GDPR Implementation Toolkit

1. Data Retention Policy
2. Data Retention Schedule
3. EU GDPR Readiness Assessment
4. Employee Privacy Notice
5. Supplier Employee Privacy Notice
6. Register of Privacy Notices
7. Data Protection Officer Job Description
8. Data Protection Officer Appointment Letter
9. Data Protection Officer Terms of Appointment
10. Website Privacy Policy
11. Website Terms & Conditions
12. Cookie Policy
13. Guidelines for Data Inventory and Processing Activities Mapping
14. Inventory of Processing Activities
15. Data Protection Impact Assessment Methodology
16. DPIA Register
17. Data Breach Response and Notification Procedure
18. Data Subject Consent Form
19. Data Subject Access Request Form
20. Data Subject Disclosure Form
21. IT Security Policy
22. Security Procedures For IT Department
23. Bring Your Own Device(BYOD) Policy
24. Mobile Device and Teleworking Policy
25. Clear Desk and Clear Screen Policy
26. Information Classification Policy
27. Anonymization and pseudonymization Policy
28. Policy on the use of Encryption
29. Disaster Recover Plan
30. Internal Audit Procedure
31.Appendix-ISO 27001 Internal Audit Checklist
32. Project Plan for Complying with the EU GDPR
33. Privacy Notice
34. Data Subject Consent Withdrawal Form
35. Parental Consent Form
36. Parental Consent Withdrawal Form
37. Access Control Policy
38. Security Procedures for IT Department
39. Data Breach Register
40. Data Breach Notification Form to the Supervisory Authority
41. GDPR Response to DSAR
42. Confirmation for Erasure Data
43. GDPR Agreement for the Appointment of an EU Representative.
44. GDPR Confirmation for Closed DSAR
45. Standard Contractual Clauses for the Transfer of Personal Data Controller to Controller
46. Standard Contractual Clauses for the Transfer of Personal Data Controller to Processor
47. Standard Contractual Clauses for the Transfer of Personal Data Processor to Processor
48. Standard Contractual Clauses for the Transfer of Personal Data Processor to Controller
49. Confirmation of Data Subject Access Request Procedure
50. Confirmation of Data Subject Rights Request
51. Controller to Controller Data Processing Agreement
52. Cover Letter to Portability Response
53. Cross Border Personal Data Transfer Procedure
54. Data Breach Notification Form to Data Subjects
55. Data Subject Requests Communication Register
56. Employee personal data protection policy
57. Personal Data Protection Policy
58. Rejection of Unfounded or Excessive Request
59. Request Closing Letter
60. Request for Confirmation of Authority
61. Response on Auto Decision Making-Restriction on Processing-Accepted
62. Response on Auto Decision Making-Restriction on Processing-Rejected
63. Response on Consent Withdrawal - Restriction Request - Accepted
64. Response on Consent Withdrawal - Restriction Request - Rejected
65. Response on Processing Restriction Request - Complaint - Accepted
66. Response on Processing Restriction Request - Complaint - Rejected
67. Response to Rectification of Data Request
68. GDPR Supplier Data Processing Agreement Version A
69. GDPR Supplier Data Processing Agreement Version B
70. Processor GDPR Compliance Questionnaire

NIST CSF 2.0 Implementation Toolkit

1. Acceptable Use Policy
2. Access and Account Management Policy
3. Asset Disposal and Sanitization Policy
4. Business Continuity Plan with Office Operation
5. Business Continuity Plan for remote only operation
6. Change and Patch Management Policy
7. Data Encryption Policy
8. Data Retention and Destruction Policy
9. Disaster Recovery Plan
10. Governance, Risk, And Compliance Management Policy
11. HR Security Policy
12. Incident Response Plan
13. Information Security Management Program
14. Information Security Policy
15. Information Security Risk Management Framework
16. Mobile Device Management and Remote Access Policy
17. NIST CSF Excel Implementation
18. NIST CSF Excel Project Checklist
19. NIST CSF Internal Audit Status Report
20. NIST CSF Management Review Agenda
21. Personal Data Protection Policy
22. Physical Security Policy
23. Risk Assessment tool NIST CSF MAPPINGS
24. Secure Configuration and System Hardening Policy
25. Secure Software Development Life Cycle
26. Security Audit and Monitoring Policy
27. Security Awareness Training Policy
28. Systems and Network Security Policy
29. Third-Party Security Management Policy
30. Third-Party Security Management Procedure
31. Third-party Information Security Risk Assessment Questionnaire
32. Vulnerability Management Policy

Data Governance Framework

1. Data Governance Framework
2. Data Governance Implementation Plan
3. Data Governance Roadmap
4. Data Governance Project Plan
5. Data Governance Policy
6. Data Access and Control Policy
7. Data Audit and Compliance Procedure
8. Data Backup and Recovery Policy
9. Data Breach and Incident Response Policy
10. Data Change Management Procedure
11. Data Classification Policy
12. Data Disposal and Deletion Procedure
13. Data Governance Ownership Procedure
14. Data Privacy Policy
15. Data Quality and Integrity Policy
16. Data Retention and Archiving Policy
17. Data Security Policy
18. Third-Party Data Management Policy