September 13, 2026 - Governance Docs

IEC 62304 vs ISO 13485: one is the QMS, the other the software life cycle inside it. Clause-by-clause…

IEC 62304 software safety classification explained: how Class A, B and C are decided, the Class C default,…

Fourth-party risk explained: the subcontractor you never contracted with, the regimes that reach it (DORA, GDPR, HIPAA), the…

A vendor due diligence checklist built on the Interagency Guidance's 14 factors, tiered by risk, with the evidence…

How to run a third-party risk assessment: the 12 inherent-risk tiering questions, how a score becomes a tier,…

What a TPRM policy must contain, which regimes require it (NIST CSF GV.SC-01, SR-1, ISO 27001 5.19, EBA,…

A third-party risk management framework mapped to 12 regimes at once: Interagency Guidance, NIST CSF 2.0, DORA, ISO…

The 2023 Interagency Guidance on Third-Party Relationships explained: what it rescinded, its lifecycle, the 14 due diligence factors…

The TPRM lifecycle stage by stage: planning, due diligence, contracting, monitoring and exit, with the entry and exit…

TPRM, third-party risk management, explained: the five-stage lifecycle regulators use, the twelve regimes that require it, and what…

GENIUS Act compliance cost has no published benchmark. A 7-step method to size it from the statute and…

GENIUS Act vs MiCA: who may issue, what backs the token, what the holder is promised, the usage…

Day: September 13, 2026