All GDPR guides can be rather dull, but the ICO’s guide is a good resource to look back on if you’re unsure about something.
They also have some resources for organisations here.
Some parts of it (like the section for intelligence services) probably won’t apply to you.
Other parts (such as the section on direct marketing) might be relevant depending on your line of work.
