Articles Archives - Governance Docs

IEC 62443 vs ISO 27001 compared: what Edition 2.0 changed in 2024, which requirements your ISMS already covers,…

IEC 62443 security levels explained: SL-T vs SL-C vs SL-A, how to assign a target level from risk,…

How to define IEC 62443 zones and conduits: the 8-step sequence, the 3 mandatory separations, and 8 questions…

What ISO 27001 certification really costs a startup in 2026, how long it takes, the documents you must…

What an ISO 27001 consultant does, what day rates look like in 2026, the impartiality rule that stops…

What ISO 27001 clause 9.3 requires: the seven management review inputs, how often to meet, what to minute,…

A practical 2026 breakdown of ISO 42001 certification cost - readiness, implementation, Stage 1 and Stage 2 audit…

An ISO 27001 risk treatment plan is required by clause 6.1.3. Here are the fields it needs, the…

How ISO 27001 nonconformity findings are classified as major or minor, the deadlines that follow, the six most…

What happens at the year-three ISO 27001 recertification audit: the ISO/IEC 17021-1 timing rules, what auditors sample, typical…

Phishing-resistant MFA under NIST SP 800-63B-4: which methods qualify, what AAL2 and AAL3 each require, and why synced…

Cybersecurity governance after NIS2: what boards must approve, why NIST CSF 2.0 added a 6th function, and the…

Category: Articles