Governance Docs, Author at Governance Docs

The FTC Safeguards Rule covers 13 types of non-bank financial institution, not just banks. Here is the two-part…

A user access review is the control auditors test hardest. Here is the seven-step process, the ISO 27001…

A NIST Privacy Framework data map shows every data action, store and party. What to include, how much…

NIST Privacy Framework vs ISO 27701: a free risk model against a certifiable management system. Which to start…

NIST Privacy Framework vs GDPR: one is a voluntary risk model, one is law. Where they overlap, where…

NIST Privacy Framework Implementation Tiers: Partial, Risk Informed, Repeatable and Adaptive — and why Tier 4 is not…

A NIST Privacy Framework Profile records what you achieve and what you need. How to build an honest…

A problematic data action can arise from processing that is authorised, accurate and secure. The ten questions that…

NIST Privacy Framework 1.1 vs 1.0: four Categories retired, six added and all 34 Subcategory identifiers that moved,…

Privacy risk vs cybersecurity risk: why a privacy problem can arise from processing that is authorised, accurate and…

The NIST Privacy Framework explained: the Core, Profiles and Implementation Tiers, all 102 Subcategories, and why version 1.1…

A WISP for a sole practitioner is smaller, but not for the reason most assume. What 16 CFR…

Author: Governance Docs