ISO 42001 Checklist: 7 Clauses, 38 Controls, 1 Big Mistake
An ISO 42001 checklist covering both halves: the 7 mandatory clauses and the 38 Annex A controls, plus…
Read More
FedRAMP Compliance Checklist: The Best 8 Steps for 2027
A FedRAMP compliance checklist for 2026: the 8 steps in order, the Rev5 and 20x paths, and the…
Read More
NIST CSF Audit Checklist: 6 Fields Every Line Needs
There is no CSF certification audit. What an internal NIST CSF audit checklist is for, the six fields…
Read More
NIST CSF Maturity Levels: A Clear 5-Point Scale That Works
CSF 2.0 has no maturity model. Here is a defensible 5-point scale for scoring all 106 outcomes, why…
Read More
NIST CSF Policy Templates: What All 106 Outcomes Need
What NIST CSF policy templates must cover across the six Functions, the documents most programmes are missing, and…
Read More
NIST CSF to 800-53 Mapping: A Clear Guide to All 106
NIST maps all 106 CSF 2.0 outcomes to SP 800-53 Rev 5 with 740 control references. How to…
Read More
NIST CSF 2.0 vs 1.1: The 79 Subcategories That Changed
CSF 2.0 withdrew 79 Subcategories and removed 12 Categories. The full mapping, the 16 outcomes with no predecessor,…
Read More
The NIST CSF GOVERN Function: All 31 Outcomes Explained
The GOVERN function is 31 of the 106 CSF 2.0 outcomes across six Categories, ten of them supply…
Read More
NIST CSF Tiers: A Clear Guide to the 4 Implementation Tiers
The 4 NIST CSF Tiers explained, including the two axes CSWP 29 scores them on and why Tier…
Read More
Is ISO 45001 a Legal Requirement? The Clear Answer for 2026
Is ISO 45001 a legal requirement? No, in any country. But the OH&S law underneath it is mandatory.…
Read More
ISO Climate Change Amendment: 2 Sentences, 31 Standards, 1 Trap
The ISO climate change amendment added 2 sentences to clauses 4.1 and 4.2 across 31 standards. What auditors…
Read More
Annex SL Explained: The Best Guide to 10 ISO Clauses
Annex SL is the harmonized structure behind ISO 9001, 14001, 27001 and 45001. The 10 clauses explained, the…
Read More