Programmes and frameworks

For companies: set up and activate a programme, answer its NDPA questions, map controls to frameworks, and give work an owner by department.

6 guides

Setting up and activating a programmeHow a company creates a compliance programme from a framework such as the NDPA, defines its scope, owner and review timing, works through the activation checklist, and changes its state.Answering your NDPA programme questionsHow a company links a reporting period to its NDPA programme, assigns each question to a person or department, answers it with its source and scope, attaches evidence, and confirms it for the company.Mapping controls to a frameworkHow a company reads a framework's requirements and how well they are covered, maps its security controls onto them, and adds its own framework where the plan allows.Setting up departments and their ownersHow a company adds departments with an owner and purpose, assigns responsibilities to members, ends them, and retires or restores a department.Recording your DPO appointmentHow a company records who is appointed as its Data Protection Officer, the officer's contact and board minute, any independence conflicts, and how to end an appointment.The DPO's report to managementHow the DPO assembles the semi-annual report to management from the period's records, adds commentary and asks, how management decides each ask, and how the report is tabled and verified.

Can’t find what you need? Contact us.