September 2, 2026 - Governance Docs

A gifts and hospitality policy has to fix 5 things a salesperson can apply at dinner. What ISO…

ISO 27018 applies in one narrow case: public cloud, personal data, acting as processor. The 6 obligations that…

An ISO 21001 internal audit has to test whether learning happened. What to check clause by clause, the…

Authorised Economic Operator status comes as AEOC or AEOS, against 4 cumulative criteria. What the audit examines, and…

STAR Level 2 comes in 2 forms: certification built on ISO 27001, attestation built on SOC 2. Which…

The ICAAP is the bank's own capital argument. The 6 building blocks, the 2 perspectives, what the 2026…

A journey risk assessment weighs 5 factors, and the first is whether the trip is needed. Which journeys…

Automated decision-making technology under the CCPA: what counts, which decisions are caught, the 3 rights, and why HR…

The strategic asset management plan converts organizational objectives into asset objectives. The 9 sections, who writes it, and…

A facility management SLA needs 5 elements, and the last 2 are usually missing. Writing service levels that…

Compliance monitoring tests whether controls work now. How it differs from audit, the 6 steps to a monitoring…

RTO and RPO measure different things, and 2 more metrics decide whether either is achievable. Where each number…

Day: September 2, 2026