Governance Docs, Author at Governance Docs

The FTC Safeguards Rule for tax preparers sets ten obligations at 16 CFR 314.4. What each requires, what…

A written information security plan template is only the shape. Here is what a WISP must contain under…

NERC CIP vs IEC 62443 compared: mandatory versus voluntary, impact ratings versus zones and conduits, and how to…

NERC CIP audit preparation: writing the RSAW narrative, computing your own intervals, the three checks worth running first,…

CIP-015 internal network security monitoring is not enforceable until 1 October 2028, not September 2025. What the standard…

CIP-014 physical security explained: the two separate unaffiliated third-party gates at R2 and R6, the six R5 functions,…

CIP-013 supply chain risk management: the planning stage everyone skips, the six procurement elements, and what to do…

NERC CIP patch management under CIP-007 R2: the two separate 35-calendar-day clocks, named patch sources, and mitigation plans…

NERC CIP low impact explained: the seven CIP-003 Attachment 1 topics, the vendor remote access control added in…

BES Cyber System categorization under CIP-002: the high, medium and low criteria, the process auditors test, and the…

NERC CIP compliance explained: how RSAW audits work, the three evidence rules, the compliance calendar, and where programmes…

NERC CIP standards explained: all 13 enforceable standards, 46 requirements, the 2028 cutover, and why CIP-015 is not…

Author: Governance Docs