Practical guides, checklists and articles on ISO, the GDPR, ESG, risk management and reporting — written to be put into practice straight away, not just read and filed away.
Checklist to assess whether the organisation is ready to report in accordance with the VSME standard or the CSRD.
Checklist and key evidence by pillar: governance/IT risk, incidents, resilience testing and IT third parties.
Essential controls and evidence for assessing and preparing for NIS2 compliance.
Articles
Compliance & ISO
A structured roadmap for translating the requirements of the CSRD and ESRS into auditable data collection processes.
Risk Management
How to move from a static risk spreadsheet to a dynamic risk management system, in line with ISO 31000.
ESG & Sustainability
What the VSME voluntary standard requires, and how an SME can report without having to set up a large-company-style sustainability framework.
Browse by area
ISO 27001, GDPR, DORA, NIS2 — implementation and auditing of European standards and legislation.
Strategy, materiality, CSRD/ESRS and VSME, ISO 31000 risk management and decision-making reporting.
Compliance management and whistleblowing software for organisations looking to scale up without relying on spreadsheets.
Get in touch and let us know what help or support you need — we’ll reply within one working day.
This resources hub brings together practical material from iCompliance to help organisations prepare for regulatory and sustainability requirements. The resources are written for management teams, compliance and risk officers, finance leaders and sustainability managers who need clear guidance without legal jargon.
Our checklists are designed as self-assessment tools. The VSME and CSRD readiness checklist helps you verify whether your organisation has the data, responsibilities and processes needed to prepare a sustainability report. The guides on DORA and NIS2 summarise the main obligations related to digital operational resilience and network and information security, and point to the areas that normally require attention first, such as governance, incident management, third-party risk and testing.
The articles are grouped by topic, covering ESG reporting, risk management, governance, compliance and technology. They explain concepts such as double materiality, board risk reporting, ISO 31000 principles and the role of data in sustainability reporting. Each article aims to be practical, with examples, typical questions and next steps.
If you are at an early stage, start with a checklist to understand where you are. If you already have a project under way, the articles can help your team align on terminology and priorities. For board members and executives, the guides offer a short overview of what is expected of them and what questions to ask management.
These materials are general in nature and do not replace professional advice for your specific circumstances. Regulations evolve, so we review and update the content regularly. If you cannot find what you need, or if you would like a template adapted to your sector, contact our team and we will suggest the most suitable support.
New material is added as regulations and good practices evolve, so it is worth returning regularly. If there is a topic you would like us to cover, such as a specific regulation, sector or template, let us know and we will consider it for the next update.
