About Us Contact Blog
Governance DocsGovernance Docs
Which Toolkit?SoA GeneratorFree TemplatesSample ReportsFind the Right AssessmentRecords of Processing (ROPA)Data Privacy Impact AssessmentLegitimate Interests AssessmentTransfer Impact AssessmentPrivacy Risk AssessmentGDPR Gap AssessmentUK GDPR Gap AssessmentCCPA/CPRA Gap AssessmentISO 27701 Gap AssessmentHIPAA Gap AssessmentISO 27001 Risk AssessmentThird-Party Risk AssessmentSoA GeneratorISO 27001 Assessment Tool (Excel)ISO 27001 Gap AssessmentSOC 2 Gap AssessmentNIST CSF 2.0 Gap AssessmentNIST SP 800-53 Gap AssessmentNIST RMF Gap AssessmentCIS Controls Gap AssessmentPCI DSS 4.0 Gap AssessmentNIS2 Gap AssessmentCMMC 2.0 Gap AssessmentNIST SP 800-171 Gap AssessmentFedRAMP Gap AssessmentBSI C5 Gap AssessmentIEC 62443 Gap AssessmentSAMA CSF Gap AssessmentNCA ECC Gap AssessmentISO 20000 Gap AssessmentAI Risk AssessmentAI Impact AssessmentISO 42001 Gap AssessmentEU AI Act Gap AssessmentBusiness Impact AnalysisContinuity Risk AssessmentISO 22301 Assessment Tool (Excel)ISO 22301 Gap AssessmentDORA Gap AssessmentISO 9001 Gap AssessmentISO 13485 Gap AssessmentIATF 16949 Gap AssessmentISO 14001 Gap AssessmentISO 45001 Gap AssessmentISO 45001 Assessment Tool (Excel)HACCP Gap AssessmentEnterprise Risk AssessmentISO 31000 Gap AssessmentData Governance Gap AssessmentProject Management Gap AssessmentAll Gap AssessmentsISO 27001 Internal AuditISO 42001 Internal AuditAboutBlogContactMy AccountCart
Browse Toolkits
Governance Docs
  • Browse All Toolkits
  • Information Security & Cybersecurity
  • Data Privacy & Protection
  • Governance, Risk & Compliance
  • Quality Management
  • Health, Safety & Environment
  • AI Governance

My Account

CART

No products in the cart.

Category: Articles

Data governance council: purpose, members, decision rights, escalation and cadence

Data Governance Council: The Essential 2026 Guide to Charter, Members and Decision Rights

Governance Docs29th September 2026

How to set up a data governance council: purpose, membership, decision rights, escalation, meeting cadence and a charter…
Read More
Compliance consulting statement of work: scope, deliverables, assumptions, client duties and change control

Compliance Consulting Statement of Work: The Essential 2026 Guide for Consultants

Governance Docs29th September 2026

How to write a compliance consulting statement of work: scope, deliverables, assumptions, client responsibilities, change control, fees and…
Read More
CRA compliance cost per product: EUR 18,400 self-assessment, EUR 25,000 third-party assessment, EUR 42,700 additional secure development

CRA Compliance Cost: The Complete 2026 Budget Breakdown

Governance Docs29th September 2026

CRA compliance cost priced off the European Commission's own impact assessment: EUR 18,400 self-assessed, EUR 25,000 third-party, zero…
Read More
COBIT goals cascade: enterprise goals lead to alignment goals and then to governance and management objectives

COBIT Goals Cascade: The Essential 2026 Guide to Turning Strategy into IT Priorities

Governance Docs29th September 2026

How the COBIT 2019 goals cascade links enterprise goals to alignment goals and to the 40 governance and…
Read More
Basel III leverage ratio: Tier 1 capital divided by total exposure measure, with a 3 percent minimum

Basel III Leverage Ratio: The Essential 2026 Guide to the Non-Risk-Based Backstop

Governance Docs29th September 2026

How the Basel III leverage ratio works: the 3% minimum, the exposure measure, the G-SIB buffer, a worked…
Read More
NCA CSCC critical systems cybersecurity controls: 4 domains, 32 controls and 73 subcontrols, built on the ECC

NCA CSCC: The Essential 2026 Guide to the Critical Systems Cybersecurity Controls

