Customer assurance
Customer security requests lack a consistent, evidence-backed answer.
SOC2 · ISO-27001-2022 · GDPR
Project workspace
Governance,
in practice.
Explore ten connected governance work samples. Inspect the method, evidence requirements and decisions behind each project.
10 projects
AI governance
AI use cases need accountable owners, review criteria and documented oversight.
NIST-AI-RMF-1.0 · ISO-42001-2023 · EU-AI-ACT
Third-party risk
A vendor decision needs more than a completed questionnaire.
ISO-27001-2022 · SOC2 · GDPR
Audit readiness
Controls, evidence and remediation need a single traceable assessment.
SOC2 · ISO-27001-2022 · NIST-CSF-2.0
Executive risk
Risk registers need to support decisions, not just record concerns.
COSO-ERM · NIST-CSF-2.0 · ISO-27001-2022
AI transparency
AI transparency duties need a documented applicability and evidence review.
EU-AI-ACT · NIST-AI-RMF-1.0 · ISO-42001-2023
Shadow AI governance
Unapproved AI use can expose sensitive business information.
ISO-27001-2022 · ISO-42001-2023 · NIST-AI-RMF-1.0
Security questionnaires
Procurement questions need accurate answers linked to approved evidence.
SOC2 · ISO-27001-2022 · NIST-CSF-2.0
Processor governance
Processor relationships require contract and subprocessor oversight.
GDPR · ISO-27001-2022 · DORA
Continuous assurance
Control evidence ages, exceptions accumulate and follow-ups lose ownership.
NIST-CSF-2.0 · SOC2 · ISO-27001-2022
No matching projects
Independent work samples. Evidence basis and implementation scope are identified within each project.