GDPR Implementation Toolkit 1. Data Retention Policy2. Data Retention Schedule3. EU GDPR Readiness Assessment4. Employee Privacy Notice5. Supplier Employee Privacy Notice6. Register of Privacy Notices7. Data Protection Officer Job Description8. Data Protection Officer Appointment Letter9. Data Protection Officer Terms of Appointment10. Website Privacy Policy11. Website Terms & Conditions12. Cookie Policy13. Guidelines for Data Inventory and Processing Activities Mapping14. Inventory of Processing Activities15. Data Protection Impact Assessment Methodology16. DPIA Register17. Data Breach Response and Notification Procedure18. Data Subject Consent Form19. Data Subject Access Request Form20. Data Subject Disclosure Form21. IT Security Policy22. Security Procedures For IT Department23. Bring Your Own Device(BYOD) Policy24. Mobile Device and Teleworking Policy25. Clear Desk and Clear Screen Policy26. Information Classification Policy27. Anonymization and pseudonymization Policy28. Policy on the use of Encryption29. Disaster Recover Plan30. Internal Audit Procedure31.Appendix-ISO 27001 Internal Audit Checklist32. Project Plan for Complying with the EU GDPR33. Privacy Notice34. Data Subject Consent Withdrawal Form35. Parental Consent Form36. Parental Consent Withdrawal Form37. Access Control Policy38. Security Procedures for IT Department39. Data Breach Register40. Data Breach Notification Form to the Supervisory Authority41. GDPR Response to DSAR42. Confirmation for Erasure Data43. GDPR Agreement for the Appointment of an EU Representative.44. GDPR Confirmation for Closed DSAR45. Standard Contractual Clauses for the Transfer of Personal Data Controller to Controller46. Standard Contractual Clauses for the Transfer of Personal Data Controller to Processor47. Standard Contractual Clauses for the Transfer of Personal Data Processor to Processor48. Standard Contractual Clauses for the Transfer of Personal Data Processor to Controller49. Confirmation of Data Subject Access Request Procedure50. Confirmation of Data Subject Rights Request51. Controller to Controller Data Processing Agreement52. Cover Letter to Portability Response53. Cross Border Personal Data Transfer Procedure54. Data Breach Notification Form to Data Subjects55. Data Subject Requests Communication Register56. Employee personal data protection policy57. Personal Data Protection Policy58. Rejection of Unfounded or Excessive Request59. Request Closing Letter60. Request for Confirmation of Authority61. Response on Auto Decision Making-Restriction on Processing-Accepted62. Response on Auto Decision Making-Restriction on Processing-Rejected63. Response on Consent Withdrawal - Restriction Request - Accepted64. Response on Consent Withdrawal - Restriction Request - Rejected65. Response on Processing Restriction Request - Complaint - Accepted66. Response on Processing Restriction Request - Complaint - Rejected67. Response to Rectification of Data Request68. GDPR Supplier Data Processing Agreement Version A69. GDPR Supplier Data Processing Agreement Version B70. Processor GDPR Compliance Questionnaire NIST CSF 2.0 Implementation Toolkit 1. Acceptable Use Policy2. Access and Account Management Policy3. Asset Disposal and Sanitization Policy4. Business Continuity Plan with Office Operation5. Business Continuity Plan for remote only operation6. Change and Patch Management Policy7. Data Encryption Policy8. Data Retention and Destruction Policy9. Disaster Recovery Plan10. Governance, Risk, And Compliance Management Policy11. HR Security Policy12. Incident Response Plan13. Information Security Management Program14. Information Security Policy15. Information Security Risk Management Framework16. Mobile Device Management and Remote Access Policy17. NIST CSF Excel Implementation18. NIST CSF Excel Project Checklist19. NIST CSF Internal Audit Status Report20. NIST CSF Management Review Agenda21. Personal Data Protection Policy22. Physical Security Policy23. Risk Assessment tool NIST CSF MAPPINGS24. Secure Configuration and System Hardening Policy25. Secure Software Development Life Cycle26. Security Audit and Monitoring Policy27. Security Awareness Training Policy28. Systems and Network Security Policy29. Third-Party Security Management Policy30. Third-Party Security Management Procedure31. Third-party Information Security Risk Assessment Questionnaire32. Vulnerability Management Policy Data Governance Framework 1. Data Governance Framework2. Data Governance Implementation Plan3. Data Governance Roadmap4. Data Governance Project Plan5. Data Governance Policy6. Data Access and Control Policy7. Data Audit and Compliance Procedure8. Data Backup and Recovery Policy9. Data Breach and Incident Response Policy10. Data Change Management Procedure11. Data Classification Policy12. Data Disposal and Deletion Procedure13. Data Governance Ownership Procedure14. Data Privacy Policy15. Data Quality and Integrity Policy16. Data Retention and Archiving Policy17. Data Security Policy18. Third-Party Data Management Policy
