Policies and procedures

Disclaimer: Any policies, procedures, guidelines, templates, or information provided on the GRCReady website are offered as general guidance only and should be used as a reference. It may not take into account all relevant or festate deral laws and is not a legal document. All information in this site is provided “as is”, with no guarantee of completeness, accuracy, timeliness or of the results obtained from the use of this information.

Checklist for ISO 27001 Audit (GDPR)

Data Processing Agreement for GDPR

Disaster Recovery Plan (GDPR)

Information Asset Register (GDPR)

Letter for Processors (GDPR)

Policy & Procedure for ICT Access Control (GDPR)

Policy for Acceptable ICT Use (GDPR)

Policy for Anonymisation and Pseudonymisation (GDPR)

Policy for Bring Your Own Device (GDPR)

Policy for Clean Desk (GDPR)

Policy for Employee Attraction & Retention (GDPR)

Policy for Encryption (GDPR)