Frameworks
Write the control once. Answer every framework it touches.
GDPR, ISO 27001, ISO 37301, NIS2 and the Whistleblowing Directive overlap far more than they differ. VPoint keeps one control set underneath them, with the mapping shown, not asserted.
One control, four frameworks
Awareness training is one control. It answers GDPR Art. 39(1)(b), ISO 27001 A.6.3, ISO 37301 7.3 and NIS2 Art. 21(2)(g) at the same time, with one owner and one body of evidence.
Where it fits
Framework management, including ISO 27001, ISO 37301 and NIS2, is part of the Institutional plan.
One control
Awareness training
Owner: Compliance lead. Evidence: completion log, certificates
One control
Supplier due diligence
Owner: Procurement. Evidence: processor register, signed DPAs
One control
Risk assessment
Owner: Compliance lead. Evidence: risk register, DPIA records
One control
Incident response
Owner: DPO. Evidence: incident log, notification record
Mapped to
The list of obligations keeps growing. The control set underneath it does not.
Mapped today
- GDPR
- Whistleblowing (Directive 2019/1937)
- ISO 27001
- ISO 37301
- NIS2
In development
- EU AI Act
- ISO 42001
Related
- GDPR operationsRequests, records, consent and incidents, kept as one record.
- WhistleblowingAnonymous intake, encrypted case work, protected sources.
- Workforce trainingCourses drafted from your own policies, with dated acknowledgements.
- NIS2 and the Czech Cybersecurity ActSecurity measures and NÚKIB obligations, evidenced from your records.
Let's make your
compliance visible.
Thirty minutes with our European compliance team. No sales theatre, no obligation.
Get in touch
Tell us where you are with compliance and we'll come back within one business day.
- Address
- Na Roudné 443/18, 301 00 Plzeň, Czech Republic
- Phone
- +420 774 787 107
- info@vpointapp.com
- Company ID
- IČO 25232240