Rather than all of a sudden finding yourself in a bad situation, it’s better to see it coming (when possible). Key Risk Indicators (KRI) help with that. Key Risk Indicators are used for measuring the likelihood of something happening and will tell you if that consequence will exceed the organization’s risk appetite. These measurements can be shown as percentages, currency, numbers, values, etc.
To know what a joint controller is you must know what the GDPR defines as a controller to begin with. A controller is the party that decides how the personal data will be processed. A controller can use another party to process the personal data on their behalf. We call them Processors. If you’re a controller and need to work with another party who is also a controller, you’re considered either Multi Controllers or Joint Controllers.