About Us Contact Blog
Governance DocsGovernance Docs
Which Toolkit?SoA GeneratorFree TemplatesSample ReportsFind the Right AssessmentRecords of Processing (ROPA)Data Privacy Impact AssessmentLegitimate Interests AssessmentTransfer Impact AssessmentPrivacy Risk AssessmentGDPR Gap AssessmentUK GDPR Gap AssessmentCCPA/CPRA Gap AssessmentISO 27701 Gap AssessmentHIPAA Gap AssessmentISO 27001 Risk AssessmentThird-Party Risk AssessmentSoA GeneratorISO 27001 Assessment Tool (Excel)ISO 27001 Gap AssessmentSOC 2 Gap AssessmentNIST CSF 2.0 Gap AssessmentNIST SP 800-53 Gap AssessmentNIST RMF Gap AssessmentCIS Controls Gap AssessmentPCI DSS 4.0 Gap AssessmentNIS2 Gap AssessmentCMMC 2.0 Gap AssessmentNIST SP 800-171 Gap AssessmentFedRAMP Gap AssessmentBSI C5 Gap AssessmentIEC 62443 Gap AssessmentSAMA CSF Gap AssessmentNCA ECC Gap AssessmentISO 20000 Gap AssessmentAI Risk AssessmentAI Impact AssessmentISO 42001 Gap AssessmentEU AI Act Gap AssessmentBusiness Impact AnalysisContinuity Risk AssessmentISO 22301 Assessment Tool (Excel)ISO 22301 Gap AssessmentDORA Gap AssessmentISO 9001 Gap AssessmentISO 13485 Gap AssessmentIATF 16949 Gap AssessmentISO 14001 Gap AssessmentISO 45001 Gap AssessmentISO 45001 Assessment Tool (Excel)HACCP Gap AssessmentEnterprise Risk AssessmentISO 31000 Gap AssessmentData Governance Gap AssessmentProject Management Gap AssessmentAll Gap AssessmentsISO 27001 Internal AuditISO 42001 Internal AuditAboutBlogContactMy AccountCart
FOX v.2.4.9
Browse Toolkits
Governance Docs
  • Browse All Toolkits
  • Information Security & Cybersecurity
  • Data Privacy & Protection
  • Governance, Risk & Compliance
  • Quality Management
  • Health, Safety & Environment
  • AI Governance

My Account

CART

No products in the cart.

Day: September 28, 2026

Transfer impact assessment example: screening, destination questions and supplementary measures for a US HR platform

Transfer Impact Assessment Example: A Complete 2026 Walkthrough, Step by Step

Governance Docs28th September 2026

A transfer impact assessment example for a retailer sending employee data to a US HR platform with support…
Read More
DPIA vs LIA: legitimate interests assessment under Article 6(1)(f) compared with a DPIA under Article 35

DPIA vs LIA: The Essential 2026 Guide to Which You Need (and When You Need Both)

Governance Docs28th September 2026

DPIA vs LIA: a legitimate interests assessment tests your lawful basis, a DPIA tests high-risk processing. A side-by-side…
Read More
When is a DPIA required: three mandatory cases, nine WP248 criteria and the two-criteria rule

When Is a DPIA Required? The Essential 2026 Guide to the 9 Criteria

Governance Docs28th September 2026

When is a DPIA required? The three cases in Article 35(3), the nine WP248 criteria, the two-criteria rule,…
Read More
DPIA example image showing steps for data protection impact assessment.

DPIA Example: A Complete 2026 Walkthrough, Step by Step

Governance Docs28th September 2026

A complete DPIA example for telematics and in-cab cameras: screening against the WP248 criteria, description, necessity test, risks…
Read More
AI risk assessment chart with key risks listed for governance.

Generative AI Risk Assessment: The Complete 2026 Guide with Example

Governance Docs28th September 2026

How to run a generative AI risk assessment with the ISO 42001 method: the risks to look for,…
Read More
Enterprise Risk Register guide with columns, ratings, and reporting tips.

Enterprise Risk Register: The Definitive 2026 Guide with Example

Governance Docs28th September 2026

What an enterprise risk register should contain, how it relates to ISO 31000 and COSO ERM, the columns…
Read More
Business continuity risk assessment example with criteria and treatment plan.

Business Continuity Risk Assessment Example: Complete 2026 Walkthrough

Governance Docs28th September 2026

A complete business continuity risk assessment example for a fictional manufacturer: ISO 22301 criteria, a rated risk register,…
Read More
Comparison of Privacy Risk Assessment and DPIA for data protection.

Privacy Risk Assessment vs DPIA: The Essential 2026 Guide

Governance Docs28th September 2026

Privacy risk assessment vs DPIA: what each covers, when GDPR Article 35 makes a DPIA mandatory, how ISO…
Read More
Chart answering is AS9100 worth it by showing how OCAP risk rating and PBS/RP move AS9100 audit duration against the 50 percent floor

Is AS9100 Worth It? The Complete 2026 Cost-Benefit Case

Governance Docs28th September 2026

Is AS9100 worth it? A 2026 cost-benefit case: $20,000 to $45,000 to certify, audit days fixed by AS9104/1A,…
Read More
    ←
  • 1
  • 2

Recent Posts

ISO 27001 independent review under Annex A 5.35 compared with the clause 9.2 internal audit and clause 9.3 management review
ISO 27001 Independent Review: Complete A.5.35 Guide 2026

October 19, 2026

ISO 27001 acceptable use policy requirements under Annex A control A.5.10
ISO 27001 Acceptable Use Policy: Complete 2026 Guide

October 19, 2026

ISO 27001 network security controls A.8.20, A.8.21 and A.8.22 compared
ISO 27001 Network Security: Complete A.8.20–8.22 Guide 2026

October 18, 2026

ISO 27001 malware protection under Annex A 8.7: tooling, awareness, controlled access and change management
ISO 27001 Malware Protection: Complete A.8.7 Guide 2026

October 18, 2026

ISO 27001 capacity management under Annex A 8.6 - the three in-scope domains and the two ways to meet the control
ISO 27001 Capacity Management: Complete A.8.6 Guide 2026

October 15, 2026

Categories

  • Articles
  • DORA
  • GDPR
  • HIPAA
  • ISO 27001
  • ISO 42001 & AI governance
  • ISO 9001
  • Management systems
  • NIS2
  • Security frameworks
  • SOC 2
Governance DocsGovernance Docs

Reliable ISO & compliance documentation toolkits that help your business meet regulatory standards with ease.

Governance Docs LLC
1209 Mountain Road Pl NE, Suite R
Albuquerque, NM 87110, USA
[email protected]
+1 505 289 2455

Toolkits

  • ISO 27001:2022
  • GDPR
  • SOC 2
  • PCI-DSS v4.0
  • HIPAA
  • ISO 42001
  • All toolkits →

Company

  • About Us
  • Blog
  • Contact
  • FAQ
  • Which toolkit do I need?
  • Free templates
  • SoA generator
  • Assessments
  • Sample reports
  • RSS feeds

Policies

  • Privacy Policy
  • Terms & Conditions
  • Refund & Return Policy
  • Delivery Policy
  • Manage cookies
Browse by topicISO 27001ISO 42001 & AI governanceGDPRSOC 2HIPAANIS2DORAISO 9001Management systemsSecurity frameworks
© 2026 Governance Docs LLC. All rights reserved.
Secure checkoutstripeVISA