<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
  <url><loc>https://trustpractitioners.org/</loc><priority>1.0</priority></url>
  <url><loc>https://trustpractitioners.org/membership</loc><priority>0.9</priority></url>
  <url><loc>https://trustpractitioners.org/learn</loc><priority>0.9</priority></url>
  <url><loc>https://trustpractitioners.org/certifications</loc><priority>0.9</priority></url>
  <url><loc>https://trustpractitioners.org/framework</loc><priority>0.9</priority></url>
  <url><loc>https://trustpractitioners.org/policies</loc><priority>0.8</priority></url>
  <url><loc>https://trustpractitioners.org/templates</loc><priority>0.8</priority></url>
  <url><loc>https://trustpractitioners.org/guides</loc><priority>0.8</priority></url>
  <url><loc>https://trustpractitioners.org/intelligence</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/organizations</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/verify</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/about</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/governance</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/ethics</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/partners</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/resources</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/glossary</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/members</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/events</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/status</loc><priority>0.3</priority></url>
  <url><loc>https://trustpractitioners.org/privacy</loc><priority>0.3</priority></url>
  <url><loc>https://trustpractitioners.org/cookies</loc><priority>0.3</priority></url>
  <url><loc>https://trustpractitioners.org/terms</loc><priority>0.3</priority></url>
  <url><loc>https://trustpractitioners.org/sub-processors</loc><priority>0.3</priority></url>
  <url><loc>https://trustpractitioners.org/learn/dtf-101-what-digital-trust-means-in-your-job</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/dtf-110-ethics-and-judgement-calls-for-practitioners</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/dtf-120-reading-a-regulation-without-a-lawyer</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/prv-201-gdpr-in-practice-from-articles-to-an-operating-program</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/prv-202-us-state-privacy-laws-in-practice-ccpa-cpra-and-the-rest</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/prv-203-hipaa-in-practice-for-healthtech-and-business-associates</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/prv-210-data-subject-rights-operations-gdpr-ccpa-and-hipaa-access</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/prv-220-building-a-record-of-processing-and-data-inventory-that-survives-audit</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/prv-230-consent-and-cookie-management-platforms-in-practice</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/prv-240-privacy-in-marketing-consent-lists-and-campaign-compliance</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/prv-250-dpia-and-pia-running-one-that-changes-a-decision</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/prv-260-breach-notification-decisions-under-pressure</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/prv-270-retention-and-deletion-that-actually-deletes</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/prv-280-international-transfers-sccs-transfer-assessments-and-the-dpf</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/dgv-210-data-classification-and-handling-rules-people-follow</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/dgv-220-data-mapping-and-discovery-connectors-owners-and-drift</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/dgv-230-secure-data-sharing-data-rooms-remanence-and-what-people-miss</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/grc-201-soc-2-from-the-inside-scoping-ownership-evidence-and-the-auditor</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/grc-202-iso-27001-implementation-not-interpretation</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/grc-203-control-mapping-and-evidence-reuse-across-soc-2-iso-nist-csf-and-hitrust</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/grc-210-policies-people-read-writing-versioning-acknowledgement-and-training-binding</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/grc-220-evidence-management-and-audit-readiness</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/grc-230-internal-controls-and-sox-for-practitioners</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/grc-240-pci-dss-in-practice-scoping-saqs-and-compensating-controls</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/grc-250-hitrust-for-healthtech-self-assessment-to-validated</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/grc-260-running-a-security-awareness-program-auditors-accept</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/rsk-201-risk-assessment-as-a-craft-scoping-scenarios-and-judgement</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/rsk-210-quantifying-risk-from-heat-maps-to-money</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/rsk-220-treatment-acceptance-and-exceptions-that-expire</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/rsk-230-risk-appetite-kris-and-the-board-conversation</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/aud-201-owning-a-control-accountability-delegation-and-follow-through</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/aud-210-populations-completeness-and-sampling</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/aud-220-evidence-that-holds-collection-freshness-and-reuse</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/aud-230-automated-audit-tests-and-continuous-control-monitoring</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/aud-240-working-with-auditors-walkthroughs-questions-and-findings</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/aud-250-framework-scope-as-a-guardrail-not-a-burden</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/aud-260-control-maturity-and-status-reporting</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/cyb-201-software-supply-chain-sboms-vex-and-component-monitoring-in-practice</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/cyb-210-threat-intelligence-for-risk-decisions</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/cyb-220-vulnerability-management-governance-slas-exceptions-and-evidence</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/cyb-230-incident-and-breach-readiness-tabletop-to-regulator</