All products

Implementation kits, add-ons, bundles, packs and single documents.

Standards

• DORA for financial entities
• DORA for ICT service providers
• ISO 9001:2026, ISO 14001:2026, and ISO/IEC 27001:2022
• ISO 14001:2026
• ISO/IEC 27001:2022
• ISO 9001:2026
• NIS2
• EU AI Act
• ISO/IEC 42001:2023
• NIST AI RMF
• GDPR for AI
• EU GDPR
• NIST SP 800-171 / CMMC
• SOC 2
• SOC 2 + AI

Products

• Acceptable Use Policy for ISO/IEC 27001:2022
• Acceptable Use Policy for SOC 2
• Access Control and Identity Management Policy for DORA (Financial Entities)
• Access Control Policy for ISO/IEC 27001:2022
• Access Control Policy for NIST 800-171 / CMMC
• Access Control Policy for SOC 2
• Access Provisioning and Review Procedure for ISO/IEC 27001:2022
• Access Request and Approval Form for NIST 800-171 / CMMC
• Access Request and Review Form for ISO/IEC 27001:2022
• Access Request Form for SOC 2
• Access Review Record for NIST 800-171 / CMMC
• Access Review Record for SOC 2
• Account Management and Access Review Procedure for NIST 800-171 / CMMC
• Accuracy, Robustness and Cybersecurity Testing Procedure for EU AI Act
• Acting as a Processor Procedure for EU GDPR
• AI Acceptable Use Policy for EU AI Act
• AI and Personal Data Awareness Deck for GDPR for AI
• AI Breach Record for GDPR for AI
• AI Change and Substantial Modification Procedure for EU AI Act
• AI Concern Report for ISO/IEC 42001
• AI Contract and Mandate Clauses for EU AI Act
• AI Control Matrix Additions for SOC 2 + AI
• AI Data Governance Policy for EU AI Act
• AI Data Management Policy for ISO/IEC 42001
• AI Data Protection Policy for GDPR for AI
• AI Data Protection Program Manual for GDPR for AI
• AI Data Protection RACI for GDPR for AI
• AI Data Protection Registers Workbook (RoPA, LLM risks, retention) for GDPR for AI
• AI Governance Bundle — Complete
• AI Governance Internal Audit Procedure for EU AI Act
• AI Governance Management Review Procedure for EU AI Act
• AI Governance Manual for EU AI Act
• AI Governance RACI for EU AI Act
• AI Impact Assessment Form for NIST AI RMF
• AI Impact Assessment Procedure for NIST AI RMF
• AI in SOC 2 Awareness Deck for SOC 2 + AI
• AI Incident Communication Record for ISO/IEC 42001
• AI Incident Report for NIST AI RMF
• AI Incident Response and Communication Procedure for NIST AI RMF
• AI Input, Processing and Output Integrity Procedure for SOC 2 + AI
• AI Intake and Categorization Form for NIST AI RMF
• AI Inventory and Categorization Procedure for NIST AI RMF
• AI Inventory and Registers Workbook for EU AI Act
• AI Literacy Awareness Deck for EU AI Act
• AI Literacy Policy for EU AI Act
• AI Literacy Quiz for EU AI Act
• AI Literacy Training Record for EU AI Act
• AI Management System Manual for ISO/IEC 42001
• AI Model and Training Data Change Procedure for SOC 2 + AI
• AI Model Anonymity Assessment Procedure for GDPR for AI
• AI Model Change Record for SOC 2 + AI
• AI Monitoring and Anomaly Procedure for SOC 2 + AI
• AI Objectives and Planning of Changes Procedure for ISO/IEC 42001
• AI Output Validation Log for SOC 2 + AI
• AI Personal Data Breach Procedure for GDPR for AI
• AI Policy for EU AI Act
• AI Policy for ISO/IEC 42001
• AI Pre-Audit Checklist for SOC 2 + AI
• AI Privacy Notice Sections for GDPR for AI
• AI Processing Agreement and Vendor Clauses for GDPR for AI
• AI Processing Intake and Role Form for GDPR for AI
• AI Provider and Subservice Organization Procedure for SOC 2 + AI
• AI Provider Review for SOC 2 + AI
• AI Registers Workbook for SOC 2 + AI
• AI Relevance and System Description Procedure for SOC 2 + AI
• AI Relevance Assessment for SOC 2 + AI
• AI Resource Documentation Procedure for ISO/IEC 42001
• AI Risk Assessment and Treatment Procedure for ISO/IEC 42001
• AI Risk Assessment Procedure for SOC 2 + AI
• AI Risk Awareness Deck for NIST AI RMF
• AI Risk Awareness Quiz for NIST AI RMF
• AI Risk Management Policy for NIST AI RMF
• AI Risk Management Procedure for EU AI Act
• AI Risk Management Program Manual for NIST AI RMF
• AI Risk Registers Workbook for NIST AI RMF
• AI Risk Roles RACI for NIST AI RMF
• AI Risk Training Record for NIST AI RMF
• AI Risk, Data and Testing Workbook for EU AI Act
• AI RMF Profile Template (Current and Target) for NIST AI RMF
• AI RMF Profile Workbook (Current vs Target) for NIST AI RMF
• AI Roles and Responsibilities RACI for ISO/IEC 42001
• AI Security and LLM Privacy Risk Procedure for GDPR for AI
• AI Security Testing Procedure for SOC 2 + AI
• AI Supplier and Customer Clauses for ISO/IEC 42001
• AI Supplier Assessment for ISO/IEC 42001
• AI Supplier Due Diligence Questionnaire for EU AI Act
• AI Supplier, Importer and Distributor Procedure for EU AI Act
• AI System Deployment Approval for ISO/IEC 42001
• AI System Deployment Plan Template for ISO/IEC 42001
• AI System Description Addendum for SOC 2 + AI
• AI System Identification, Scope and Role Procedure for EU AI Act
• AI System Impact Assessment Form for ISO/IEC 42001
• AI System Impact Assessment Procedure for ISO/IEC 42001
• AI System Intake Form for EU AI Act
• AI System Life Cycle Procedure for ISO/IEC 42001
• AI System Operation, Monitoring and Logging Procedure for ISO/IEC 42001
• AI System Register Entry Form for ISO/IEC 42001
• AI System Requirements Specification Template for ISO/IEC 42001
• AI System Risk Classification Procedure for EU AI Act
• AI System Technical Documentation Template for ISO/IEC 42001
• AI Transparency and Disclosure Policy for EU AI Act
• AI Transparency and Human Validation Procedure for SOC 2 + AI
• AI Transparency Notice Template for NIST AI RMF
• AI Use and Governance Policy (SOC 2) for SOC 2 + AI
• AI Vendor and Model Provenance Assessment for GDPR for AI
• AI Vendor, Processor and Transfer Procedure for GDPR for AI
• AIMS Awareness Deck for ISO/IEC 42001
• AIMS Awareness Quiz for ISO/IEC 42001
• AIMS Change Request for ISO/IEC 42001
• AIMS Registers Workbook (incl. Statement of Applicability) for ISO/IEC 42001
• AIMS Scope Statement Template for ISO/IEC 42001
• Annual Data Protection Audit Checklist for EU GDPR
• Article 22 Assessment and Human Review Record for GDPR for AI
• Article 22 Assessment for EU GDPR
• Article 30 Contract Clause Checklist for DORA (Financial Entities)
• Assessment Preparation and Evidence Procedure for NIST 800-171 / CMMC
• Assessment Readiness Checklist for NIST 800-171 / CMMC
• Assessor Interview Preparation Sheet for NIST 800-171 / CMMC
• Asset Disposal Record for ISO/IEC 27001:2022
• Asset Management and Information Classification Policy for ISO/IEC 27001:2022
