and document duties and corrections.32 documents WhistleblowingHandle protected workplace disclosures, confidential reporting and follow-up.5 documents

Safety & operations

Workplace inspections, health and safety checks and operational records.

Agricultural biosecurityPrevent livestock and plant disease and document movement controls.16 documents Animal welfareMeet animal care and transport requirements and record welfare safeguards.13 documents Building safetyApply building control duties, competent design and mandatory occurrence reporting.20 documents Clinical trial compliancePlan and authorize medicine trials, record safety duties and report trial changes.2 documents Construction safetyPlan safe construction work, control site hazards and document dutyholder actions.7 documents Consumer product safetyAssess and communicate product safety risks and responsibilities.9 documents Employee leaveRecord protected leave and work-break accommodations.1 document Employment complianceRecord employer duties for pay, labour providers and employment standards.20 documents Environmental permit complianceMaintain permit controls, monitor emissions and document an operator’s environmental duties.28 documents Environmental risk assessmentAssess impacts on air, water, land and flood exposure for permits or planning.20 documents Farm environmental controlsDocument hedgerow, pesticide and water protection duties on managed farmland.11 documents Fire safetyAssess fire risks, assign responsible persons and maintain building fire controls.5 documents Flexible workingRequest, assess and record flexible working arrangements.4 documents Food safetyHandle food safely and document duties for food businesses and producers.20 documents Grievance and disciplinaryRecord formal workplace concerns, meetings, decisions and appeals.23 documents Healthcare governanceDocument provider registration, care quality, infection controls and healthcare incidents.10 documents Housing complianceRecord landlord, property licensing and social-housing safety duties.13 documents Medical device safetyMeet medical device duties and record clinical investigations, conformity and safety actions.17 documents Occupational healthAssess and reduce health risks at work, including heat and respiratory infections.6 documents Pharmaceutical qualityControl drug manufacturing quality, process validation and good manufacturing practices.9 documents PharmacovigilanceMonitor medicine safety, record adverse events and maintain reporting responsibilities.3 documents Product conformityDocument product marking, market placement and applicable manufacturing restrictions.8 documents Reasonable adjustmentsRequest, agree and review adjustments that support people at work.9 documents SafeguardingProtect children and adults at risk, record concerns and maintain clear escalation duties.7 documents Transport safetyCheck vessel and transport operations for safety risks and required controls.16 documents Wage and hour complianceRecord working time, pay and wage requirements under labour rules.3 documents Waste managementTrack, separate, treat and report waste under applicable business duties.14 documents Workplace health and safetyInspect working conditions and document health and safety actions.11 documents Workplace inspectionsCheck working areas, record hazards and assign corrective actions.1 document Workplace investigationsPlan workplace investigations, gather evidence and record findings and recommendations.4 documents