Legal & Regulations

Guidance on regulatory and legislative requirements such as UK CS&R, GDPR and DORA, separate from voluntary certification frameworks.

• What Is a Subprocessor?
• What are the incident reporting requirements under DORA (Digital Operational Resilience Act)?
• How to map your business functions
• Understanding CAF Indicators of Good Practice Scoring
• What is GDPR?
• Where can I find a DPIA template?
• ICO Contact details and link to report a breach
• What legislation/regulations do I need to assess for the Legal register?
• Do I need to appoint a Data Protection officer?
• What are the incident reporting requirements under the Cyber Security and Resilience Bill?