What each regime expects of a policy set
Seven regimes, ticked on the register. Each page lists the documents the regime expects, every document it reaches, and the clauses quoted.
ISO/IEC 27001:2022 35 documents expected, 69 types reachedISO/IEC 27701:2025 14 documents expected, 38 types reachedISO/IEC 42001:2023 8 documents expected, 12 types reachedISO 22301:2019 11 documents expected, 15 types reachedDORA (Regulation (EU) 2022/2554) 11 documents expected, 24 types reachedThe NIS2 Directive 15 documents expected, 26 types reachedGDPR (Regulation (EU) 2016/679) 10 documents expected, 16 types reached
Named references the register links and never quotes: SOC 2 (CC1 and CC5 name the same documents; not quoted here); PCI DSS Requirement 12 (the security policy and its topic documents; not quoted here); ISO 37001, anti-bribery management systems (named; not quoted here); ISO 37301, compliance management systems (named; not quoted here).