Policies, security and evidence
For companies: publish notices and policies people can rely on, record the measures that protect the data, keep your evidence, track your risks and publish your Trust Centre.
6 guidesWriting and publishing policies and noticesHow a company writes a privacy notice or an internal policy, has it signed off, publishes it, and keeps it in step with its registers.Recording security controls and their evidenceHow a company records the measures that protect personal data, names an owner, records testing and evidence, and sees which requirements rest on each one.Keeping the evidence libraryHow a company adds reusable evidence documents, gives each an owner and a review date, replaces files with new versions, and links them to the requirements they support.Keeping the risk registerHow a company records a risk, scores it before and after its controls, chooses a treatment, accepts a risk with an expiry, and links the controls and suppliers behind it.Publishing your Trust CentreHow a company writes its public Trust Centre, chooses which documents can be downloaded or requested, publishes a reviewed snapshot, and decides document requests.Recording certifications and audit reportsHow a company records the certificates and audit reports it holds with their assurance level, attaches the supporting document, and chooses what customers can see in the Trust Centre.
Can’t find what you need? Contact us.