• Asset Management Policy for SOC 2
• Audit Access and Inspection Procedure for DORA (ICT Service Providers)
• Audit and Accountability Policy for NIST 800-171 / CMMC
• Audit and Inspection Request Log for DORA (ICT Service Providers)
• Audit Logging and Review Procedure for NIST 800-171 / CMMC
• Audit Preparation and Evidence Management Procedure for SOC 2
• Audit Success Announcement Kit for ISO 14001:2026
• Audit Success Announcement Kit for ISO 9001:2026
• Audit Success Announcement Kit for ISO/IEC 27001:2022
• Auditor Interview Preparation Sheet for EU AI Act
• Auditor Interview Preparation Sheet for ISO 14001:2026
• Auditor Interview Preparation Sheet for ISO 9001:2026
• Auditor Interview Preparation Sheet for ISO/IEC 27001:2022
• Auditor Interview Preparation Sheet for ISO/IEC 42001
• Auditor Interview Preparation Sheet for NIST AI RMF
• Auditor Interview Preparation Sheet for SOC 2
• Auditor Interview Preparation Sheet for SOC 2 + AI
• Authority Cooperation Procedure for EU AI Act
• Automated Decision Explanation Template for GDPR for AI
• Automated Decision-Making (Article 22) Procedure for GDPR for AI
• Automated Decision-Making and Profiling Procedure for EU GDPR
• Awareness and Training Policy for NIST 800-171 / CMMC
• Awareness Quiz and Answer Key for ISO 14001:2026
• Awareness Quiz and Answer Key for ISO 9001:2026
• Awareness Quiz and Answer Key for ISO/IEC 27001:2022
• Awareness Quiz for EU GDPR
• Awareness Quiz for GDPR for AI
• Awareness Quiz for NIST 800-171 / CMMC
• Awareness Quiz for SOC 2 + AI
• Awareness Training Record for ISO 14001:2026
• Awareness Training Record for ISO 9001:2026
• Awareness Training Record for ISO/IEC 27001:2022
• Background Check Confirmation for SOC 2
• Backup and Restoration Policy for DORA (Financial Entities)
• Backup Policy for ISO/IEC 27001:2022
• Backup, Business Continuity and DR Testing Procedure for SOC 2
• Bias and Fairness Testing Record for ISO/IEC 42001
• Biodiversity and Ecosystems Procedure for ISO 14001:2026
• Biodiversity and Ecosystems Screening for ISO 14001:2026
• Boundary Protection and Encryption Procedure for NIST 800-171 / CMMC
• Breach Notification Templates for EU GDPR
• Breach Record and Risk Assessment for EU GDPR
• Business Continuity and Disaster Recovery Policy for SOC 2
• Business Continuity and Exit Support Procedure for DORA (ICT Service Providers)
• Business Continuity and ICT Readiness Policy for ISO/IEC 27001:2022
• Business Continuity and ICT Readiness Procedure for ISO/IEC 27001:2022
• Business Continuity Plan for ISO/IEC 27001:2022
• Business Impact Analysis and Continuity Testing Procedure for DORA (Financial Entities)
• Capacity Management Procedure for SOC 2
• Certification Audit Readiness Checklist for ISO/IEC 42001
• Certification Evidence Checklist for ISO/IEC 27001:2022
• Certification Readiness Checklist for ISO/IEC 27001:2022
• Certification Readiness Pack for ISO/IEC 27001:2022
• Change and Configuration Management Policy for ISO/IEC 27001:2022
• Change and Substantial Modification Assessment for EU AI Act
• Change Management Policy for SOC 2
• Change Management Procedure for SOC 2
• Change Planning Record for ISO 14001:2026
• Change Planning Record for ISO 9001:2026
• Change Request and Security Impact Assessment for ISO/IEC 27001:2022
• Change Request Form for NIST 800-171 / CMMC
• Change Request Form for SOC 2
• Clear Desk and Clear Screen Policy for ISO/IEC 27001:2022
• Client Audit Interview Preparation Sheet for DORA (ICT Service Providers)
• Client Audit Readiness Checklist for DORA (ICT Service Providers)
• Client DORA Questionnaire Response Template (ICT Service Providers)
• Client Exit Plan for DORA (ICT Service Providers)
• Client Incident Notification Form for DORA (ICT Service Providers)
• Client Incident Notification Pack for DORA (ICT Service Providers)
• Client Incident Notification Procedure for DORA (ICT Service Providers)
• Client Notification of Major Incident for DORA (Financial Entities)
• Climate Change Determination for ISO 9001:2026
• Climate Change Determination for ISO/IEC 27001:2022
• Cloud Services Policy for ISO/IEC 27001:2022
• CNIL-aligned AI Development Checklist for GDPR for AI
• Code of Conduct for SOC 2
• Communicating DORA Compliance (Financial Entities)
• Communicating DORA Readiness (ICT Service Providers)
• Communication Procedure for ISO 14001:2026
• Compatibility Assessment for Data Re-use for GDPR for AI
• Compatibility Assessment for Further Processing for EU GDPR
• Competence and Awareness Record for ISO/IEC 42001
• Competence, Awareness and Communication Procedure for ISO/IEC 27001:2022
• Competence, Awareness and Communication Procedure for ISO/IEC 42001
• Competence, Training and Awareness Procedure for ISO 14001:2026
• Competence, Training and Awareness Procedure for ISO 9001:2026
• Competent Authority Notification on ICT Arrangements for DORA (Financial Entities)
• Compliance Obligations and Evaluation of Compliance Procedure for ISO 14001:2026
• Confidential Information Handling and Disposal Procedure for SOC 2
• Configuration Baseline and Change Control Procedure for NIST 800-171 / CMMC
• Configuration Management Policy for NIST 800-171 / CMMC
• Conformity Assessment, Declaration, CE Marking and Registration Procedure for EU AI Act
• Consent Management Procedure for EU GDPR
• Context and Interested Parties Register for ISO 14001:2026
• Context and Interested Parties Register for ISO 9001:2026
• Context and Interested Parties Register for ISO/IEC 27001:2022
• Context Mapping Procedure for NIST AI RMF
• Context of the Organization Procedure for ISO 9001:2026
• Context, Interested Parties and Scope Procedure for ISO 14001:2026
• Context, Interested Parties and Scope Procedure for ISO/IEC 27001:2022
• Context, Interested Parties and Scope Procedure for ISO/IEC 42001
• Continuity and Disaster Recovery Test Record for ISO/IEC 27001:2022
• Continuous Monitoring Procedure for NIST 800-171 / CMMC
• Contract Pack for DORA (ICT Service Providers)
• Control Matrix and Registers Workbook for SOC 2
• Control Matrix Guide for SOC 2
• Control Monitoring and Internal Audit Procedure for SOC 2
• Control of Documented Information Procedure for ISO 14001:2026
• Control of Documented Information Procedure for ISO 9001:2026
• Control of Documented Information Procedure for ISO/IEC 27001:2022
• Control of Nonconforming Outputs Procedure for ISO 9001:2026
• Cookie and Online Tracking Policy for EU GDPR
• Cookie Banner and Cookie Notice Text for EU GDPR
• Cookies and Tracking Technologies Procedure for EU GDPR
• Corrective Action Record for EU AI Act
