About Us Contact Blog
Governance DocsGovernance Docs
Which Toolkit?SoA GeneratorFree TemplatesSample ReportsFind the Right AssessmentRecords of Processing (ROPA)Data Privacy Impact AssessmentLegitimate Interests AssessmentTransfer Impact AssessmentPrivacy Risk AssessmentGDPR Gap AssessmentUK GDPR Gap AssessmentCCPA/CPRA Gap AssessmentISO 27701 Gap AssessmentHIPAA Gap AssessmentISO 27001 Risk AssessmentThird-Party Risk AssessmentSoA GeneratorISO 27001 Assessment Tool (Excel)ISO 27001 Gap AssessmentSOC 2 Gap AssessmentNIST CSF 2.0 Gap AssessmentNIST SP 800-53 Gap AssessmentNIST RMF Gap AssessmentCIS Controls Gap AssessmentPCI DSS 4.0 Gap AssessmentNIS2 Gap AssessmentCMMC 2.0 Gap AssessmentNIST SP 800-171 Gap AssessmentFedRAMP Gap AssessmentBSI C5 Gap AssessmentIEC 62443 Gap AssessmentSAMA CSF Gap AssessmentNCA ECC Gap AssessmentISO 20000 Gap AssessmentAI Risk AssessmentAI Impact AssessmentISO 42001 Gap AssessmentEU AI Act Gap AssessmentBusiness Impact AnalysisContinuity Risk AssessmentISO 22301 Assessment Tool (Excel)ISO 22301 Gap AssessmentDORA Gap AssessmentISO 9001 Gap AssessmentISO 13485 Gap AssessmentIATF 16949 Gap AssessmentISO 14001 Gap AssessmentISO 45001 Gap AssessmentISO 45001 Assessment Tool (Excel)HACCP Gap AssessmentEnterprise Risk AssessmentISO 31000 Gap AssessmentData Governance Gap AssessmentProject Management Gap AssessmentAll Gap AssessmentsISO 27001 Internal AuditISO 42001 Internal AuditAboutBlogContactMy AccountCart
FOX v.2.4.9
Browse Toolkits
Governance Docs
  • Browse All Toolkits
  • Information Security & Cybersecurity
  • Data Privacy & Protection
  • Governance, Risk & Compliance
  • Quality Management
  • Health, Safety & Environment
  • AI Governance

My Account

CART

No products in the cart.

Day: August 15, 2026

Basel III prudential risk adoption across BCBS jurisdictions

Basel III in 2026: Adoption Is Still Incomplete

Governance Docs15th August 2026

Basel III was set to be in effect from 1 January 2023, but adoption runs jurisdiction by jurisdiction…
Read More
NIST SP 800-30 risk assessment methodology and its three tiers

NIST SP 800-30: The Three Tiers of Risk Assessment

Governance Docs15th August 2026

NIST SP 800-30 explained — the three tiers a risk assessment must run at, the four-step process, and…
Read More
NIST SP 800-53 security and privacy controls catalog

NIST SP 800-53: The Baselines, and Release 5.2.0

Governance Docs15th August 2026

NIST SP 800-53 Rev 5 now ships patch releases. What Release 5.2.0 added, why SP 800-53B matters more…
Read More
NIST SP 800-171 revisions and CUI protection requirements

NIST SP 800-171: Which Revision Your Contract Actually Names

Governance Docs15th August 2026

NIST published SP 800-171 Rev 3 in May 2024, but CMMC still runs on Rev 2 because 32…
Read More
The DPDP Act commencement timeline for India's data protection law

The DPDP Act Timeline: What Applies in 2026 and 2027

Governance Docs15th August 2026

India's DPDP Act is commencing in three tranches. What is already in force, what lands on 13 November…
Read More
ASME NQA-1 nuclear quality assurance requirements

