Each checklist follows the official text and names the article, clause or control every item comes from. Read them here for free; the PDF asks for your e-mail.
ISO/IEC 27001:2022 and Amd 1:2024
For organisations preparing for ISO/IEC 27001:2022 certification. Covers the mandatory ISMS requirements of clauses 4 to 10 and the four themes of Annex A (93 controls).
Directive (EU) 2022/2555 (NIS2)
Checks for organisations that may fall under Directive (EU) 2022/2555, covering scope, governance, risk-management measures and incident reporting. National transposition laws differ, so confirm each point against the law of your member state.
Regulation (EU) 2022/2554 (DORA)
Key obligations of the Digital Operational Resilience Act, applicable since 17 January 2025, grouped by its five pillars. Use it to find gaps before a supervisory review.
Regulation (EU) 2016/679 (GDPR)
Practical checks against the core obligations of Regulation (EU) 2016/679 for controllers and processors. Use it to find gaps before an audit, a customer review or a supervisory authority inquiry.
Regulation (EU) 2024/1689 (AI Act)
Checks under Regulation (EU) 2024/1689, grouped by role: every organisation, providers and deployers of high-risk AI systems, transparency duties and general-purpose AI models.
These checklists summarise the official texts to help you plan. They are not legal advice, and national laws or guidance may add requirements. Check the official text before relying on an item.
