About Us Contact Blog
Governance DocsGovernance Docs
Which Toolkit?SoA GeneratorFree TemplatesAboutBlogContactMy AccountCart
FOX v.2.4.9
Browse Toolkits
Governance Docs
  • Browse All Toolkits
  • Information Security & Cybersecurity
  • Data Privacy & Protection
  • Governance, Risk & Compliance
  • Quality Management
  • Health, Safety & Environment
  • AI Governance

My Account

CART

No products in the cart.

Category: Articles

DORA requirements across the five pillars and the documentation financial entities must keep

DORA Requirements: The 5 Pillars & What You Must Document

Governance Docs17th July 2026

What does DORA actually require? A breakdown of the five pillars and the policies, procedures, and records you…
Read More
ISO 42001 controls in Annex A explained including AI policy, data, lifecycle and transparency

ISO 42001 Annex A Controls Explained

Governance Docs17th July 2026

The ISO 42001 Annex A controls turn responsible-AI principles into auditable practice. Here is what they cover and…
Read More
ISO 42001 vs NIST AI RMF comparison of the certifiable standard and the voluntary risk framework

ISO 42001 vs NIST AI RMF: Which AI Framework?

Governance Docs17th July 2026

ISO 42001 vs NIST AI RMF: one is a certifiable standard, the other a voluntary framework. Here are…
Read More
ISO 42001 certification process step by step from building the AIMS to the stage 2 audit

How to Get ISO 42001 Certified: A Step-by-Step Guide

Governance Docs17th July 2026

ISO 42001 certification proves you govern AI responsibly. Here is the step-by-step process, how long it takes, and…
Read More
EU AI Act documentation requirements checklist for high-risk AI systems and deployers

EU AI Act Documentation Requirements Checklist

Governance Docs17th July 2026

Compliance rests on evidence. This EU AI Act documentation requirements checklist covers every record high-risk systems and deployers…
Read More
EU AI Act deadlines and compliance timeline from 2024 to 2027 with key milestones

EU AI Act Compliance Deadlines & Timeline (2025-2027)

Governance Docs17th July 2026

The EU AI Act applies in phases, not on one date. Here is the full timeline of deadlines…
Read More
EU AI Act risk categories - unacceptable, high, limited and minimal risk tiers explained

EU AI Act Risk Categories: Prohibited, High-Risk & Limited

Governance Docs17th July 2026

Every AI system falls into one of four EU AI Act risk tiers. Here is what prohibited, high,…
Read More
Who does the EU AI Act apply to - provider, deployer, importer and distributor roles

Who Does the EU AI Act Apply To? Provider vs. Deployer

Governance Docs17th July 2026

The EU AI Act applies by role and reaches far beyond Europe. Learn the difference between providers and…
Read More
EU AI Act compliance guide showing the four risk tiers and key obligations

The EU AI Act Explained: A Complete Compliance Guide

Governance Docs17th July 2026

The EU AI Act is the world's first comprehensive AI law. A clear guide to who it applies…
Read More
ISO 27001 vs SOC 2 comparison of the international certification and the US attestation report

ISO 27001 vs SOC 2: Which Do You Need?

Governance Docs08th July 2026

ISO 27001 vs SOC 2: one is an international certificate, the other a US attestation report. Here are…
Read More
ISO 27701: Essential Must-Have for Best Data Privacy Strategy.

ISO 27701:2025 vs 2019: What Changed and What You Must Do

Governance Docs30th May 2026

Key Takeaways ISO/IEC 27701:2025 replaced the 2019 edition on 14 October 2025 and is now a standalone standard. An ISO 27001 certificate is no longer a prerequisite for certifying a
Read More
ISO 27001 Annex A controls explained - the four themes and the 93 controls in the 2022 version

ISO 27001 Annex A Controls Explained (2022)

Governance Docs28th May 2026

The ISO 27001 Annex A controls turn security principles into practice. Here are the 93 controls, the four…
Read More
    ←
  • 1
  • …
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • →

Recent Posts

ISO 27001 risk treatment plan diagram showing the six steps of clause 6.1.3
ISO 27001 Risk Treatment Plan: The Complete 2026 Guide

August 23, 2026

ISO 27001 nonconformity classification chart comparing major and minor audit findings
ISO 27001 Nonconformity: The Complete 2026 Guide to Major vs Minor Findings

August 22, 2026

ISO 27001 recertification audit timeline showing the three-year certification cycle from Stage 1 and Stage 2 through surveillance audits to year three reassessment
ISO 27001 Recertification Audit: The Complete 2026 Guide

August 21, 2026

Phishing-resistant MFA methods compared against NIST SP 800-63B-4 assurance levels
Phishing-Resistant MFA: The Complete 2026 Guide

August 20, 2026

Cybersecurity governance obligations under NIS2, DORA, ISO 27001 and NIST CSF 2.0
Cybersecurity Governance: The Definitive 2026 Board Guide

August 20, 2026

Categories

  • Articles
  • DORA
  • GDPR
  • HIPAA
  • ISO 27001
  • ISO 42001 & AI governance
  • ISO 9001
  • Management systems
  • NIS2
  • Security frameworks
  • SOC 2
Governance DocsGovernance Docs

Reliable ISO & compliance documentation toolkits that help your business meet regulatory standards with ease.

Governance Docs LLC
1209 Mountain Road Pl NE, Suite R
Albuquerque, NM 87110, USA
info@governancedocs.com
+1 812 227 5662

Toolkits

  • ISO 27001:2022
  • GDPR
  • SOC 2
  • PCI-DSS v4.0
  • HIPAA
  • ISO 42001
  • All toolkits →

Company

  • About Us
  • Blog
  • Contact
  • FAQ
  • Which toolkit do I need?
  • Free templates
  • SoA generator
  • RSS feeds

Policies

  • Privacy Policy
  • Terms & Conditions
  • Refund & Return Policy
  • Delivery Policy
Browse by topicISO 27001ISO 42001 & AI governanceGDPRSOC 2HIPAANIS2DORAISO 9001Management systemsSecurity frameworks
© 2026 Governance Docs LLC. All rights reserved.
Secure checkoutstripeVISA