Cyber Security Awareness Month

Digital fragmented lock on a cyber framework

October has become synonymous with cyber security. Know around the world as Cyber Security Awareness Month, it is a global initiative that raises awareness of the pitfalls, vulnerabilities and best practice of cyber security. What is Cyber Security? Cyber security is the practice of protecting networks, computers, computer systems, programs and applications from unauthorised access, […]

Buy GDPR Policy Template

GDPR written across an office building

Why buy GDPR policy template packs instead of writing them yourself? The simple answer is so that you can spend more time, money and resources doing what you do best!  Write vs Buying Policy Templates If you process personal data, your GDPR program will be a significant policy and procedure framework within your organisation. A […]

ICO’s Guidance for the Data (Use and Access) Act 2025

Magnifying glass over data protection documents

What exactly is the Data (Use and Access) Act 2025? Businesses with data protection obligations can always rely on the Information Commissioners Office (ICO) when it comes to providing guidance and advice. The latest offering from the ICO is extensive guidance on the new Data (Use and Access) Act 2025 (DUAA). The ICO have provided […]

Client Risk Assessment Template

Laptop and man ticking a digital audit checklist

Defining Client Risk Most firms have some form of obligation to carry out due diligence on new and existing clients. This can be to comply with the Money Laundering Regulations, for contract compliance or to meet industry standards. Standard due diligence covers general onboarding questions and verification. However, how does a business know if an […]

Official AML Audit Checklist

Hands around audit description words

Why Use an AML Audit Checklist? Any good audit checklist should enable you to carry out a gap analysis of your anti-money laundering compliance. The AML audit checklist should cover the mandatory rules and requirements set out by the Money Laundering Regulations (MLR), including any amendments. It should also allow you to assess compliance with […]

Suspicious Activity Report Template

Suspicious Activity Report Template

Why use a Suspicious Activity Report Template? It provides the confidence to know that you are collecting, documenting and submitting the right data, in the right format, to the right governing body. It will also save you time and money buy joining 10,000+ firms who already use our templates! Reporting Suspicious Activities Businesses with obligations […]

Free GDPR Information Audit Template

Information Audit Banner

This free GDPR information audit template is already used by thousands of firms with obligations under the UK GDPR. We have designed it to comply with current data protection legislation, which includes the recently enforced Data (Use and Access) Act 2025. The template is provided free by Know Your Compliance Limited and does not require […]

Data (Use and Access) Act (DUAA) Policy

Locks on a data protection background

DUAA Summary The Data Use and Access Act 2025 (“the DUAA”) does not mean starting over with data protection policies and procedures. Rather, it updates some on the existing legislation and regulations and aims to provide simplicity in certain areas. The Act adds to and in some cases updates existing UK data protection laws such […]

How to Assess Vulnerable Customers

People under a magnifying glass

Vulnerable Customers Awareness It is essential that FCA authorised firms know how to assess vulnerable customers. This means understanding what a ‘vulnerable customer’ is and learning how to identify people, situations and circumstances. Potential vulnerabilities can crop up in any customer-business relationship. For this reason, it is mandatory for vulnerable customer awareness to be a […]

Consumer Duty Annual Board Report Guidance

Group of managers in a board meeting

Annual Board Report Overview Section PRIN 2A.8.3 of the FCA Handbook requires firms to prepare a governing body report. This annual board report must set out all results and management information obtained from the mandatory outcome monitoring and testing. The board (or equivalent governing body) must review the report, approve the outcomes and any remedial […]