A step-by-step guide to writing a GDPR privacy notice
GDPR Articles 13–14 require clear privacy notices at collection. Follow this step-by-step guide to draft transparent notices with lawful bases, rights, and transfers.
GDPR · SecureSlate Team
- all posts (2454)
- GRC (639)
- Cybersecurity (194)
- GDPR (115)
- HIPAA (165)
- PCI DSS (44)
- AI (65)
- SOC 2 (264)
- ISO 27001 (276)
- Compliance (4)
- NIST (43)
- TPRM (85)
- Comparisons and Reviews (116)
- ISO 27701 (4)
- ISO 18841 (10)
- ISO 27018 (4)
- ISO 17100 (10)
- ISO 27017 (4)
- ISO 22301 (4)
- ISO 9001 (4)
- Templates (10)
- Whistleblowing (20)
- Integrations (50)
- Trust And Assurance (1)
- ISO 42001 (30)
- CMMC (41)
- Tools & Software (170)
- Trust (53)
- FedRAMP (39)
- HITRUST (13)
- Checklists (4)
- Vendor Risk (3)
- Risk Management (1)
- Security (1)
- DORA (8)
- Vendor Risk Management (5)
- Security Operations (1)
- Access Control (1)
- Strategy (3)
- Guides (11)
- CJIS (1)
- CCPA (1)
- NIS 2 (7)
- Engineering (1)
8 in 10 companies bet on AI agents, but fewer than half have a policy to govern them
Most companies use AI agents, yet fewer than half have a policy to govern them. Learn the risks of Shadow AI and how to close the gap with clear controls.
AIGRC · SecureSlate Team
Millions of AI agents are running without oversight. Is yours one of them?
Millions of AI agents are running without oversight. Is yours one of them? — AI Agents Without Oversight Governance Guide. AI, GRC guidance on controls, evidence,…
AIGRC · SecureSlate Team
AI roles in ISO 42001 certification explained (owners, RACI, and competence)
ISO 42001 expects clear accountability for AI governance. Learn key AI roles— executive sponsor, AIMS owner, model owners, and auditors—and how to document competence.
ISO 42001 · SecureSlate Team
All about the FedRAMP Marketplace: A beginner's guide
FedRAMP Marketplace: The FedRAMP Marketplace is where agencies discover cloud services with FedRAMP status. Understanding listings, package t…
FedRAMP · SecureSlate Team
All you need to know about C3PAOs
C3PAOs are authorized third-party assessors for CMMC Level 2 and 3. Learn what they do, how to select one, assessment flow, costs, and scheduling after 2025.
CMMC · SecureSlate Team
AuditBoard Review (2026): Audit Management Platform for SOX, GRC, and Enterprise Teams
AuditBoard review for 2026 (now Optro): modules, pros and cons, pricing, and how this audit management platform compares for SOX, SOC 2, and enterprise GRC.
Comparisons and reviews · SecureSlate Team
Your auditor is about to ask about AI agents: 9 things they'll want to see
Auditors now ask about AI agents. See the 9 things they expect, from an agent inventory and named owners to permissions, logs and impact assessments.
AIGRC · SecureSlate Team
Authorization as a platform: Lessons from scaling fine-grained access control
Why trust platforms need authorization as infrastructure—not GraphQL middleware. Org roles, resource roles, declarative policy, and what buyers should expect.
SecurityGRC · SecureSlate Team
Automated ISO 27001 vs. manual ISO 27001: How to select the right approach for you
Should you run ISO 27001 manually or use compliance automation? Compare cost, timeline, evidence quality, and team size to choose the right approach.
ISO 27001 · SecureSlate Team
