Practical request library

Start with the request that landed.

Each guide gives a direct answer first, then separates policy, implementation evidence, operating evidence, self-attestation and unsupported claims.

information security

A practical process for scoping, owning, evidencing and reviewing an enterprise security questionnaire without making unsupported claims.

Reviewed 13 July 2026technical founder

incident response

What to send, redact and qualify when a customer requests an incident-response policy or evidence that incident processes operate.

Reviewed 13 July 2026security lead

identity and access

A scoped approach to providing access-review evidence that distinguishes a completed review from a policy or current user list.

Reviewed 13 July 2026system owner

certifications and independent assessments

How to clarify an ISO/IEC 27001 tender requirement without confusing certification, an information security system and general alignment.

Reviewed 13 July 2026management

employee lifecycle

How to assemble event-specific evidence that an employee’s access was removed, including scope, timing, ownership and limitations.

Reviewed 13 July 2026people lead