Remove Application Remove Gap Analysis Remove Risk Reduction
article thumbnail

GDPR Compliance Checklist: How ZenGRC Automates Your Data Privacy Program 

Reciprocity

Lawful Basis and Processing Documentation GDPR requires a documented lawful basis for all processing: Determine and document the appropriate legal basis for each activity Implement mechanisms to obtain and record valid consent Establish processes for handling consent withdrawal Document legitimate interest assessments where applicable Maintain records (..)

article thumbnail

ISO 27001 Certification Requirements & Standards

Reciprocity

Third, create a project plan and a project risk register. Perform a Gap Analysis. A gap analysis gives you a high-level summary of what needs to be done to attain certification and allows you to examine and compare your organization’s current information security arrangements to the ISO 27001 standards.

Audit 52
article thumbnail

Audit Checklist for SOC 2

Reciprocity

.” The most prevalent types of service organizations to which the SOC applies include, but are not limited to: Software as a service (SaaS) businesses that offer software, applications, and websites. Therefore, select the trust services criteria that are appropriate and applicable to your services. Perform a SOC 2 Gap Analysis.

Audit 52