compliance

A system security plan describes how one information system is protected. Learn what an SSP must include, which NIST edition applies and how to map each section to your written policies and procedures.

Audit coming?The documented procedures are the part an auditor can see. Start from the HR Compliance Policies and Procedures Manual for the employment side, or the Small Business Policies and Procedures Manual for a broader documented base. The letter arrives, or the customer questionnaire does, and the word audit lands in your inbox. The first […]

A practical guide to employee handbooks for small business: which sections federal law triggers at 15, 20 and 50 employees, plus a worked outline for 25 staff.

A practical guide to writing an anti-discrimination policy, complaint procedure, manager routing flow, and retaliation safeguards.

A complete guide to workplace policies and procedures, including essential policy examples and practical steps for development, implementation, and review.

Consent controls can protect personal data while still creating problems when they are implemented poorly. A website may satisfy part of its privacy obligations yet frustrate visitors with oversized pop-up windows, redirect search traffic to the wrong page, or load analytics before a user has made a valid choice. The GDPR regulates the handling of […]

Running a gardening business means facing seasonality, competition, regulations, and pricing pressure. Here are eleven common challenges and practical ways of overcoming each one.

A strong business ethics program needs clear standards, accountable ownership, practical training, confidential reporting, fair investigations, and ongoing monitoring.

ISO is not an acronym.