• CPA Firm Selection Guide and RFP for SOC 2
• Crisis Communication Policy for DORA (Financial Entities)
• Critical or Important Functions Identification Procedure for DORA (Financial Entities)
• Crosswalk: 800-171 Rev 2 to Rev 3 and ISO/IEC 27001 for NIST 800-171 / CMMC
• Cryptography Policy for ISO/IEC 27001:2022
• CUEC and Subservice Organization Template for SOC 2
• CUI and FCI Identification and Handling Procedure for NIST 800-171 / CMMC
• CUI Awareness and Insider Threat Deck for NIST 800-171 / CMMC
• CUI Cybersecurity Program Manual for NIST 800-171 / CMMC
• CUI Identification Record for NIST 800-171 / CMMC
• Customer Evidence Pack Index for DORA (ICT Service Providers)
• Customer Requirements and Sales Procedure for ISO 9001:2026
• Customer Satisfaction Survey for ISO 9001:2026
• Cyber Threat Notification and Information Sharing Procedure for DORA (Financial Entities)
• Cybersecurity RACI for NIST 800-171 / CMMC
• Data and Data Governance Procedure for EU AI Act
• Data Classification and Retention Policy for SOC 2
• Data for AI Systems Procedure for ISO/IEC 42001
• Data Processing Agreement Template for EU GDPR
• Data Protection Awareness Deck for EU GDPR
• Data Protection by Design and by Default Procedure for EU GDPR
• Data Protection by Design for AI Procedure (incl. Pseudonymization) for GDPR for AI
• Data Protection Impact Assessment Procedure for EU GDPR
• Data Protection Officer Procedure for EU GDPR
• Data Protection Policy for EU GDPR
• Data Protection Program Manual for EU GDPR
• Data Protection RACI for EU GDPR
• Data Retention and Deletion Policy for EU GDPR
• Data Retention, Deletion and Disposal Policy for ISO/IEC 27001:2022
• Data Subject Request Procedure for EU GDPR
• Data Subject Request Record (AI) for GDPR for AI
• Data Subject Request Record for EU GDPR
• Data Subject Request Response Letters for EU GDPR
• Data Subject Rights for AI Procedure for GDPR for AI
• Data Subject Rights Policy for EU GDPR
• Decommissioning and Deactivation Procedure for NIST AI RMF
• Decommissioning Checklist for NIST AI RMF
• Deficiency and Corrective Action Record for SOC 2
• Deployer Obligations Procedure for EU AI Act
• Design and Development Procedure for ISO 9001:2026
• Digital Operational Resilience Strategy for DORA (Financial Entities)
• Digital Operational Resilience Testing Policy for DORA (Financial Entities)
• Direct Marketing Procedure for EU GDPR
• Documented Information Control Procedure for ISO/IEC 42001
• DoD Cyber Incident Report Preparation Worksheet for NIST 800-171 / CMMC
• DORA Add-On for ISO/IEC 27001:2022
• DORA Awareness Quiz and Answer Key (Financial Entities)
• DORA Awareness Quiz and Answer Key (ICT Service Providers)
• DORA Contract Clause Checklist (ICT Service Providers)
• DORA Gap Assessment and Implementation Plan (Financial Entities)
• DORA Guide for Financial Entities
• DORA Guide for ICT Service Providers
• DORA Implementation Kit for Financial Entities — Complete
• DORA Implementation Kit for Financial Entities — Consultant
• DORA Implementation Kit for Financial Entities — Essentials
• DORA Implementation Kit for ICT Service Providers — Complete
• DORA Implementation Kit for ICT Service Providers — Consultant
• DORA Implementation Kit for ICT Service Providers — Essentials
• DORA Supplier Readiness Workbook (ICT Service Providers)
• DORA Team Briefing Deck (ICT Service Providers)
• DPIA for AI Form (incl. Screening) for GDPR for AI
• DPIA for AI Procedure for GDPR for AI
• DPIA Form (incl. Screening) for EU GDPR
• DPO Designation Assessment for EU GDPR
• DR Test Report for SOC 2
• Emergency Drill Record for ISO 14001:2026
• Emergency Preparedness and Response Procedure for ISO 14001:2026
• Emergency Response Pack for ISO 14001:2026
• Employee and Candidate Privacy Notice for EU GDPR
• Employee Data Protection Policy for EU GDPR
• EMS Manual for ISO 14001:2026
• EMS Registers Workbook for ISO 14001:2026
• EMS Roles and Responsibilities RACI for ISO 14001:2026
• Encryption and Key Management Policy for SOC 2
• Endpoint and Malware Protection Policy for ISO/IEC 27001:2022
• Environmental Aspects and Life Cycle Procedure for ISO 14001:2026
• Environmental Commitments Statement for ISO 14001:2026
• Environmental Incident Report for ISO 14001:2026
• Environmental Objectives and Planning Procedure for ISO 14001:2026
• Environmental Policy and Objectives for ISO 14001:2026
• Equipment Maintenance and Calibration Procedure for ISO 9001:2026
• EU AI Act + ISO/IEC 42001 Bundle — Complete
• EU AI Act Crosswalk for ISO/IEC 42001
• EU AI Act Practitioner Guide (as amended in 2026) for EU AI Act
• EU Cyber Compliance Bundle — Complete
• EU Cyber Compliance Bundle — Consultant
• EU Cyber Compliance Bundle — Essentials
• EU Database Registration Data Sheet for EU AI Act
• EU Declaration of Conformity Template for EU AI Act
• Evaluation of Compliance Report for ISO 14001:2026
• Evidence Matrix and Type 2 Evidence Calendar for SOC 2
• Executive Briefing for ISO 14001:2026
• Executive Briefing for ISO/IEC 27001:2022
• Explanation Request Record for EU AI Act
• Explanations and Complaints Procedure for EU AI Act
• External Communication Procedure for SOC 2
• External Provider Control Procedure for ISO 9001:2026
• External Service Provider Due Diligence for NIST 800-171 / CMMC
• External Service Providers and Cloud Procedure for NIST 800-171 / CMMC
• Feedback and Appeal Record for NIST AI RMF
• Financial Client Onboarding and Contract Review Procedure for DORA (ICT Service Providers)
• Financial Sector Client Commitments Policy for DORA (ICT Service Providers)
• Flaw Remediation and Malware Protection Procedure for NIST 800-171 / CMMC
• Forms and Templates Pack for EU AI Act
• Forms and Templates Pack for EU GDPR
• Forms and Templates Pack for GDPR for AI
• Forms and Templates Pack for ISO/IEC 42001
• Forms and Templates Pack for NIST 800-171 / CMMC
• Forms and Templates Pack for NIST AI RMF
• Forms and Templates Pack for SOC 2
• Forms and Templates Pack for SOC 2 + AI
• Fundamental Rights and Data Protection Impact Assessment Procedure for EU AI Act
• Fundamental Rights Impact Assessment Form for EU AI Act
• Gap Assessment Workbook for DORA (Financial Entities)
• Gap Assessment Workbook for ISO/IEC 42001
• GDPR and EU AI Act Crosswalk for GDPR for AI
• GDPR Crosswalk to ISO/IEC 27001, EU AI Act and GDPR for AI for EU GDPR
• GDPR for AI Gap Assessment Workbook for GDPR for AI
• GDPR for AI Practitioner Guide for GDPR for AI
• GDPR Gap Assessment Workbook for EU GDPR
• GDPR Practitioner Guide for EU GDPR
