Articles Archives - Governance Docs

Incident severity levels built from the 6 risk factors in NIST SP 800-61 Rev. 3: a 4-tier matrix,…

An incident response policy under NIST SP 800-61 Rev. 3 covers 7 elements. What each one needs, and…

An incident response plan template aligned to NIST SP 800-61 Rev. 3: a 14-section outline with the Rev.…

The NIST incident response lifecycle had 4 phases. Rev. 3 maps them to CSF 2.0 Functions. See the…

NIST 800-61 Rev 3 replaced the 2012 incident handling guide with a CSF 2.0 profile of 134 rows.…

ISO 27001 backup is Annex A 8.13 — copies of information, software and systems, regularly tested. What the…

ISO 27001 offboarding explained: what Annex A 6.5, 5.11 and 5.18 require, plus a 12-step leaver and mover…

ISO 27001 physical security controls explained: all 14 Annex A Theme 7 controls, the one new in 2022,…

ISO 27001 secure disposal spans three Annex A controls, not one. How A.7.10, A.7.14 and A.8.10 fit together,…

ISO 27001 password policy requirements for 2026: what A.5.17 and A.8.5 actually demand, why the standard names no…

ISO 27001 intellectual property rights (Annex A 5.32) explained: the 6 IP categories, 12 guidance items, and the…

ISO 27001 independent review (A.5.35) is not your clause 9.2 internal audit. Who can run it, how often,…

Category: Articles