Governance Docs, Author at Governance Docs

CIS Benchmarks are configuration guides; CIS Controls are a prioritized program. What each covers, the 3 profile levels,…

A crypto-asset white paper under MiCA: when it is required, the 9 Annex I parts, the mandatory statements,…

A BSI C5 attestation is an assurance report, not a certificate. Type 1 vs type 2, what the…

A first article inspection proves the process, not the part. The 3 AS9102 forms, what triggers a re-accomplishment,…

The Generative AI Profile, NIST AI 600-1, names 12 risks unique to or exacerbated by generative AI, with…

Energy performance indicators under ISO 50001: clauses 6.3 to 6.6, normalization for relevant variables, and when you may…

Cyber Essentials Plus tests the same 5 controls independently. What the 2026 Danzell update changed, the new auto-fail…

The ISO 27701 controls now sit in one Annex A with 3 tables - controller, processor and shared…

Cybersecurity metrics that survive scrutiny: the 4 measure types in NIST SP 800-55, the 10 fields that document…

A NIST CSF organizational profile in 5 steps from NIST SP 1301: scope, gather, create, analyze gaps, implement…

The FedRAMP SSP was retired in 2026. What replaced it: the Certification Package Overview and the Security Decision…

A FedRAMP ATO is the agency's risk decision, not FedRAMP's. The 5 steps of initial agency authorization in…

Author: Governance Docs