Guides to the documents and processes an auditor asks about: records, risk assessment, business continuity, GDPR compliance reviews. Every obligation with a reference to the provision.
Business continuity and disaster recovery plans: how they differ, what to include, how to test them and what NIS2, the Polish KSC Act and GDPR require in 2026.
Record of processing activities step by step: Art. 30 GDPR elements, controller vs processor records, under-250 exemption, a sample entry and typical errors.
A 5×5 risk matrix for information security: likelihood and impact scales, acceptance thresholds, a sample risk register and KSC, NIS2 and GDPR requirements.