Articles Archives - Governance Docs

SEC filer status changes proposed in Release 33-11419 would cut SOX 404(b) to 19.2% of registrants and lift…

ISO 27001 change management spans clause 6.3 and Annex A 8.32 - two regimes auditors sample apart. The…

ISAE 3402 vs ISO 27001: one is a restricted-use auditor's report, the other a certificate against 93 Annex…

ISO 27001 background screening under Annex A 6.1 — what the control actually requires, the legal limits in…

ISO 27001 test data under Annex A 8.33: the four gates an auditor samples, how masking fits, and…

ISO 27001 data masking (Annex A.8.11) is one of 11 new 2022 controls. What it requires, 3 techniques…

Incident response checklist ordered by NIST SP 800-61 Rev. 3 Function: 5 sections from preparation to improvement, each…

Tabletop exercise scenarios for cyber incidents: 7 original outlines with sample injects, what each tests, and how to…

Security event vs incident in NIST SP 800-61 Rev. 3: the 3 defined terms, where breach fits as…

A ransomware playbook in 6 stages: preparation, the first hour, containment, the payment decision, clean-backup restore and recovery…

An incident response playbook turns policy into steps. The 8-part structure, 10 scenarios worth writing first, and why…

Incident response roles and responsibilities from NIST SP 800-61 Rev. 3: the 8 roles, who holds high-impact authority,…

Category: Articles