• General-Purpose AI Model Provider Procedure for EU AI Act
• Generative AI Profile Action Checklist (AI 600-1) for NIST AI RMF
• Generative AI Use Standard for NIST AI RMF
• Go/No-Go Deployment Decision for NIST AI RMF
• Governance and Oversight Procedure for SOC 2
• GPAI Copyright Policy Template for EU AI Act
• GPAI Model Documentation Guide for EU AI Act
• GPAI Models with Systemic Risk Procedure for EU AI Act
• Guided Setup Questionnaire (incl. Level 1 fast path) for NIST 800-171 / CMMC
• Guided Setup Questionnaire (incl. SME fast path) for EU GDPR
• Guided Setup Questionnaire (incl. SME fast path) for GDPR for AI
• Guided Setup Questionnaire (incl. SME fast path) for NIST AI RMF
• Guided Setup Questionnaire (incl. startup fast path) for SOC 2
• Guided Setup Questionnaire (role and risk path) for EU AI Act
• Guided Setup Questionnaire for ISO/IEC 42001
• Guided Setup Questionnaire for SOC 2 + AI
• Human Oversight and Intervention Log for ISO/IEC 42001
• Human Oversight and Override Log for EU AI Act
• Human Oversight and Override Log for NIST AI RMF
• Human Oversight Procedure for EU AI Act
• Human Oversight Procedure for NIST AI RMF
• Human Resources Security Policy for ISO/IEC 27001:2022
• ICT Asset Management Policy for DORA (Financial Entities)
• ICT Business Continuity Policy for DORA (Financial Entities)
• ICT Change Management Policy for DORA (Financial Entities)
• ICT Change Request for DORA (Financial Entities)
• ICT Concentration Risk Assessment for DORA (Financial Entities)
• ICT Incident Management and Reporting Policy for DORA (Financial Entities)
• ICT Incident Record for DORA (Financial Entities)
• ICT Provider Exit Plan for DORA (Financial Entities)
• ICT Response and Recovery Plan for DORA (Financial Entities)
• ICT Risk Acceptance Form for DORA (Financial Entities)
• ICT Risk Assessment Procedure for DORA (Financial Entities)
• ICT Risk Framework Review and Internal Audit Procedure for DORA (Financial Entities)
• ICT Risk Management Framework Review Report for DORA (Financial Entities)
• ICT Risk Management Policy for DORA (Financial Entities)
• ICT Risk, Incident and Testing Registers for DORA (Financial Entities)
• ICT Third-Party Due Diligence and Contracting Procedure for DORA (Financial Entities)
• ICT Third-Party Due Diligence Questionnaire for DORA (Financial Entities)
• ICT Third-Party Monitoring and Exit Procedure for DORA (Financial Entities)
• ICT Third-Party Risk and Article 30 Pack for DORA (Financial Entities)
• ICT Third-Party Risk Policy for DORA (Financial Entities)
• Identification and Authentication Policy for NIST 800-171 / CMMC
• Identity Verification Checklist for EU GDPR
• Identity, MFA and Password Procedure for NIST 800-171 / CMMC
• Implementation & Transition Kit for ISO 14001:2026 — Complete
• Implementation & Transition Kit for ISO 14001:2026 — Consultant
• Implementation & Transition Kit for ISO 14001:2026 — Essentials
• Implementation & Transition Kit for ISO 9001:2026 — Complete
• Implementation & Transition Kit for ISO 9001:2026 — Consultant
• Implementation & Transition Kit for ISO 9001:2026 — Essentials
• Implementation and Transition Workbook for ISO 14001:2026
• Implementation Kit for GDPR for AI — Complete
• Implementation Kit for GDPR for AI — Consultant
• Implementation Kit for GDPR for AI — Essentials
• Implementation Kit for ISO/IEC 27001:2022 — Complete
• Implementation Kit for ISO/IEC 27001:2022 — Consultant
• Implementation Kit for ISO/IEC 27001:2022 — Essentials
• Implementation Kit for ISO/IEC 42001:2023 — Complete
• Implementation Kit for ISO/IEC 42001:2023 — Consultant
• Implementation Kit for ISO/IEC 42001:2023 — Essentials
• Implementation Kit for NIST AI RMF 1.0 — Complete
• Implementation Kit for NIST AI RMF 1.0 — Consultant
• Implementation Kit for NIST AI RMF 1.0 — Essentials
• Implementation Kit for the EU AI Act — Complete
• Implementation Kit for the EU AI Act — Consultant
• Implementation Kit for the EU AI Act — Essentials
• Implementation Kit for the EU GDPR — Complete
• Implementation Kit for the EU GDPR — Consultant
• Implementation Kit for the EU GDPR — Essentials
• Implementation Plan and Gap Assessment Workbook for ISO/IEC 27001:2022
• Incident Classification and Major Incident Reporting Procedure for DORA (Financial Entities)
• Incident Classification and Reporting Pack for DORA (Financial Entities)
• Incident Management Policy for ISO/IEC 27001:2022
• Incident Management Procedure for ISO/IEC 27001:2022
• Incident Record for NIST 800-171 / CMMC
• Incident Report for SOC 2
• Incident Response and DoD Reporting Procedure for NIST 800-171 / CMMC
• Incident Response Pack for ISO/IEC 27001:2022
• Incident Response Playbooks for ISO/IEC 27001:2022
• Incident Response Policy for NIST 800-171 / CMMC
• Incident Response Policy for SOC 2
• Incident Response Procedure for SOC 2
• Independent Review Checklist (72 subcategories) for NIST AI RMF
• Industry Annex: AI Agent Platforms for SOC 2 + AI
• Industry Annex: AI SaaS and AIaaS Providers for SOC 2 + AI
• Industry Annex: Construction and Engineering for ISO 14001:2026
• Industry Annex: Construction and Engineering for ISO 9001:2026
• Industry Annex: Crypto-Asset Service Providers for DORA (Financial Entities)
• Industry Annex: Customer Support Outsourcing with AI for SOC 2 + AI
• Industry Annex: Data and Analytics Providers for SOC 2
• Industry Annex: E-commerce and Retail for EU GDPR
• Industry Annex: Education and Training for EU AI Act
• Industry Annex: Employment and HR for EU AI Act
• Industry Annex: Employment and HR for NIST AI RMF
• Industry Annex: Engineering and Design Firms for NIST 800-171 / CMMC
• Industry Annex: Financial Services and Insurance for EU AI Act
• Industry Annex: Financial Services for EU GDPR
• Industry Annex: Financial Services for GDPR for AI
• Industry Annex: Financial Services for ISO/IEC 42001
• Industry Annex: Financial Services for NIST AI RMF
• Industry Annex: Fintech and Payments for SOC 2
• Industry Annex: Fintech Using AI for SOC 2 + AI
• Industry Annex: Food and Beverage for ISO 14001:2026
• Industry Annex: Healthcare and Life Sciences for ISO/IEC 42001
• Industry Annex: Healthcare and Medical Devices for EU AI Act
• Industry Annex: Healthcare for EU GDPR
• Industry Annex: Healthcare for GDPR for AI
• Industry Annex: Healthcare for NIST AI RMF
• Industry Annex: Healthtech for SOC 2
• Industry Annex: Healthtech Using AI for SOC 2 + AI
• Industry Annex: HR and Employment for EU GDPR
• Industry Annex: HR and Recruitment for GDPR for AI
• Industry Annex: Insurers and Intermediaries for DORA (Financial Entities)
