September 30, 2026 - Governance Docs

How to design third-party risk reporting: audiences, key metrics, tiering views, concentration, findings, exceptions and how to present…

How to run AI bias testing: define groups and outcomes, choose metrics, build test data, set thresholds, investigate…

What risk culture is, why it decides whether enterprise risk management works, how to assess it with surveys…

What the maximum tolerable period of disruption is, how it differs from RTO and RPO, how to set…

How ISO 27001 risk acceptance works: criteria under clause 6.1.2, owner approval under 6.1.3, thresholds, exceptions, records, review…

How to prioritize gaps after an assessment: risk, regulatory exposure, effort, dependencies, quick wins, scoring, sequencing into waves…

How to run a pandemic risk assessment for business continuity: scenarios, absence assumptions, critical roles, suppliers, remote work,…

How to run a third-party AI impact assessment for vendor models: scoping, supplier questions, evidence gaps, contract terms,…

How risk aggregation works in enterprise risk management: grouping methods, common causes, correlation, simple scoring and quantitative options,…

Day: September 30, 2026