When a DORA major incident must be reported, what each of the three reports contains, who receives them, and a template to prepare before you need it.

Gives each DORA article's own text, what an entity must be able to show and the CISO Times documents that help. It maps nothing to ISO 27001 or NIST CSF (D-51). The workbook's sheets as you will ...

Structure for the documented ICT risk management framework, including its review and approval record. The document from section 1, as you will receive it. Highlighted [[text]] is for you to replace; ...

Specifies requirements for LLM applications covering input handling, output validation, data exposure, logging and agent permissions. An LLM application puts instructions and data in one channel. The ...

States permitted AI uses, prohibited uses, data rules and accountability; the AI domain's single policy. Most organisations do not build AI. They use other people's AI: an assistant inside the office ...

Pre-emptive security overview that answers the common questions before a questionnaire is sent. The document from section 1, as you will receive it. Highlighted [[text]] is for you to replace; shaded ...

Structured handover from an outgoing leader covering open risks, incidents, commitments, suppliers and access. The document from section 1, as you will receive it. Highlighted [[text]] is for you to ...

This document is for the person who has an agreement in front of them and has to say what the security terms in it are worth. It lists the sixteen security terms a business associate agreement should ...

A management-led check before the auditor starts: how to find gaps and exceptions, fix them, and decide when to begin the observation period. Decide what the report is for. Draw the boundary around ...

See what to find out this week online: What should I check this week?About 2 minutes, no account needed. Check one claim's proof online: Is this proof enough?About 2 minutes, no account needed. The ...

Converts DORA gaps into owned, dated actions prioritised by supervisory exposure. 1 Before you start. Complete the DORA Proportionality & Scope Assessment and have the management body approve it ...

Sets out a repeatable method for the security risk analysis: the inventory of electronic patient information, threats, vulnerabilities, ratings and the signed record. Know your role. Know every system ...