• Industry Annex: Investment Firms for DORA (Financial Entities)
• Industry Annex: Logistics and Warehousing for ISO 14001:2026
• Industry Annex: Managed Service and Outsourcing Providers for DORA (ICT Service Providers)
• Industry Annex: Managed Services and IT Providers for SOC 2
• Industry Annex: Manufacturing and Industrial for ISO/IEC 27001:2022
• Industry Annex: Manufacturing and Industrial for ISO/IEC 42001
• Industry Annex: Manufacturing and Machine Shops for NIST 800-171 / CMMC
• Industry Annex: Manufacturing for ISO 14001:2026
• Industry Annex: Manufacturing for ISO 9001:2026
• Industry Annex: Marketing and Customer Analytics for GDPR for AI
• Industry Annex: MedTech-Adjacent and Life Sciences Suppliers for ISO 9001:2026
• Industry Annex: Offices and Professional Services for ISO 14001:2026
• Industry Annex: Payment and E-Money Institutions for DORA (Financial Entities)
• Industry Annex: Professional Services for ISO/IEC 27001:2022
• Industry Annex: Public Sector and Government Contractors for NIST AI RMF
• Industry Annex: Public Sector and Professional Services for ISO/IEC 42001
• Industry Annex: SaaS and Cloud Providers for DORA (ICT Service Providers)
• Industry Annex: SaaS and Cloud Services for SOC 2
• Industry Annex: SaaS and IT Services for ISO/IEC 27001:2022
• Industry Annex: SaaS and Technology for EU GDPR
• Industry Annex: Services and Professional Services for ISO 9001:2026
• Industry Annex: Small Businesses Using an MSP for NIST 800-171 / CMMC
• Industry Annex: Software and IT for ISO 9001:2026
• Industry Annex: Software and IT Services for NIST 800-171 / CMMC
• Industry Annex: Software and SaaS for GDPR for AI
• Industry Annex: Software and SaaS for ISO/IEC 42001
• Industry Annex: Software and SaaS for NIST AI RMF
• Industry Annex: Software and SaaS Providers for EU AI Act
• Industry Annex: Software Vendors and Fintech Platforms for DORA (ICT Service Providers)
• Industry Annex: Universities and Research for NIST 800-171 / CMMC
• Industry Annexes Pack for EU AI Act
• Industry Annexes Pack for EU GDPR
• Industry Annexes Pack for GDPR for AI
• Industry Annexes Pack for ISO/IEC 42001
• Industry Annexes Pack for NIST 800-171 / CMMC
• Industry Annexes Pack for NIST AI RMF
• Industry Annexes Pack for SOC 2
• Industry Annexes Pack for SOC 2 + AI
• Information for Interested Parties and Incident Communication Procedure for ISO/IEC 42001
• Information for Users Template for ISO/IEC 42001
• Information Security Incident Report for ISO/IEC 27001:2022
• Information Security Policy for DORA (Financial Entities)
• Information Security Policy for ISO/IEC 27001:2022
• Information Security Policy for NIST 800-171 / CMMC
• Information Security Policy for Personal Data for EU GDPR
• Information Security Policy for SOC 2
• Information Security Program Manual for SOC 2
• Information Security Risk Assessment and Treatment Procedure for ISO/IEC 27001:2022
• Information Transfer Policy for ISO/IEC 27001:2022
• Instructions for Use Template for EU AI Act
• Integrated Management System Kit for ISO 9001, ISO 14001 and ISO/IEC 27001 — Complete
• Integrated Management System Kit for ISO 9001, ISO 14001 and ISO/IEC 27001 — Consultant
• Integrated Management System Kit for ISO 9001, ISO 14001 and ISO/IEC 27001 — Essentials
• Integration Map for ISO 9001 and ISO 14001
• Integration Map for ISO 9001 and ISO 27001
• Internal Audit Checklist (Clauses and Annex A) for ISO/IEC 42001
• Internal Audit Checklist by Article for EU AI Act
• Internal Audit Pack for ISO 14001:2026
• Internal Audit Pack for ISO 9001:2026
• Internal Audit Pack for ISO/IEC 27001:2022
• Internal Audit Plan and Report for ISO 14001:2026
• Internal Audit Plan and Report for ISO 9001:2026
• Internal Audit Plan and Report for ISO/IEC 27001:2022
• Internal Audit Procedure for ISO 14001:2026
• Internal Audit Procedure for ISO 9001:2026
• Internal Audit Procedure for ISO/IEC 27001:2022
• Internal Audit Procedure for ISO/IEC 42001
• Internal Audit Program and Plan for ISO/IEC 42001
• Internal Audit Report for EU AI Act
• Internal Audit Report for ISO/IEC 42001
• International Data Transfer Policy for EU GDPR
• International Transfers and Transfer Impact Assessment Procedure for EU GDPR
• ISMS Manual for ISO/IEC 27001:2022
• ISMS Registers and Audit Workbook for ISO/IEC 27001:2022
• ISMS Roles and Responsibilities RACI for ISO/IEC 27001:2022
• ISMS Scope Statement for ISO/IEC 27001:2022
• Joiner, Mover and Leaver Checklist for ISO/IEC 27001:2022
• Joint Controller Arrangement Template for EU GDPR
• Leadership Briefing Deck for NIST 800-171 / CMMC
• Leadership Roles and Quality Culture Procedure for ISO 9001:2026
• Legal and Regulatory Requirements Procedure for NIST AI RMF
• Legal Basis Record for EU GDPR
• Legal Basis Record for GDPR for AI
• Legal, Regulatory and Contractual Requirements Procedure for ISO/IEC 27001:2022
• Legal, Regulatory and Intellectual Property Compliance Policy for ISO/IEC 27001:2022
• Legitimate Interest Assessment (LIA) for EU GDPR
• Legitimate Interest Assessment (LIA) for GDPR for AI
• Legitimate Interest Assessment Procedure for EU GDPR
• Legitimate Interest Assessment Procedure for GDPR for AI
• Level 1 Self-Assessment Checklist for NIST 800-171 / CMMC
• Life Cycle Perspective Worksheet for ISO 14001:2026
• Logging and Monitoring Policy for ISO/IEC 27001:2022
• Logging and Monitoring Procedure for SOC 2
• Logging and Record-Keeping Procedure for EU AI Act
• Maintenance Policy for NIST 800-171 / CMMC
• Maintenance Record for NIST 800-171 / CMMC
• Major Incident Report Data Sheet for DORA (Financial Entities)
• Management Assertion Example for SOC 2
• Management Body DORA Briefing Deck (Financial Entities)
• Management Body ICT Risk Report for DORA (Financial Entities)
• Management Body Oversight and Training Procedure for DORA (Financial Entities)
• Management Body Pack for DORA (Financial Entities)
• Management Body Training Record for DORA (Financial Entities)
• Management Briefing Deck for EU AI Act
• Management Briefing Deck for EU GDPR
• Management Briefing Deck for GDPR for AI
• Management Briefing Deck for ISO/IEC 42001
• Management Briefing Deck for NIST AI RMF
• Management Briefing Deck for SOC 2
• Management Briefing Deck for SOC 2 + AI
• Management Commitment Letter for ISO 14001:2026
• Management Commitment Letter for ISO/IEC 27001:2022
• Management Review Agenda and Minutes for ISO 14001:2026
• Management Review Agenda and Minutes for ISO 9001:2026
• Management Review Agenda and Minutes for ISO/IEC 27001:2022
• Management Review Minutes for EU AI Act
