Author: Governance Docs

SAMA compliance explained — the four domains of the Cyber Security Framework, the six maturity levels you are…

MiCA grandfathering ended on 1 July 2026 in every Member State. What Article 143(3) allowed, what ESMA's register…

ISO 21001:2025 is now the current edition and the 2018 standard is withdrawn. What an educational organization management…

ISO 39001 explained — the Safe System approach, exposure and performance factors, the free 2024 amendment, and the…

ISO 37301:2021 explained — what a compliance management system must contain, the free 2024 climate amendment, and how…

ESG reporting after the EU Omnibus — stop-the-clock, the ESRS quick fix, the value chain cap and VSME,…

BSI C5:2026 explained — the EUCS Substantial alignment, the new subcriteria structure, sharpen versus complement, and the new…

CSA STAR explained — the Cloud Controls Matrix, the free Level 1 self-assessment, Valid-AI-ted scoring, and the new…

StateRAMP has been renamed GovRAMP. The verification pathway, the 60 Core controls, the overlays, and why TX-RAMP is…

ITIL 4 explained, and where it stands now that PeopleCert has begun the phased release of ITIL Version…

COBIT 2019 explained — the 40 governance and management objectives, the five domains, the design factors that tailor…

ISO 37001:2025 is the current edition and the 2016 standard is withdrawn. What the anti-bribery management system requires,…