Playbooks
End-to-end paths, from the first step to the evidence an auditor will ask for.
A playbook links several screens around one piece of work. Each says who does what (role badges), which screens it uses, what the app keeps as proof, and what the app does not do. No playbook promises compliance: the app helps you prepare and track, the certification body or your counsel decides.
Prepare for a framework
Run a recurring activity
Write and exchange documents
- Write a policy or a procedure by sections · Procedure flowcharts · Download a policy as Word or PDF · Import and export with Excel templates
For a first end-to-end path, start with Getting started.
- Prepare for ISO 27001From the assessment to the statement of applicability, risks, internal audit and audit pack, in the order the certification auditor will ask for it.Role: Compliance managerRole: Administrator
- Prepare for SOC 2Choose the categories, assess, keep recurring evidence and show that controls hold over time.Role: Compliance manager
- Prepare for DORATurn the framework on, keep the vendor register, handle and document incidents and their deadlines, within the limits of the app.Role: Compliance manager
- Prepare for NIS2Turn the framework on, link your controls, keep risks, vendors and incidents, and prepare notification deadlines.Role: Compliance manager
- Prepare for the AI ActList AI systems, classify them, follow the obligations shown, write the impact assessment and get it approved.Role: Compliance managerRole: Approver
- Run an access reviewStart a campaign, have reviewers decide, close, remove access by hand in Jira and keep the proof.Role: Compliance managerRole: Approver
- Run an internal auditPlan the year's programme, work through the checklist, record findings and their actions, prepare the management review.Role: Compliance manager
- Handle an incidentRecord, follow the status, reassess risks, prepare notification deadlines and write the lessons learned.Role: Compliance manager
- The lifecycle of a policyWrite, approve, have read and accepted, revise and retire a policy, with the acknowledgement as proof.Role: Compliance managerRole: Approver
- Write a policy or a procedure by sectionsThe three document types, the policy and procedure templates, the section editor, the coverage of linked controls and what the assistant adds.Role: Compliance manager
- Procedure flowchartsDraw a procedure in the text of a policy: the drawing, the editor, the assistant's suggestion and the text form.Role: Compliance manager
- Download a policy as Word or PDFHand over a policy or a procedure as a file, what the file holds, what the log keeps of it, and the PDF of approved policies in the audit pack.
- Import and export with Excel templatesFill in an Excel template to create or correct risks, assets, controls, the statement of applicability and vendors, with a preview before anything is written.Role: Compliance manager
Was this page helpful?