October 1, 2026 - Governance Docs

NERC CIP-010 guide: R1 baselines and change control, R2 monitoring, R3 vulnerability assessments, R4 transient assets and audit…

NIS2 supply chain security under Article 21: what the directive requires, how to assess suppliers, contract clauses and…

CMMC POA&M rules for Level 2: minimum score, 180-day closeout, which requirements cannot be deferred and what the…

How to write a NIST 800-171 SSP: scope, boundary, control implementation statements, Rev 2 vs Rev 3 and…

DPDP data principal rights under India's DPDP Act and Rules: what individuals can request, how fiduciaries must respond…

The MiCA transitional period ended on 1 July 2026. What ESMA expects from unauthorized and authorized crypto-asset service…

What an ISO 14971 risk management report must contain, how it differs from the risk management file, and…

How the Cyber Resilience Act treats open source: when software is in scope, steward obligations, manufacturer duties and…

Use this AS9100 internal audit checklist to test your aerospace QMS: process approach, performance, product safety, configuration and…

Plan your BSI C5:2026 transition: what changed from C5:2020, new criteria types, reported deadlines and an attestation roadmap.

CCPA consumer request deadlines: response times for know, delete, correct and opt-out requests, plus a workflow and evidence…

CIS Controls IG2 guide: which organizations need Implementation Group 2, what it adds beyond IG1, and how to…

Day: October 1, 2026