• Management Review Minutes for ISO/IEC 42001
• Management Review Minutes for SOC 2
• Management Review Procedure for ISO 14001:2026
• Management Review Procedure for ISO 9001:2026
• Management Review Procedure for ISO/IEC 27001:2022
• Management Review Procedure for ISO/IEC 42001
• Material Change Notification for DORA (ICT Service Providers)
• Maturity Gap Assessment Workbook (72 subcategories) for NIST AI RMF
• Media Protection and Sanitization Procedure for NIST 800-171 / CMMC
• Media Protection Policy for NIST 800-171 / CMMC
• Media Sanitization Record for NIST 800-171 / CMMC
• Model Anonymity Assessment Form for GDPR for AI
• Model Card Template for NIST AI RMF
• Model DORA Contract Addendum (ICT Service Providers)
• Monitoring, Measurement and Customer Satisfaction Procedure for ISO 9001:2026
• Monitoring, Measurement and Evaluation Procedure for ISO/IEC 42001
• Monitoring, Measurement and Metrics Procedure for ISO/IEC 27001:2022
• Monitoring, Measurement, Analysis and Evaluation Procedure for ISO 14001:2026
• Monitoring, Training and Internal Audit Procedure for EU GDPR
• Network and Data Flow Diagram Guide for NIST 800-171 / CMMC
• Network Security Policy for ISO/IEC 27001:2022
• NIS2 Add-On for ISO/IEC 27001:2022
• NIST AI RMF Crosswalk (ISO/IEC 42001, 23894, 42005, EU AI Act) for NIST AI RMF
• NIST AI RMF Practitioner Guide for NIST AI RMF
• Non-Disclosure Agreement Template for ISO/IEC 27001:2022
• Nonconformity and Corrective Action Record for ISO/IEC 42001
• Nonconformity and Corrective Action Report for ISO 14001:2026
• Nonconformity and Corrective Action Report for ISO 9001:2026
• Nonconformity and Corrective Action Report for ISO/IEC 27001:2022
• Nonconformity, Corrective Action and Continual Improvement Procedure for ISO 14001:2026
• Nonconformity, Corrective Action and Improvement Procedure for ISO 9001:2026
• Nonconformity, Corrective Action and Improvement Procedure for ISO/IEC 27001:2022
• Nonconformity, Corrective Action and Improvement Procedure for ISO/IEC 42001
• Not-High-Risk (Article 6(3)) Assessment for EU AI Act
• Operational Control and Externally Provided Processes Procedure for ISO 14001:2026
• Organizational Knowledge Management for ISO 9001:2026
• Personal Data Breach Policy for EU GDPR
• Personal Data Breach Response Procedure for EU GDPR
• Personal Information in AI Systems Procedure for SOC 2 + AI
• Personnel Screening, Transfer and Termination Procedure for NIST 800-171 / CMMC
• Personnel Security and Training Procedure for SOC 2
• Personnel Security Policy for NIST 800-171 / CMMC
• Physical Access and Visitor Procedure for NIST 800-171 / CMMC
• Physical Access Procedure for SOC 2
• Physical and Environmental Security Policy for ISO/IEC 27001:2022
• Physical Protection Policy for NIST 800-171 / CMMC
• Planning and Control of Changes Procedure for ISO 14001:2026
• Planning and Control of Changes Procedure for ISO 9001:2026
• Planning of Changes Procedure for ISO/IEC 27001:2022
• POA&M and Evidence Workbook for NIST 800-171 / CMMC
• POA&M Management Procedure for NIST 800-171 / CMMC
• Policies Pack for DORA (Financial Entities)
• Policies Pack for EU AI Act
• Policies Pack for EU GDPR
• Policies Pack for GDPR for AI
• Policies Pack for ISO/IEC 27001:2022
• Policies Pack for ISO/IEC 42001
• Policies Pack for NIST 800-171 / CMMC
• Policies Pack for NIST AI RMF
• Policies Pack for SOC 2
• Policies Pack for SOC 2 + AI
• Policy Acknowledgment Form for SOC 2
• Policy and Procedure Approval Record for NIST 800-171 / CMMC
• Post-Incident Review and Lessons Learned Procedure for DORA (Financial Entities)
• Post-Incident Review Report for DORA (Financial Entities)
• Post-Market Monitoring Plan Template for EU AI Act
• Post-Market Monitoring Procedure for EU AI Act
• Practitioner Guide and Program Status for NIST 800-171 / CMMC
• Practitioner Guide for ISO 14001:2026
• Practitioner Guide for ISO 14001:2026
• Practitioner Guide for ISO 9001:2026
• Practitioner Guide for ISO 9001:2026
• Practitioner Guide for ISO/IEC 27001:2022
• Practitioner Guide for ISO/IEC 27001:2022
• Practitioner Guide for ISO/IEC 42001
• Pre-Audit Readiness Checklist for SOC 2
• Privacy and Protection of PII Policy for ISO/IEC 27001:2022
• Privacy Notice Template for EU GDPR
• Privacy Operations Procedure for SOC 2
• Privacy Policy (Internal) for SOC 2
• Privacy Registers Workbook (RoPA, requests, breaches, vendors, transfers, retention) for EU GDPR
• Privacy Request and Complaint Record for SOC 2
• Procedures Pack for EU AI Act
• Procedures Pack for EU GDPR
• Procedures Pack for GDPR for AI
• Procedures Pack for ISO 14001:2026
• Procedures Pack for ISO 9001:2026
• Procedures Pack for ISO/IEC 42001
• Procedures Pack for NIST 800-171 / CMMC
• Procedures Pack for NIST AI RMF
• Procedures Pack for SOC 2
• Procedures Pack for SOC 2 + AI
• Process Map and Interaction Template for ISO 9001:2026
• Processing Activity Intake Form for EU GDPR
• Processing Integrity Procedure for SOC 2
• Processor and Vendor Management Procedure for EU GDPR
• Processor Due Diligence Questionnaire for EU GDPR
• Production Monitoring Procedure for NIST AI RMF
• Production, Service Provision and Release Procedure for ISO 9001:2026
• Program Review and Continual Improvement Procedure for NIST AI RMF
• Program Review Minutes for NIST AI RMF
• Prohibited AI Practices Screening Procedure for EU AI Act
• Project Kickoff Agenda and Progress Report for ISO 14001:2026
• Project Kickoff Agenda and Progress Report for ISO/IEC 27001:2022
• Purpose and Legal Basis Procedure for EU GDPR
• Purpose and Legal Basis Procedure for GDPR for AI
• QMS Records Workbook for ISO 9001:2026
• Quality + Environment Bundle — Complete
• Quality + Environment Bundle — Consultant
• Quality + Environment Bundle — Essentials
• Quality + Information Security Bundle — Complete
• Quality + Information Security Bundle — Consultant
• Quality + Information Security Bundle — Essentials
• Quality and Ethics Concern Log for ISO 9001:2026
• Quality Culture and Ethics Pack for ISO 9001:2026
• Quality Culture and Ethics Statement for ISO 9001:2026
• Quality Management System Procedure for AI Providers for EU AI Act
• Quality Manual for ISO 9001:2026
• Quality Policy and Objectives for ISO 9001:2026
• Readiness and Gap Assessment Workbook for EU AI Act
• Readiness Assessment Workbook (61 criteria) for SOC 2
• Readiness Kit for NIST SP 800-171 and CMMC — Complete
• Readiness Kit for NIST SP 800-171 and CMMC — Consultant
• Readiness Kit for NIST SP 800-171 and CMMC — Essentials
• Readiness Kit for SOC 2 — Complete