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/cyb-240-access-reviews-that-pass-audit</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/cyb-250-cyber-insurance-applications-and-attestations</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/tpr-201-building-a-third-party-risk-program-from-zero-and-at-scale</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/tpr-210-reading-a-soc-2-report-opinion-scope-exceptions-cuecs-and-subservice-organisations</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/tpr-215-handling-cuecs-turning-complementary-user-entity-controls-into-your-own-obligations</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/tpr-220-vendor-due-diligence-questionnaires-sig-caiq-custom-and-scoring</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/tpr-230-contracting-for-risk-dpas-baas-security-schedules-and-right-to-audit</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/tpr-240-continuous-vendor-monitoring-breach-intelligence-attestation-expiry-and-recertification</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/tpr-250-fourth-party-and-concentration-risk</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/tpr-260-answering-customer-security-questionnaires-the-other-side-of-the-table</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/tpr-270-regulated-outsourcing-dora-occ-and-fca-registers-in-practice</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/aig-201-ai-inventory-and-use-case-intake-in-practice</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/aig-210-ai-risk-and-impact-assessment-nist-ai-rmf-and-eu-ai-act-tiers-applied</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/aig-220-third-party-ai-and-model-vendor-governance</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/aig-230-ai-acceptable-use-and-policy-that-engineers-follow</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/trs-201-building-and-running-a-trust-center</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/trs-210-program-attestations-and-certificates-of-diligence-for-buyers-insurers-and-regulators</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/trs-220-m-a-cyber-diligence-buy-side-and-sell-side</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/ops-201-a-risk-register-executives-use</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/ops-210-findings-that-get-fixed-task-remediation-and-evidence-management</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/ops-220-digital-trust-metrics-and-board-reporting</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/learn/ops-290-capstone-build-a-90-day-trust-program-for-a-real-organisation</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/certifications/ADTP-EP</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/certifications/ADTP-PM</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/certifications/DTFC</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/certifications/CDTP</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/certifications/CATP</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/certifications/CPTP</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/certifications/CTTP</loc><priority>0.7</priority></url>
  <url><loc>https://trustpractitioners.org/framework/GOV-01</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/GOV-02</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/GOV-03</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/GOV-04</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/RSK-01</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/RSK-02</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/RSK-03</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/RSK-04</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/OBL-01</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/OBL-02</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/OBL-03</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/DAT-01</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/DAT-02</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/DAT-03</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/DAT-04</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/ACC-01</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/ACC-02</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/ACC-03</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/ACC-04</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/OPS-01</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/OPS-02</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/OPS-03</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/OPS-04</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/OPS-05</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/TPR-01</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/TPR-02</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/TPR-03</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/RES-01</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/RES-02</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/RES-03</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/RES-04</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/AIG-01</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/AIG-02</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/AIG-03</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/ASR-01</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/ASR-02</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/ASR-03</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/ASR-04</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/framework/ASR-05</loc><priority>0.6</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-001</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-002</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-003</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-010</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-011</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-012</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-013</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-014</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-015</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-020</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-021</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-022</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-023</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-030</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-031</loc><priority>0.5</priority></url>
  <url><loc>https://trustpractitioners.org/guides/ADTP-GDE-032</loc><priority>0.5</priority></url>
</urlset>
