SYSTEM MAP · 08 CONNECTED LAYERS
Every claim needs a path to evidence.
Start with a real decision. Follow it across systems, ownership, evidence and failure modes. Then check the relevant legal source and commencement status separately.
Check legal status firstLAYER DIRECTORY
Choose the decision in front of you.
Control counts describe this catalogue, not legal coverage or compliance completeness.
- 01
Discover · 6 controls
Discovery and ownership
Make systems, data categories, purposes, owners and processors visible before deciding what should change.
- 02
Explain · 6 controls
Notice and purpose
Connect itemised data and purposes to the exact collection surface, language, version and route for action.
- 03
Record · 6 controls
Choice and consent evidence
Design affirmative choices, receipts and withdrawal propagation as inspectable system events.
- 04
Respond · 6 controls
Rights and grievance operations
Turn intake, identity risk, system search, action, communication and escalation into one traceable workflow.
- 05
Expire · 6 controls
Retention and deletion
Use purpose and event triggers to drive warnings, holds, deletion, backup expiry and proof.
- 06
Govern · 6 controls
Processor and transfer governance
Keep processor instructions, sub-processors, locations, transfer conditions and exit evidence connected.
- 07
Protect · 12 controls
Security and breach response
Connect safeguards, access, observability, recoverability and incident facts to decision-ready evidence.
- 08
Assure · 6 controls
Governance and assurance
Assign policy, training, testing and heightened-duty evidence without turning assurance into a compliance badge.
LOCAL WORKSPACE NOTE
Give this work a next owner.
Nothing is sent anywhere. Avoid names, personal data or confidential incident details.