• Readiness Kit for SOC 2 — Consultant
• Readiness Kit for SOC 2 — Essentials
• Readiness Workbook for DORA (ICT Service Providers)
• Real-World Testing and Sandbox Procedure for EU AI Act
• Records of Processing Activities Procedure for EU GDPR
• Red-Team Finding Report for NIST AI RMF
• Red-Teaming and Adversarial Testing Procedure for NIST AI RMF
• Register of Information Data Sheet for DORA (ICT Service Providers)
• Register of Information for DORA (Financial Entities)
• Register of Information Procedure for DORA (Financial Entities)
• Register of Information Workbook for DORA (Financial Entities)
• Remote Access, Wireless and Mobile Device Procedure for NIST 800-171 / CMMC
• Remote Working and Mobile Devices Policy for ISO/IEC 27001:2022
• Reporting of Concerns Procedure for ISO/IEC 42001
• Requirement Assessment Record for NIST 800-171 / CMMC
• Requirements and Evidence Matrix Workbook for EU AI Act
• Requirements and Evidence Matrix Workbook for EU GDPR
• Requirements and Evidence Matrix Workbook for GDPR for AI
• Requirements and Evidence Matrix Workbook for ISO/IEC 42001
• Requirements and Evidence Matrix Workbook for NIST AI RMF
• Requirements and Evidence Matrix Workbook for SOC 2 + AI
• Resilience Testing and TLPT Participation Procedure for DORA (ICT Service Providers)
• Resilience Testing and TLPT Procedure for DORA (Financial Entities)
• Responsible AI Use Policy for ISO/IEC 42001
• Responsible and Acceptable AI Use Policy for NIST AI RMF
• Responsible Use of AI Systems Procedure for ISO/IEC 42001
• Retention and Deletion Procedure for EU GDPR
• Risk Acceptance and Exception Form for SOC 2
• Risk Acceptance Form for ISO/IEC 27001:2022
• Risk and Opportunity Management Procedure for ISO 9001:2026
• Risk Assessment and Statement of Applicability Workbook for ISO/IEC 27001:2022
• Risk Assessment and Statement of Applicability Workbook for ISO/IEC 27001:2022
• Risk Assessment and Vulnerability Management Procedure for NIST 800-171 / CMMC
• Risk Assessment Policy for NIST 800-171 / CMMC
• Risk Assessment Procedure for SOC 2
• Risk Assessment Record for NIST 800-171 / CMMC
• Risk Classification Record for EU AI Act
• Risk Management Policy for SOC 2
• Risk Response and Treatment Procedure for NIST AI RMF
• Risk Response Record for NIST AI RMF
• Risk Tolerance and Tiering Procedure for NIST AI RMF
• Risk Tolerance Statement for NIST AI RMF
• Risk Treatment Plan and Residual Risk Approval for ISO/IEC 42001
• Risks, Opportunities and Planning Action Procedure for ISO 14001:2026
• Role Profile and Job Description Template for ISO 9001:2026
• Role Training: AI System Owners and Developers for EU AI Act
• Role Training: AI System Owners for ISO/IEC 42001
• Role Training: AI System Owners for NIST AI RMF
• Role Training: AI System Owners for SOC 2 + AI
• Role Training: All Staff for ISO 14001:2026
• Role Training: All Staff for ISO 9001:2026
• Role Training: All Staff for ISO/IEC 27001:2022
• Role Training: Client-Facing and Technical Teams for DORA (ICT Service Providers)
• Role Training: Control and Risk Owners for ISO/IEC 27001:2022
• Role Training: Control Owners for SOC 2
• Role Training: CUI Users for NIST 800-171 / CMMC
• Role Training: Developers and Data Scientists for GDPR for AI
• Role Training: Developers and Data Teams for ISO/IEC 42001
• Role Training: Developers and TEVV Teams for NIST AI RMF
• Role Training: DPO and Privacy Team for EU GDPR
• Role Training: DPO and Privacy Team for GDPR for AI
• Role Training: Engineers for SOC 2
• Role Training: Function and Risk Owners for DORA (Financial Entities)
• Role Training: Human Oversight Persons for EU AI Act
• Role Training: Independent Reviewers for NIST AI RMF
• Role Training: Internal Assessors for NIST 800-171 / CMMC
• Role Training: Internal Audit for DORA (Financial Entities)
• Role Training: Internal Auditors for EU AI Act
• Role Training: Internal Auditors for ISO 14001:2026
• Role Training: Internal Auditors for ISO 9001:2026
• Role Training: Internal Auditors for ISO/IEC 27001:2022
• Role Training: Internal Auditors for ISO/IEC 42001
• Role Training: Internal Reviewers for DORA (ICT Service Providers)
• Role Training: Internal Reviewers for EU GDPR
• Role Training: Internal Reviewers for GDPR for AI
• Role Training: Internal Reviewers for SOC 2
• Role Training: Internal Reviewers for SOC 2 + AI
• Role Training: IT and Security Administrators for NIST 800-171 / CMMC
• Role Training: Leadership for DORA (ICT Service Providers)
• Role Training: ML Engineers for SOC 2 + AI
• Role Training: Process Owners for ISO 14001:2026
• Role Training: Process Owners for ISO 9001:2026
• Role Training: Senior Leadership for NIST 800-171 / CMMC
• Role Training: Service Owners for DORA (ICT Service Providers)
• Role Training: Staff Handling Personal Data for EU GDPR
• Role Training: Top Management for EU AI Act
• Role Training: Top Management for EU GDPR
• Role Training: Top Management for GDPR for AI
• Role Training: Top Management for ISO 14001:2026
• Role Training: Top Management for ISO 9001:2026
• Role Training: Top Management for ISO/IEC 27001:2022
• Role Training: Top Management for ISO/IEC 42001
• Role Training: Top Management for NIST AI RMF
• Role Training: Top Management for SOC 2
• Role Training: Top Management for SOC 2 + AI
• Roles, Accountability and Training Procedure for NIST AI RMF
• Scope and Roles Procedure (Controller, Processor, Joint Controller) for GDPR for AI
• Scope, Roles and EU Representative Procedure for EU GDPR
• Scoping and Asset Categorization Procedure for NIST 800-171 / CMMC
• Scoping and Readiness Procedure for SOC 2
• Scoping, Asset Inventory and Shared Responsibility Workbook for NIST 800-171 / CMMC
• Secure Development Policy for ISO/IEC 27001:2022
• Secure Development Policy for SOC 2
• Security Assessment Policy for NIST 800-171 / CMMC
• Security Awareness and Insider Threat Training Procedure for NIST 800-171 / CMMC
• Security Awareness Deck for SOC 2
• Security Awareness Quiz for SOC 2
• Security Awareness Training Pack for ISO/IEC 27001:2022
• Security Awareness Training Record for SOC 2
• Security of Processing Procedure for EU GDPR
• Security Roles RACI for SOC 2
• Self-Assessment and SPRS Score Workbook (110 requirements, 320 objectives) for NIST 800-171 / CMMC
• Self-Assessment, SPRS Score and Affirmation Procedure for NIST 800-171 / CMMC
• Senior Official Affirmation Record for NIST 800-171 / CMMC
• Serious Incident and Corrective Action Procedure for EU AI Act
• Serious Incident Report for EU AI Act
• Significant Cyber Threat Notification for DORA (Financial Entities)
