Articles Archives - Governance Docs

SOX 302 vs 404: quarterly CEO/CFO certifications vs the annual ICFR assessment and attestation, section 906, who signs…

SOX compliance cost by profile: 404(a)-only $200k–500k, accelerated filer $750k–2m, large accelerated $2.8–9m+ in year one — our…

SOX ITGC explained: the 4 domains (access, change, development, operations), how they support application controls and IPE, scoping,…

The data governance maturity model: 5 levels (performed to optimized), 7 dimensions, how to run an evidence-based assessment,…

Data lineage explained: business, technical and operational lineage, granularity and direction, 4 capture methods, the regulations that require…

Master data management vs data governance: MDM executes the golden record, governance decides definitions and rules — 5…

Data catalog vs data dictionary on 5 differences — question, unit, meaning, context, currency — where the glossary…

A data governance framework in 5 layers — strategy and policy, operating model, standards and processes, assets and…

Bow tie analysis under IEC 31010: the 6 elements (hazard, top event, threats, consequences, preventive and mitigative barriers),…

The risk management policy ISO 31000 clause 5.2 asks leadership to issue: 8 sections in 3–6 pages, what…

IEC 31010:2019 explained: the 41 techniques in 10 categories, what changed from 2009, how clause 7 says to…

Inherent vs residual risk defined by COSO ERM and ISO 31000, the 4 register columns (inherent, current, residual,…

Category: Articles