Governance Docs29th September 2026

A guide to the NCA Critical Systems Cybersecurity Controls (CSCC-1:2019): who it applies to, how it extends the…
Read More
HACCP corrective action: restore control, isolate product, find the cause, prevent recurrence and keep records

HACCP Corrective Action: The Essential 2026 Guide to Handling CCP Deviations

Governance Docs29th September 2026

What a HACCP corrective action must cover when a critical limit is breached: restoring control, product disposition, root…
Read More
IMS document control: one register, approval flow and retention rule shared across management system standards

IMS Document Control: The Essential 2026 Guide to One System for Every Standard

Governance Docs29th September 2026

How to run IMS document control once for ISO 9001, ISO 14001 and ISO 45001: one register, one…
Read More
Gap analysis remediation plan: from finding to prioritized action, owner, date and closure evidence

Gap Analysis Remediation Plan: The Essential 2026 Guide to Closing Findings

Governance Docs29th September 2026

How to turn gap assessment findings into a remediation plan: the ten fields, prioritization by severity and effort,…
Read More
Privacy risk register: 12 fields scoring harm to individuals from source to residual rating

Privacy Risk Register: The Essential 2026 Guide with 12 Fields for Harm to Individuals

Governance Docs29th September 2026

How to build a privacy risk register: 12 fields, scoring harm to individuals using GDPR Recital 75, links…
Read More
Supplementary measures for data transfers: technical, contractual and organisational measures after a transfer impact assessment

Supplementary Measures for Data Transfers: The Essential 2026 Guide to the EDPB Six Steps

Governance Docs29th September 2026

When a transfer tool is not enough, supplementary measures may be needed. The EDPB six steps, the three…
Read More
Vendor risk tiering: four tiers from critical to low with due diligence depth for each

Vendor Risk Tiering: The Essential 2026 Guide to 4 Tiers, Criteria and Review Cycles

Governance Docs29th September 2026

How to tier vendors by risk: four tiers, weighted scoring criteria, override rules and how each tier drives…
Read More
    ←
  • 1
  • …
  • 33
  • 34
  • 35
  • 36
  • 37
  • …
  • 106
  • →

Recent Posts

ISO 14001 surveillance audit infographic showing the cycle years, audit time, eight review areas and the 2029 transition deadline
ISO 14001 Surveillance Audit: The Complete 2026 Guide

November 3, 2026

ISO 27001 toolkit contents shown as three layers: clause 4 to 10 records, 93 Annex A controls and supporting registers
ISO 27001 Toolkit: What a Complete One Contains (2026)

November 2, 2026

ISO 9001 recertification audit three-year cycle showing surveillance in years 1 and 2 and recertification in year 3
ISO 9001 Recertification Audit: The Complete 2026 Guide

November 1, 2026

ISO 9001 surveillance audit: eight required review areas, the 12-month window and the 2029 transition deadline
ISO 9001 Surveillance Audit: The Complete 2026 Guide

October 31, 2026

ISO 27001 software installation under Annex A 8.19: production systems and end-user endpoints
ISO 27001 Software Installation: Essential A.8.19 Guide 2026

October 31, 2026

Categories

  • Articles
  • DORA
  • GDPR
  • HIPAA
  • ISO 27001
  • ISO 42001 & AI governance
  • ISO 9001
  • Management systems
  • NIS2
  • Security frameworks
  • SOC 2
Governance DocsGovernance Docs

Reliable ISO & compliance documentation toolkits that help your business meet regulatory standards with ease.

Governance Docs LLC
1209 Mountain Road Pl NE, Suite R
Albuquerque, NM 87110, USA
[email protected]
+1 505 289 2455

Toolkits

  • ISO 27001:2022
  • GDPR
  • SOC 2
  • PCI-DSS v4.0
  • HIPAA
  • ISO 42001
  • All toolkits →

Company

  • About Us
  • Blog
  • Contact
  • FAQ
  • Which toolkit do I need?
  • Request a custom toolkit
  • Free templates
  • SoA generator
  • Assessments
  • Sample reports
  • RSS feeds

Policies

  • Privacy Policy
  • Terms & Conditions
  • Refund & Return Policy
  • Delivery Policy
  • Manage cookies
Browse by topicISO 27001ISO 42001 & AI governanceGDPRSOC 2HIPAANIS2DORAISO 9001Management systemsSecurity frameworks
© 2026 Governance Docs LLC. All rights reserved.
Secure checkoutstripeVISA