Author: Governance Docs

What does SOC 2 cost and how long does it take? Here are the main cost factors, the…

The SOC 2 audit tests your controls independently. Here is what it involves, the process, how to prepare,…

SOC 2 documentation turns security practice into an auditable report. Here are the essential policies, the evidence you…

SOC 2 Type 1 vs Type 2: one tests control design at a point in time, the other…

The SOC 2 Trust Services Criteria define what your auditor evaluates. Here are all five - security, availability,…

A GDPR gap analysis shows exactly where you stand against the regulation. Here is a step-by-step method to…

The GDPR data subject rights put individuals in control of their data. Here are all eight rights, how…

A GDPR DPA is required whenever a third party processes personal data for you. Here is what a…

The seven GDPR principles are the foundation of the whole regulation. Here is what each one requires in…

The accountability principle makes documentation central to GDPR. Here is a complete checklist of the records you need…

The right ISO 27001 policy templates turn documentation from daunting to achievable. Here are the policies you need…

The ISO 27001 audit tests your ISMS in practice. Here is what auditors check, how the stages work,…