Independent UK governance, risk & complianceOur editorial standards ↗Practical guidance. Accountable decisions.

Find your starting point

Start with the decision in front of you.

Choose your task and organisation to find a useful sequence of guidance, tools and working records.

What do you need to do?

This selects relevant resources. It does not decide your legal obligations or send your selections anywhere.

Your suggested route

Begin with scope and ownership.

Identify your activities and responsibilities, then review your evidence and assign the next steps.

  1. Follow the GRC foundations playbook ↗
  2. Review your current readiness ↗
  3. Bring the findings into a working review ↗
Open your sector starter pack ↗

Handling a live incident?

Contain and escalate through your organisation’s response process. Check any applicable notification duties and deadlines promptly. A resource finder cannot assess a live emergency or send a notification. Open the incident and breach guide ↗