Skip to main content

Sources last verified on 17 August 2026. Methodology

Role guide

Founders and small teams

In a small company every function above is you. Nothing in the rules on file gives small companies an automatic carve out, and the work is very tractable when approached as one plan instead of rule by rule firefighting.

How to read this page. The obligations belong to your organisation, not to a role or a sector. Everything here is practical emphasis: which official duties this audience usually leads or feeds into, with links to the official text. Finishing one function's work never makes the company compliant by itself.

Work your function usually leads

  • One company planSection 3, official text →

    Decide applicability once, list the duties once, and assign owners even if several owners are the same person.

  • Security basicsRule 6, official text →

    The safeguards floor applies regardless of size; most items map to controls a small team already wants.

  • Breach readinessRule 7, official text →

    The clocks are short and do not scale with headcount. A one page runbook beats improvisation.

Tools for this role