Your guide to the 6 lawful bases for data processing under GDPR
GDPR Article 6 lists six lawful bases for processing data. Compare consent, contract, legal obligation, vital interests, public task, and legitimate interests.
GDPR · SecureSlate Team
- all posts (2468)
- AI (66)
- Cybersecurity (197)
- HIPAA (168)
- ISO 27001 (277)
- SOC 2 (267)
- PCI DSS (45)
- GRC (640)
- TPRM (86)
- GDPR (115)
- Compliance (4)
- NIST (43)
- Comparisons and Reviews (116)
- ISO 27701 (4)
- ISO 18841 (10)
- ISO 27018 (4)
- ISO 17100 (10)
- ISO 27017 (4)
- ISO 22301 (4)
- ISO 9001 (4)
- Templates (10)
- Whistleblowing (20)
- Integrations (50)
- Trust And Assurance (1)
- ISO 42001 (30)
- CMMC (41)
- Tools & Software (170)
- Trust (53)
- FedRAMP (39)
- HITRUST (13)
- Checklists (4)
- Vendor Risk (3)
- Risk Management (1)
- Security (1)
- DORA (8)
- Vendor Risk Management (5)
- Security Operations (1)
- Access Control (1)
- Strategy (3)
- Guides (11)
- CJIS (1)
- CCPA (1)
- NIS 2 (7)
- Engineering (1)
Your guide to the 8 values of GRC engineering
values of GRC engineering: Eight values such as automation, transparency, ownership, measurability, reuse, security by design, collaboration, and continuou…
GRC · SecureSlate Team
Your guide to the ISO 27001 Annex A controls (2022): themes, SoA, and evidence
ISO 27001 Annex A lists 93 controls in four themes. Learn how to select controls, document your Statement of Applicability, and collect audit-ready evidence.
ISO 27001 · SecureSlate Team
Your practical guide to meeting the CMMC requirements
A practical playbook to meet CMMC requirements: scope CUI/FCI, gap assess against your level, build SSP and POA&M, collect evidence, and prepare for assessment.
CMMC · SecureSlate Team
Your ultimate guide to mastering the TPRM lifecycle
Master the end-to-end TPRM lifecycle: from intake and tiering through monitoring, reassessment, and offboarding.
TPRM · SecureSlate Team
GitHub Security Breach 2026: How a Malicious VS Code Extension Exposed 3,800 Repositories
How a malicious VS Code extension exposed 3,800 GitHub repositories in the 2026 breach, why it worked, and what your organization should do to avoid it.
Cybersecurity · SecureSlate Team
ISO 27001 annual obligations: the complete checklist for surveillance audit readiness
ISO 27001 annual obligations: the complete checklist for surveillance audit readiness, covering what to review, document, and prove between audits.
ISO 27001 · SecureSlate Team
4 lessons learned during our ISO 42001 audit (and how to apply them)
Learn what to expect in an ISO 42001 audit: 4 practical lessons on stakeholder alignment, AI training, integrating controls into existing workflows, and…
ISO 42001 · SecureSlate Team
5 best GRC software solutions for enterprise teams in 2026
Five enterprise GRC software patterns for 2026: continuous testing, AI workflows, framework reuse, audit collaboration, integrations, and TCO for scaling teams.
Tools & SoftwareComparisons and reviews · SecureSlate Team
The 5 best HIPAA compliance software options for 2026
HIPAA compliance software for 2026: five options for business associates, from continuous monitoring and BAAs to PHI evidence and multi-framework mapping.
HIPAAComparisons and reviews · SecureSlate Team
