ISO Compliance & Standards Insights

Data governance explained through the DAMA-DMBOK — what the framework covers, the boundaries DAMA sets explicitly, and the…

COSO explained — the 2013 internal control framework, the 2017 ERM framework, and the supplemental guidance on sustainability…

Basel III was set to be in effect from 1 January 2023, but adoption runs jurisdiction by jurisdiction…

NIST SP 800-30 explained — the three tiers a risk assessment must run at, the four-step process, and…

NIST SP 800-53 Rev 5 now ships patch releases. What Release 5.2.0 added, why SP 800-53B matters more…

NIST published SP 800-171 Rev 3 in May 2024, but CMMC still runs on Rev 2 because 32…

India’s DPDP Act is commencing in three tranches. What is already in force, what lands on 13 November…

ASME NQA-1 explained — what the standard covers, commercial grade dedication, and why the newest edition is not…

SAMA compliance explained — the four domains of the Cyber Security Framework, the six maturity levels you are…

MiCA grandfathering ended on 1 July 2026 in every Member State. What Article 143(3) allowed, what ESMA’s register…

ISO 21001:2025 is now the current edition and the 2018 standard is withdrawn. What an educational organization management…

ISO 39001 explained — the Safe System approach, exposure and performance factors, the free 2024 amendment, and the…