About Us Contact Blog
Governance DocsGovernance Docs
Which Toolkit?SoA GeneratorFree TemplatesSample ReportsFind the Right AssessmentRecords of Processing (ROPA)Data Privacy Impact AssessmentLegitimate Interests AssessmentTransfer Impact AssessmentPrivacy Risk AssessmentGDPR Gap AssessmentUK GDPR Gap AssessmentCCPA/CPRA Gap AssessmentISO 27701 Gap AssessmentHIPAA Gap AssessmentISO 27001 Risk AssessmentThird-Party Risk AssessmentSoA GeneratorISO 27001 Assessment Tool (Excel)ISO 27001 Gap AssessmentSOC 2 Gap AssessmentNIST CSF 2.0 Gap AssessmentNIST SP 800-53 Gap AssessmentNIST RMF Gap AssessmentCIS Controls Gap AssessmentPCI DSS 4.0 Gap AssessmentNIS2 Gap AssessmentCMMC 2.0 Gap AssessmentNIST SP 800-171 Gap AssessmentFedRAMP Gap AssessmentBSI C5 Gap AssessmentIEC 62443 Gap AssessmentSAMA CSF Gap AssessmentNCA ECC Gap AssessmentISO 20000 Gap AssessmentAI Risk AssessmentAI Impact AssessmentISO 42001 Gap AssessmentEU AI Act Gap AssessmentBusiness Impact AnalysisContinuity Risk AssessmentISO 22301 Assessment Tool (Excel)ISO 22301 Gap AssessmentDORA Gap AssessmentISO 9001 Gap AssessmentISO 13485 Gap AssessmentIATF 16949 Gap AssessmentISO 14001 Gap AssessmentISO 45001 Gap AssessmentISO 45001 Assessment Tool (Excel)HACCP Gap AssessmentEnterprise Risk AssessmentISO 31000 Gap AssessmentData Governance Gap AssessmentProject Management Gap AssessmentAll Gap AssessmentsISO 27001 Internal AuditISO 42001 Internal AuditAboutBlogContactMy AccountCart
FOX v.2.4.9
Browse Toolkits
Governance Docs
  • Browse All Toolkits
  • Information Security & Cybersecurity
  • Data Privacy & Protection
  • Governance, Risk & Compliance
  • Quality Management
  • Health, Safety & Environment
  • AI Governance

My Account

CART

No products in the cart.

Day: August 20, 2026

Phishing-resistant MFA methods compared against NIST SP 800-63B-4 assurance levels

Phishing-Resistant MFA: The Complete 2026 Guide

Governance Docs20th August 2026

Phishing-resistant MFA under NIST SP 800-63B-4: which methods qualify, what AAL2 and AAL3 each require, and why synced…
Read More
Cybersecurity governance obligations under NIS2, DORA, ISO 27001 and NIST CSF 2.0

Cybersecurity Governance: The Definitive 2026 Board Guide

Governance Docs20th August 2026

Cybersecurity governance after NIS2: what boards must approve, why NIST CSF 2.0 added a 6th function, and the…
Read More
Clean desk policy rules for ISO 27001 Annex A 7.7 clear desk and clear screen

Clean Desk Policy: 9 Essential Rules for 2026

Governance Docs20th August 2026

A clean desk policy that passes an ISO 27001 audit: what Annex A 7.7 requires, the 9 rules…
Read More
BYOD policy requirements mapped to ISO 27001:2022 Annex A controls

BYOD Policy: The Essential 2026 Guide for ISO 27001

Governance Docs20th August 2026

A BYOD policy that survives an ISO 27001 audit: the 7 Annex A controls it satisfies, the 9…
Read More
PCI DSS documentation and evidence checklist for v4.0.1 assessments

PCI DSS Documentation: The Complete 2026 Evidence Checklist

Governance Docs20th August 2026

PCI DSS documentation a QSA actually asks for: the 12 requirement areas, the 51 future-dated controls effective 31…
Read More
ISO 27001 vs ISO 42001 comparison chart showing 93 security controls against 38 AI controls

ISO 27001 vs ISO 42001: The Complete 2026 Comparison Guide

Governance Docs20th August 2026

ISO 27001 vs ISO 42001 compared for 2026: 93 security controls versus 38 AI controls, the shared clause…
Read More

Recent Posts

ISO 27001 capacity management under Annex A 8.6 - the three in-scope domains and the two ways to meet the control
ISO 27001 Capacity Management: Complete A.8.6 Guide 2026

October 15, 2026

ISO 27001 web filtering under Annex A 8.23: DNS filtering, network URL filters and endpoint enforcement, with the encrypted DNS bypass gap
ISO 27001 Web Filtering: Complete A.8.23 Guide 2026

October 15, 2026

ISO 27001 physical security monitoring (Annex A 7.4) evidence sets: coverage map, system records, review records, response records, testing records and privacy records
ISO 27001 Physical Security Monitoring: Complete 2026 Guide

October 14, 2026

OASIS database infographic
OASIS Database: The Complete 2026 Guide for AS9100 Suppliers

October 14, 2026

AS9100 supplier management infographic
AS9100 Supplier Management: The Complete 2026 Clause 8.4 Guide

October 14, 2026

Categories

  • Articles
  • DORA
  • GDPR
  • HIPAA
  • ISO 27001
  • ISO 42001 & AI governance
  • ISO 9001
  • Management systems
  • NIS2
  • Security frameworks
  • SOC 2
Governance DocsGovernance Docs

Reliable ISO & compliance documentation toolkits that help your business meet regulatory standards with ease.

Governance Docs LLC
1209 Mountain Road Pl NE, Suite R
Albuquerque, NM 87110, USA
[email protected]
+1 505 289 2455

Toolkits

  • ISO 27001:2022
  • GDPR
  • SOC 2
  • PCI-DSS v4.0
  • HIPAA
  • ISO 42001
  • All toolkits →

Company

  • About Us
  • Blog
  • Contact
  • FAQ
  • Which toolkit do I need?
  • Free templates
  • SoA generator
  • Assessments
  • Sample reports
  • RSS feeds

Policies

  • Privacy Policy
  • Terms & Conditions
  • Refund & Return Policy
  • Delivery Policy
  • Manage cookies
Browse by topicISO 27001ISO 42001 & AI governanceGDPRSOC 2HIPAANIS2DORAISO 9001Management systemsSecurity frameworks
© 2026 Governance Docs LLC. All rights reserved.
Secure checkoutstripeVISA