NQA-1: Nuclear Quality Assurance and Which Edition Binds You

Governance Docs15th August 2026

ASME NQA-1 explained — what the standard covers, commercial grade dedication, and why the newest edition is not…
Read More
SAMA compliance and the Cyber Security Framework for Saudi financial institutions

SAMA Compliance: The Cyber Security Framework Maturity Levels

Governance Docs15th August 2026

SAMA compliance explained — the four domains of the Cyber Security Framework, the six maturity levels you are…
Read More
MiCA crypto-asset regulation and the end of the transitional period

MiCA: The Grandfathering Period Has Now Expired Everywhere

Governance Docs15th August 2026

MiCA grandfathering ended on 1 July 2026 in every Member State. What Article 143(3) allowed, what ESMA's register…
Read More
ISO 21001 educational organization management systems

ISO 21001:2025: The Educational Management System Standard

Governance Docs15th August 2026

ISO 21001:2025 is now the current edition and the 2018 standard is withdrawn. What an educational organization management…
Read More
ISO 39001 road traffic safety management systems

ISO 39001: Road Traffic Safety Management Explained

Governance Docs15th August 2026

ISO 39001 explained — the Safe System approach, exposure and performance factors, the free 2024 amendment, and the…
Read More
ISO 37301 compliance management systems standard

ISO 37301: The Certifiable Compliance Management Standard

Governance Docs15th August 2026

ISO 37301:2021 explained — what a compliance management system must contain, the free 2024 climate amendment, and how…
Read More
ESG reporting in the EU after the Omnibus simplification package

ESG Reporting in 2026: What the EU Simplification Changed

Governance Docs15th August 2026

ESG reporting after the EU Omnibus — stop-the-clock, the ESRS quick fix, the value chain cap and VSME,…
Read More
    ←
  • 1
  • 2
  • 3
  • 4
  • →

Recent Posts

ISO 27001 capacity management under Annex A 8.6 - the three in-scope domains and the two ways to meet the control
ISO 27001 Capacity Management: Complete A.8.6 Guide 2026

October 15, 2026

ISO 27001 web filtering under Annex A 8.23: DNS filtering, network URL filters and endpoint enforcement, with the encrypted DNS bypass gap
ISO 27001 Web Filtering: Complete A.8.23 Guide 2026

October 15, 2026

ISO 27001 physical security monitoring (Annex A 7.4) evidence sets: coverage map, system records, review records, response records, testing records and privacy records
ISO 27001 Physical Security Monitoring: Complete 2026 Guide

October 14, 2026

OASIS database infographic
OASIS Database: The Complete 2026 Guide for AS9100 Suppliers

October 14, 2026

AS9100 supplier management infographic
AS9100 Supplier Management: The Complete 2026 Clause 8.4 Guide

October 14, 2026

Categories

  • Articles
  • DORA
  • GDPR
  • HIPAA
  • ISO 27001
  • ISO 42001 & AI governance
  • ISO 9001
  • Management systems
  • NIS2
  • Security frameworks
  • SOC 2
Governance DocsGovernance Docs

Reliable ISO & compliance documentation toolkits that help your business meet regulatory standards with ease.

Governance Docs LLC
1209 Mountain Road Pl NE, Suite R
Albuquerque, NM 87110, USA
[email protected]
+1 505 289 2455

Toolkits

  • ISO 27001:2022
  • GDPR
  • SOC 2
  • PCI-DSS v4.0
  • HIPAA
  • ISO 42001
  • All toolkits →

Company

  • About Us
  • Blog
  • Contact
  • FAQ
  • Which toolkit do I need?
  • Free templates
  • SoA generator
  • Assessments
  • Sample reports
  • RSS feeds

Policies

  • Privacy Policy
  • Terms & Conditions
  • Refund & Return Policy
  • Delivery Policy
  • Manage cookies
Browse by topicISO 27001ISO 42001 & AI governanceGDPRSOC 2HIPAANIS2DORAISO 9001Management systemsSecurity frameworks
© 2026 Governance Docs LLC. All rights reserved.
Secure checkoutstripeVISA