Articles Archives - Governance Docs

What a cybersecurity requirements specification (CRS) is under IEC 62443-3-2 ZCR 6.1, what it must contain, a section-by-section…

A practical guide to the IEC 62443-3-2 risk assessment: inputs, tolerable risk, the seven ZCR steps and their…

An ISO 27001 secure development policy covers ten Annex A controls, not one. What A.8.25 to A.8.34 require,…

ISO 27001 logging sits in Annex A 8.15, 8.16 and 8.17. What to log, how long to keep…

An ISO 27001 cryptography policy satisfies Annex A 8.24, which merged two 2013 controls into one. The 10…

ISO 27001 security awareness training is 3 requirements, not 1: clause 7.3, clause 7.2 and Annex A 6.3.…

ISO 27001 certification logo rules for 2026: ISO bans its own logo outright, and ISO/IEC 17021-1 clause 8.3…

ISO 27001 interested parties under clause 4.2 - how to build a register that answers all 3 requirements,…

ISO 27001 remote audit rules changed in 2024: the 30% approval cap is gone, but your certificate must…

ISO 27001 document control explained: what clause 7.5 really requires, the 10 register columns auditors sample, and the…

ISO 27001 audit days come from ISO/IEC 27006-1 Annex C, not your budget. Typical counts run 5 to…

ISO 27001 monitoring and measurement explained: the six decisions clause 9.1 requires, 14 worked measures, and the 5…

Category: Articles