Guides and writing
Implementation notes, templates, and recordings for third-party risk, privacy workflows, and Core GRC modules.
Latest
Blog
Data Breach Notification Laws: Deadlines and Requirements by Jurisdiction
Who to notify after a personal data breach, how fast and what to say: GDPR, UK, POPIA, US state and federal rules, Canada, Australia, NIS2 and DORA side by side, with a worked…
James Seeliger
Blog
What Is Third-Party Risk Management (TPRM)? Lifecycle, Regulations and How to Build a Programme
A practical guide to third-party risk management: what TPRM means, the lifecycle regulators expect, how DORA, NIS2, GDPR, PRA, US banking guidance and POPIA frame it, a maturity…
James Seeliger
Blog
SOC 2 Report: What It Contains and How to Review a Vendor's Report
A buyer's guide to the SOC 2 report: the five sections, Type 1 vs Type 2 vs SOC 1 and SOC 3, a 10-step review checklist covering bridge letters, carve-outs, CUECs and exceptions,…
James Seeliger
Blog
What Is GRC? Governance, Risk and Compliance Explained
GRC (governance, risk and compliance) explained: the three parts, GRC in cyber security, GRC vs ERM vs IRM, the EU, UK and South African rules that expect it, a maturity model, a…
James Edward Anthony
Blog
What Is a DSAR? How to Respond to a Data Subject Access Request
A practical guide to data subject access requests: what a DSAR is, who can make one, response deadlines under GDPR, UK GDPR, POPIA/PAIA and CCPA, an eight-step response process, a…
James SeeligerGlossary
Sub-processor
A company a processor engages to carry out part of the processing it performs for a controller.
James
Browse by type
Blog
Product notes, program guidance, and how Core GRC teams run privacy and risk work.
12 items
Glossary
Short definitions for privacy, risk, and compliance terms used across Core GRC.
5 items
Downloads
Files for implementation, including gated packs that ask for a work email first.
2 items
Help Center
Step-by-step guides to setting up and running Core GRC: vendors and assessments, cookie consent, privacy policies, privacy requests, and accessibility scans.
9 items
FAQ
Answers grouped by product area. Open a longer article when you need more than a short reply.
5 sections
Ready to run risk and privacy in one place?
See the modules that match your program in a short demo. Start with one, add more when you need them.