Employee Privacy Governance for GDPR and ISO/IEC 27701
A practical CISO and HR compliance playbook for governing employee PII under GDPR, ISO/IEC 27701:2025, ISO/IEC 27001:2022, NIS2, DORA, NIST CSF 2.0, and COBIT 2019.
14 min
NIST
Explore articles in the NIST category
91 articles
CISO Due Diligence File: ISO 27001 Evidence for 2026
A practical guide for CISOs, compliance leaders and business owners who need defensible ISO 27001 evidence for NIS2 management accountability, DORA governance, supplier oversight and GDPR Article 32 security of processing.
15 min
PII in Security Logs: GDPR, NIS2 and DORA Playbook
Security logs are vital for incident response, but often contain PII. This playbook shows how to govern logs across GDPR, ISO 27701, NIS2 and DORA.
Secure File Transfer Governance for ISO 27001 Audits
A practical guide for CISOs and compliance teams to govern secure file transfer, map ISO/IEC 27001:2022 controls to GDPR, NIS2 and DORA, and produce audit-ready evidence.
14 min
Cloud Shared Responsibility Matrix for ISO, NIS2, DORA
A practical CISO guide to building a cloud shared responsibility matrix that proves who owns each control, what evidence is required, and how cloud providers and subprocessors are governed across ISO/IEC 27001:2022, NIS2, DORA and GDPR.
14 min
PII Access Governance for ISO 27701:2025 and GDPR
A scenario-driven guide to building audit-ready PII access governance across ISO/IEC 27701:2025, GDPR, ISO/IEC 27001:2022, NIS2, DORA, NIST CSF 2.0, and COBIT 2019 using Clarysec policies, registers, mapping tables, and practical review workflows.
Zero Trust Architecture 2026: Audit-Ready Evidence
A practical guide to turning NIST SP 800-207 Zero Trust Architecture into audit-ready evidence for ISO/IEC 27001:2022, NIS2, DORA, GDPR and customer security reviews.
14 min
Secure-by-Demand Software Procurement in 2026
Secure-by-demand procurement moves supplier security, privacy, resilience and product assurance into the buying decision. This flagship guide shows how Clarysec maps ISO/IEC 27001:2022 supplier controls to NIS2, DORA, GDPR, CRA expectations, NIST CSF 2.0 and COBIT-oriented audit evidence before contracts are signed.
PII Disclosure Requests Under GDPR and ISO 27701
A practical governance model for validating, approving, minimizing, securely disclosing, recording, and evidencing law enforcement and regulator PII disclosure requests under GDPR, ISO 27701:2025, ISO/IEC 27001:2022, NIS2, DORA, NIST, COBIT 2019, and Clarysec policy toolkits.