Playbook Guidelines
Advisory playbooks for the CSF suite.
10 playbook guidelines approved by the Governing Council, effective 19/10/2026. Each playbook advises on applying its parent procedure; the published standard remains the sole normative source.
GCSB-GDL-STRAT-001 · v1.0
DOI 10.5281/zenodo.23469452Strategic Implementation Playbook for the Converged Security Framework
Advisory plays for adopting the Strategic Standard: scoping workshops, gap assessment techniques, roadmap design, evidence habits and metrics.
Parent: GCSB-PRC-STRAT-001
Read playbook →
GCSB-GDL-CSF-001 · v1.0
DOI 10.5281/zenodo.23469454Main Implementation Playbook for the Converged Security Framework
Practical plays for the twelve-step Main Standard implementation across governance, risk, technology, identity, response, training, vendors and data protection.
Parent: GCSB-PRC-CSF-001
Read playbook →
GCSB-GDL-GLA-001 · v1.0
DOI 10.5281/zenodo.23469456Governance Implementation Playbook
Board reporting templates, committee rhythms, champion networks, KPI design and compliance register habits for the governance standard.
Parent: GCSB-PRC-GLA-001
Read playbook →
GCSB-GDL-RMA-001 · v1.0
DOI 10.5281/zenodo.23469458Risk Management and Assessment Playbook
Risk register design, assessment facilitation, treatment planning, monitoring cadences and escalation practice for unified risk management.
Parent: GCSB-PRC-RMA-001
Read playbook →
GCSB-GDL-TIA-001 · v1.0
DOI 10.5281/zenodo.23469460Technology Integration and Architecture Playbook
Architecture record keeping, SIEM/PSIM monitoring practice, interoperability, zero trust adoption and analytics assurance.
Parent: GCSB-PRC-TIA-001
Read playbook →
GCSB-GDL-IAM-001 · v1.0
DOI 10.5281/zenodo.23469464Identity and Access Management Playbook
Identity lifecycle practice, MFA rollout, privileged access control, federation and monitoring for the identity standard.
Parent: GCSB-PRC-IAM-001
Read playbook →
GCSB-GDL-DPP-001 · v1.0
DOI 10.5281/zenodo.23469466Data Protection and Privacy Playbook
Data inventories, lawful bases, impact assessments, retention, individual rights handling, transfers and breach notification practice.
Parent: GCSB-PRC-DPP-001
Read playbook →
GCSB-GDL-IRBC-001 · v1.0
DOI 10.5281/zenodo.23469468Incident Response and Business Continuity Playbook
Response protocols, escalation drills, continuity planning with RTO/RPO tiers, exercises and post-incident learning.
Parent: GCSB-PRC-IRBC-001
Read playbook →
GCSB-GDL-TRA-001 · v1.0
DOI 10.5281/zenodo.23469470Training and Awareness Playbook
Cross-functional training design, awareness campaigns, competency assessment and exercise planning for the training standard.
Parent: GCSB-PRC-TRA-001
Read playbook →
GCSB-GDL-CCSO-001 · v1.0
DOI 10.5281/zenodo.23469472CCSO Office Establishment Playbook
Establishing and running the adopter's CCSO office: appointment, authority, governance, risk register, audit and change control.
Parent: GCSB-PRC-CCSO-001
Read playbook →