Articles Archives - Governance Docs

A WISP for sole practitioners is smaller, but not for the reason most assume. What 16 CFR 314.6…

The FTC Safeguards Rule for tax preparers sets ten obligations at 16 CFR 314.4. What each requires, what…

A written information security plan template is only the shape. Here is what a WISP must contain under…

NERC CIP vs IEC 62443 compared: mandatory versus voluntary, impact ratings versus zones and conduits, and how to…

NERC CIP audit preparation: writing the RSAW narrative, computing your own intervals, the three checks worth running first,…

CIP-015 internal network security monitoring is not enforceable until 1 October 2028, not September 2025. What the standard…

CIP-014 physical security explained: the two separate unaffiliated third-party gates at R2 and R6, the six R5 functions,…

CIP-013 supply chain risk management: the planning stage everyone skips, the six procurement elements, and what to do…

NERC CIP patch management under CIP-007 R2: the two separate 35-calendar-day clocks, named patch sources, and mitigation plans…

NERC CIP low impact explained: the seven CIP-003 Attachment 1 topics, the vendor remote access control added in…

BES Cyber System categorization under CIP-002: the high, medium and low criteria, the process auditors test, and the…

NERC CIP compliance explained: how RSAW audits work, the three evidence rules, the compliance calendar, and where programmes…

Category: Articles