Author: Governance Docs

GDPR vs HIPAA compared: scope, who they bind, consent and lawful basis, breach deadlines and penalties — and…

ISO 27001 vs ISO 22301 compared: information security versus business continuity, where the two overlap, and why 27001's…

ISO 20000 vs ITIL compared: one is a certifiable standard, the other a body of practice. What each…

A clause-by-clause ISO 20000 internal audit checklist for ISO/IEC 20000-1:2018, how to build a risk-based programme, and the…

The documents and records ISO/IEC 20000-1:2018 requires, clause by clause, plus the ones no clause names that every…

ISO 20000 certification explained: what ISO/IEC 20000-1 requires, the audit stages, realistic timings, and why an ITIL-mature team…

What a HIPAA notice of privacy practices must contain, the 42 CFR Part 2 update that took effect…

A practical HIPAA implementation plan in ten steps: risk analysis, policies, business associates, training and breach response, with…

The proposed HIPAA Security Rule overhaul explained: what would change, why the final rule slipped to 2027, and…

What a HIPAA risk assessment template must contain to satisfy the Security Rule risk analysis requirement at 45…

A practical ISO/IEC 20000-1 implementation plan in ten steps: service portfolio, SLAs, the service management processes and how…

A practical ISO 42001 implementation plan in ten steps: AI inventory, risk assessment, the AI system impact assessment…