September 2, 2026 - Governance Docs

BSI C5 vs ISO 27001 is report against certificate, service against organization. The 4 differences that matter, and…

A combined internal audit covers several standards in one visit. What merges, what stays separate, and the coverage…

A COBIT 2019 implementation is a 7-phase improvement cycle, not a rollout of 40 objectives. The phases, the…

IA9100 is the new name for AS9100 and the first rewrite since Rev D. What the IAQG has…

Entity-level controls come in 3 kinds, and only one can carry a specific risk on its own. How…

The Cyber Essentials questionnaire is the whole assessment. What Danzell changed in April 2026, the auto-fail answers, and…

HACCP validation proves a control measure can work; verification proves it is working. The 3 terms separated, the…

An SPRS score runs from 110 to -203. How the weighting works, the 2 requirements with partial credit,…

SWIFT architecture types A1 to B decide how much of the CSCF applies to you. What sets your…

A double materiality assessment in 6 steps, what the 2026 simplified ESRS changed about running one, and the…

The evaluation of compliance under ISO 45001 clause 9.1.2: the 5 obligations, how it differs from an internal…

An integrated management system manual is optional and still worth writing. What it contains, how the harmonized structure…

Day: September 2, 2026