• Simplified ICT Risk Management Framework for DORA (Financial Entities)
• Site Environmental Inspection Checklist for ISO 14001:2026
• SOC 2 + AI Add-On — Complete
• SOC 2 + AI Add-On — Consultant
• SOC 2 + AI Add-On — Essentials
• SOC 2 + AI Bundle — Complete
• SOC 2 + AI Practitioner Guide for SOC 2 + AI
• SOC 2 AI Crosswalk (ISO/IEC 42001, NIST AI RMF, EU AI Act) for SOC 2 + AI
• SOC 2 AI Readiness Workbook for SOC 2 + AI
• SOC 2 and ISO/IEC 27001 Crosswalk for SOC 2
• SOC 2 Practitioner Guide for SOC 2
• Special Category and Criminal Data Assessment for EU GDPR
• Special Category Data Assessment for GDPR for AI
• Special Category Data for Bias Correction Justification for EU AI Act
• Spill and Emergency Response Plan for ISO 14001:2026
• Staff ICT Security Awareness Deck for DORA (Financial Entities)
• Stakeholder Engagement and Feedback Procedure for NIST AI RMF
• Standard Contractual Clauses Selection Guide for EU GDPR
• Statement of Applicability Guide for ISO/IEC 42001
• Statement of Applicability Management Procedure for ISO/IEC 27001:2022
• Subcontractor and Register Data Pack for DORA (ICT Service Providers)
• Subcontractor Disclosure Statement for DORA (ICT Service Providers)
• Subcontractor Flow-Down Letter for NIST 800-171 / CMMC
• Subcontractor Flow-Down Procedure for NIST 800-171 / CMMC
• Subcontractor Management Procedure for DORA (ICT Service Providers)
• Supervisory Authority Cooperation and Complaints Procedure for EU GDPR
• Supervisory Authority Interview Preparation Sheet for EU GDPR
• Supervisory Authority Interview Preparation Sheet for GDPR for AI
• Supervisory Readiness Checklist for DORA (Financial Entities)
• Supervisory Review Interview Preparation Sheet for DORA (Financial Entities)
• Supplier and Contractor Environmental Questionnaire for ISO 14001:2026
• Supplier Contract Security Clauses for ISO/IEC 27001:2022
• Supplier Evaluation Form for ISO 9001:2026
• Supplier Security Pack for ISO/IEC 27001:2022
• Supplier Security Policy for ISO/IEC 27001:2022
• Supplier Security Procedure for ISO/IEC 27001:2022
• Supplier Security Questionnaire for ISO/IEC 27001:2022
• System and Communications Protection Policy for NIST 800-171 / CMMC
• System and Information Integrity Policy for NIST 800-171 / CMMC
• System Card Template for NIST AI RMF
• System Description Checklist (DC1-DC9) for SOC 2
• System Description Template (DC 200) for SOC 2
• System Maintenance Procedure for NIST 800-171 / CMMC
• System Security Plan Maintenance Procedure for NIST 800-171 / CMMC
• System Security Plan Template for NIST 800-171 / CMMC
• Tabletop Exercise Record for ISO/IEC 27001:2022
• Technical Documentation and Record Retention Procedure for EU AI Act
• Technical Documentation File Template (Annex IV) for EU AI Act
• Termination and Transfer Checklist for NIST 800-171 / CMMC
• Test Result and Remediation Record for DORA (Financial Entities)
• Test, Evaluation, Verification and Validation (TEVV) Procedure for NIST AI RMF
• TEVV Plan Template for NIST AI RMF
• Third-Party AI Assessment for NIST AI RMF
• Third-Party AI Contract Clauses for NIST AI RMF
• Third-Party and Customer Relationships Procedure for ISO/IEC 42001
• Third-Party and Pre-Trained Model Risk Procedure for NIST AI RMF
• Threat Intelligence and External Contacts Policy for ISO/IEC 27001:2022
• TLPT Scope Specification for DORA (Financial Entities)
• Training and Input Data Procedure (Minimization, Accuracy, Retention, Special Categories) for GDPR for AI
• Training Completion Certificate for DORA (Financial Entities)
• Training Completion Certificate for DORA (ICT Service Providers)
• Training Completion Certificate for EU AI Act
• Training Completion Certificate for EU GDPR
• Training Completion Certificate for GDPR for AI
• Training Completion Certificate for ISO 14001:2026
• Training Completion Certificate for ISO 9001:2026
• Training Completion Certificate for ISO/IEC 27001:2022
• Training Completion Certificate for ISO/IEC 42001
• Training Completion Certificate for NIST 800-171 / CMMC
• Training Completion Certificate for NIST AI RMF
• Training Completion Certificate for SOC 2
• Training Completion Certificate for SOC 2 + AI
• Training Content Summary Preparation Guide for EU AI Act
• Training Deck for ISO 14001:2026
• Training Deck for ISO 9001:2026
• Training Deck for ISO/IEC 27001:2022
• Training Pack for EU AI Act
• Training Pack for EU GDPR
• Training Pack for GDPR for AI
• Training Pack for ISO 9001:2026
• Training Pack for ISO/IEC 42001
• Training Pack for NIST 800-171 / CMMC
• Training Pack for NIST AI RMF
• Training Pack for SOC 2
• Training Pack for SOC 2 + AI
• Transfer Impact Assessment for EU GDPR
• Transition and Certification Readiness Checklist for ISO 14001:2026
• Transition and Implementation Workbook for ISO 14001:2026
• Transition Audit Readiness Checklist for ISO 9001:2026
• Transition Pack for ISO 14001:2026
• Transition Pack for ISO 9001:2026
• Transition Workbook for ISO 9001:2026
• Transition Workbook for ISO 9001:2026
• Transparency and AI Notices Procedure for GDPR for AI
• Transparency and Privacy Notices Procedure for EU GDPR
• Transparency Notices and Content Labels for EU AI Act
• Trustworthiness Evaluation Procedure for NIST AI RMF
• Unsanctioned AI Tools Procedure for SOC 2 + AI
• Use of AI Tools with Personal Data Policy for GDPR for AI
• User Access Management Procedure for SOC 2
• Vendor Management Policy for SOC 2
• Vendor Risk Management Procedure for SOC 2
• Vendor Security and Privacy Clauses for SOC 2
• Vendor Security Assessment for SOC 2
• Verification and Validation Plan Template for ISO/IEC 42001
• Visitor Log for NIST 800-171 / CMMC
• Vulnerability and Patch Management Policy for ISO/IEC 27001:2022
• Vulnerability and Patch Management Procedure for DORA (Financial Entities)
• Vulnerability, Patch and Malware Management Procedure for SOC 2
• Waste Management Procedure for ISO 14001:2026
• Water and Energy Resources Procedure for ISO 14001:2026
• Web Scraping Assessment Form for GDPR for AI
• Web Scraping for AI Procedure for GDPR for AI
• Website and Cookie Compliance Checklist for EU GDPR
• Work Instruction Template for ISO 9001:2026
• Workbooks and Checklists Pack for EU AI Act
• Workbooks and Checklists Pack for EU GDPR
• Workbooks and Checklists Pack for GDPR for AI
• Workbooks and Checklists Pack for ISO/IEC 42001
• Workbooks and Checklists Pack for NIST 800-171 / CMMC
• Workbooks and Checklists Pack for NIST AI RMF
• Workbooks and Checklists Pack for SOC 2
• Workbooks and Checklists Pack for SOC 2 + AI