Articles Archives - Governance Docs

The risk management policy ISO 31000 clause 5.2 asks leadership to issue: 8 sections in 3–6 pages, what…

IEC 31010:2019 explained: the 41 techniques in 10 categories, what changed from 2009, how clause 7 says to…

Inherent vs residual risk defined by COSO ERM and ISO 31000, the 4 register columns (inherent, current, residual,…

ISO 31000 vs COSO ERM on 5 differences: purpose and audience, structure, the risk process, strategy, origin —…

The SAMA Cyber Threat Intelligence Principles (2022): 19 principles in 4 domains — core, strategic, operational, technical and…

SAMA cloud computing requirements in CSF 3.4.3: SAMA approval before use or contract, data in Saudi Arabia unless…

The SAMA Business Continuity Management Framework (2017): 9 principles, the control considerations that decide findings, annual BCP and…

The SAMA IT Governance Framework (Circular 43028139, 2021): 4 domains, 35 subdomains, the 0–5 maturity model, how it…

The 4 SAMA CSF domains and all 32 subdomains as the Framework names them — governance, risk and…

Hazardous situation vs hazard vs harm in ISO 14971:2019: the 3 definitions, the sequence-of-events model with 5 worked…

ISO/TR 24971:2020 explained: what the guidance is and is not, what moved into it from ISO 14971:2007, clause-by-clause…

Risk acceptability criteria under ISO 14971:2019: the 4.2 policy, 4.4 plan criteria, severity and probability scales, P1 ×…

Category: Articles