Governance Docs, Author at Governance Docs

A user access review is the control auditors test hardest. Here is the seven-step process, the ISO 27001…

A NIST Privacy Framework data map shows every data action, store and party. What to include, how much…

NIST Privacy Framework vs ISO 27701: a free risk model against a certifiable management system. Which to start…

NIST Privacy Framework vs GDPR: one is a voluntary risk model, one is law. Where they overlap, where…

NIST Privacy Framework Implementation Tiers: Partial, Risk Informed, Repeatable and Adaptive — and why Tier 4 is not…

A NIST Privacy Framework Profile records what you achieve and what you need. How to build an honest…

A problematic data action can arise from processing that is authorised, accurate and secure. The ten questions that…

NIST Privacy Framework 1.1 vs 1.0: four Categories retired, six added and all 34 Subcategory identifiers that moved,…

Privacy risk vs cybersecurity risk: why a privacy problem can arise from processing that is authorised, accurate and…

The NIST Privacy Framework explained: the Core, Profiles and Implementation Tiers, all 102 Subcategories, and why version 1.1…

A WISP for sole practitioners is smaller, but not for the reason most assume. What 16 CFR 314.6…

The FTC Safeguards Rule for tax preparers sets ten obligations at 16 CFR 314.4. What each requires, what…

Author: Governance Docs