RCM
Qualify
Facts, actors, data, countries, tools and real deadline.
START WITH YOUR GOAL
A concrete problem.
A concrete problem.
A clear compliance path.
You do not need to choose between audit, DPO, DPIA or documentation. Describe the expected result: RCM assembles the right perimeter and useful evidence.
CHOOSE BY SITUATION
What result
What result
Are you looking?
Each card indicates the starting point, the assembled topics and the expected output.
DESK 01 · MOROCCO · LAW 09-08
CNDP Compliance Desk
Prepare and follow formalities without losing track between processing activities, documents and transfers.
- Declaration or authorization
- File F-118
- Monitoring table
Seller & Transfer Desk
A documented decision for each supplier, contract and transfer.
- DPA and Article 28
- CSC, TIA and CNDP
- Risk and remediation
GDPR operational management
Maintain records, requests, incidents, projects and controls over time.
- Internal counter
- Control Plan
- Steering dashboard
Privacy Risk & Training
Detect risk before launch and train teams to decide.
- Screening and DPIA
- Training by role
- Mock exercises
GDPR preparation
Diagnosis, mapping, priorities and maintainable documentary base.
- Targeted audit
- Roadmap
- Governance
External DPO
An independent referent advises, controls and alerts within the defined perimeter.
- Annual program
- Notice to projects
- Authority cooperation
SECTOR SOLUTIONSYour job changes
Your job changes
the starting point.
BPO, ESN, SaaS, commerce, HR, health, tourism, education and associations: discover the flows, risks and deliverables specific to your activity.
FROM NEED TO DELIVERABLE
A solution is not
A solution is not
A vague promise.
The framework always specifies the scope, dependencies, exclusions and the person responsible for each action.
Assemble
The expertise strictly necessary for the result.
Deliver
Documents, decisions, controls and assigned plan.
Maintain
DPO tracking or clear transfer to your teams.
NOT SURE WHERE TO START?
Frame my needs →
Provide context, not jargon.
In 30 minutes, we identify the right first deliverable, the information to gather and the topics that can wait.