Governance Docs, Author at Governance Docs

An ESG policy in 6 sections — scope, material topics, dated commitments, accountability, implementation and KPIs, review and…

The 12 ESG KPIs boards ask for across E, S and G, each with its unit and source…

Scope 1, 2 and 3 emissions under the GHG Protocol: what each scope holds, the 15 Scope 3…

ESG vs CSR on 4 differences — audience, basis, measurement, consequence — where a CSR program becomes an…

The 5 vulnerability management metrics that matter — exposure, MTTR by severity, SLA adherence, backlog age, scan coverage…

Cyber risk quantification with FAIR: the factors from threat event frequency to loss magnitude, the 5 indicators it…

NIST SP 800-55 (December 2024, two volumes): the 4 measure types, the 10 documentation fields, what makes a…

MTTD vs MTTR explained as 4 clocks on one incident timeline — detect, acknowledge, contain, recover — with…

Board cybersecurity reporting built on 6 indicators — exposure, control coverage, detection and response speed, incident impact, third-party…

The ISO 27001 assessment report in 6 sections — summary, method, clause results, Annex A results, findings, action…

A supplier security assessment under ISO 27001 controls A.5.19–A.5.22: tier suppliers, what to ask, what evidence to accept,…

The ISO 27001 control assessment: scoring all 93 Annex A controls for applicability, implementation and evidence, with the…

Author: Governance Docs