Governance Docs, Author at Governance Docs

Fourth-party risk explained: the subcontractor you never contracted with, the regimes that reach it (DORA, GDPR, HIPAA), the…

A vendor due diligence checklist built on the Interagency Guidance's 14 factors, tiered by risk, with the evidence…

How to run a third-party risk assessment: the 12 inherent-risk tiering questions, how a score becomes a tier,…

What a TPRM policy must contain, which regimes require it (NIST CSF GV.SC-01, SR-1, ISO 27001 5.19, EBA,…

A third-party risk management framework mapped to 12 regimes at once: Interagency Guidance, NIST CSF 2.0, DORA, ISO…

The 2023 Interagency Guidance on Third-Party Relationships explained: what it rescinded, its lifecycle, the 14 due diligence factors…

The TPRM lifecycle stage by stage: planning, due diligence, contracting, monitoring and exit, with the entry and exit…

TPRM, third-party risk management, explained: the five-stage lifecycle regulators use, the twelve regimes that require it, and what…

GENIUS Act compliance cost has no published benchmark. A 7-step method to size it from the statute and…

GENIUS Act vs MiCA: who may issue, what backs the token, what the holder is promised, the usage…

GENIUS Act AML requirements: section 4(a)(5) makes an issuer a BSA financial institution and names six elements, plus…

A permitted payment stablecoin issuer is one of three types under GENIUS Act section 2(23). The regulator for…

Author: Governance Docs