NIST AI RMF Measure Function: TEVV Guide for 2026
A practical guide to the NIST AI RMF Measure function, with the four categories, TEVV and a test…
Read More
ISO 37001 Raising Concerns: Whistleblowing and Investigations 2026
How to build the reporting and investigation parts of an ISO 37001 anti-bribery system so people speak up…
Read More
ISO 27001 Supplier Assessment: Controls 5.19 to 5.23 in 2026
A practical guide to ISO 27001 supplier controls 5.19 to 5.23, with classification, contracts, monitoring and the evidence…
Read More
IEC 62304 Agile: Compliant Sprints and Releases in 2026
Agile can meet IEC 62304 when every required activity still happens. See how to map sprints, define done…
Read More
HITRUST Inheritance: Shared Responsibility Guide 2026
Learn how HITRUST inheritance and the Shared Responsibility Matrix reduce assessment scope, and where inheritance stops.
Read More
FSSC 22000 Unannounced Audit: Rules and Preparation 2026
What to expect from an FSSC 22000 unannounced audit, including blackout dates, findings and how to stay ready…
Read More
FedRAMP 20x KSI: Key Security Indicators Explained 2026
FedRAMP 20x replaces control narratives with Key Security Indicators. See the themes, validation modes and how to prepare.
Read More
IVDR Post-Market Surveillance: PMS Plan, Report and PSUR 2026
What the IVDR requires after CE marking: the PMS plan, PMS reports, PSURs by class, PMPF and trend…
Read More
CAIQ Security Questionnaire: Build a Reusable Answer Library 2026
Build a CAIQ security questionnaire answer library from your STAR Level 1 submission to answer customer reviews faster…
Read More
COSO Risk Appetite: Principle 7 Guide with Examples 2026
Learn what COSO ERM Principle 7 requires, how appetite differs from tolerance and how to turn a statement…
Read More
CIS Controls Safe Harbor: State Law Protection in 2026
Some US states give legal protection to organisations that conform to recognised frameworks. See how the CIS Controls…
Read More
CCPA Opt-Out Preference Signal: GPC Compliance Guide 2026
Section 7025 requires businesses to honour opt-out preference signals such as GPC. Learn what to build, test and…
Read More