Governance Docs

Browse Toolkits

No products in the cart.

ISO Compliance & Standards Insights

HIPAA risk assessment steps from mapping ePHI to risk management and remediation

How to Conduct a HIPAA Risk Assessment

The HIPAA risk assessment is the foundation of the Security Rule. Here is what it is, why it…

HIPAA Security Rule vs Privacy Rule - protecting electronic PHI versus governing use and disclosure

HIPAA Security Rule vs Privacy Rule Explained

HIPAA Security Rule vs Privacy Rule: one protects electronic health data, the other governs its use and disclosure.…

HIPAA policies checklist including privacy, security, risk assessment and breach notification

HIPAA Required Policies & Documentation Checklist

HIPAA requires documented policies and procedures. Here are the essential HIPAA policies, the records you must keep, and…

SOC 2 cost and timeline factors including scope, report type, size and readiness

SOC 2 Cost & Timeline: What to Expect

What does SOC 2 cost and how long does it take? Here are the main cost factors, the…

SOC 2 audit preparation covering scoping, readiness assessment, controls and evidence

How to Prepare for a SOC 2 Audit

The SOC 2 audit tests your controls independently. Here is what it involves, the process, how to prepare,…

SOC 2 documentation checklist of policies and evidence mapped to the Trust Services Criteria

SOC 2 Policies & Documentation Checklist

SOC 2 documentation turns security practice into an auditable report. Here are the essential policies, the evidence you…

SOC 2 Type 1 vs Type 2 comparison of control design at a point in time versus operating effectiveness

SOC 2 Type 1 vs Type 2: What’s the Difference?

SOC 2 Type 1 vs Type 2: one tests control design at a point in time, the other…

SOC 2 Trust Services Criteria explained - security, availability, processing integrity, confidentiality and privacy

SOC 2 Trust Services Criteria Explained

The SOC 2 Trust Services Criteria define what your auditor evaluates. Here are all five – security, availability,…