Privacy & Data Protection Compliance Templates

NIST SP 800-160 is the "gold standard" for security by design, which is important since: (1) you can have security without privacy, but (2) you cannot have privacy without security. Therefore, secure practices are fundamental to any cybersecurity and privacy program.

Our documentation is designed to address common cybersecurity and privacy needs, so that you can demonstrate compliance with your specific requirements. This may be European Union General Data Protection Regulation (EU GDPR), California Consumer Protection Act (CCPA) / California Privacy Rights Act (CPRA), NIST Privacy Framework, or SOC 2 Privacy Principles. Regardless of the framework, you need to have evidence of how both cybersecurity and privacy principles are designed and implemented. Our privacy bundles are uniquely designed to help you comply with leading privacy practices!

Comprehensive Coverage for EU GDPR Cybersecurity & Privacy Compliance Requirements

As a quick summary of your requirements to comply with EU GDPR, your organization is expected to be able prove that both cybersecurity and privacy principles are designed and implemented by design and by default. The reality with compliance assessments is that if something is not documented, you cannot prove it exists. Given that reality, you need to ensure your company has appropriate cybersecurity & privacy documentation. This ranges from policies and standards, to program-level guidance (e.g., risk and vulnerability management), all the way down to risk assessments and procedures.

Our Focus Is To Help Clients Operationalize Privacy & Cybersecurity Principles

Our EU GDPR-specific compliance solutions can help you provide both the evidence of due care and due diligence in getting and staying compliant with the EU GDPR. We developed our products with the concept of Cybersecurity for Privacy by Design (C4P) to address the People, Process & Technology (PPT) components that together build secure and compliant applications, systems, and processes.

• NIST 800-171 R2 to R3 Transition Guide

  Sooner, rather than later, the US Government's global supply chain will have to transition to NIST 8...

• NIST 800-171 R3 Kill Chain

  The CMMC 2.0 & NIST 800-171 R2 version of the CMMC Kill Chain introduces the theory of constrain...

• NIST 800-171 R3 In A Nutshell

  It is worthwhile to take a look at NIST 800-171 R3 through a People, Process, Technology, Data &...

• NIST 800-171 R3

  NIST 800-171 Rev 3 was released on 14 May of this year, and it contains significant changes from the...

---