Articles Archives - Governance Docs

ISO 27001 acceptable use policy requirements under Annex A 5.10: the 2 limbs auditors sample, the handling matrix…

ISO 27001 network security is three Annex A controls, not one — A.8.20, A.8.21 and A.8.22 — with…

ISO 27001 malware protection under Annex A 8.7 is 13 guidance limbs, not one antivirus licence. What auditors…

ISO 27001 capacity management under Annex A 8.6: what the control requires, 6 demand-side fixes most teams miss,…

ISO 27001 web filtering (A.8.23) is one of 11 new 2022 controls. What auditors expect, DNS vs gateway,…

ISO 27001 physical security monitoring (Annex A 7.4) explained: a new 2022 control, the 72-hour CCTV retention rule,…

What the IAQG OASIS database shows, what stays private, how to manage your record and how buyers use…

What AS9100D clause 8.4 requires: the external provider register, risk-based controls, performance reviews and a full flow-down checklist.

How long AS9100 certification really takes, phase by phase, with typical durations by company size and the delays…

The 7 documents and roughly 20 record types AS9100D explicitly requires, clause by clause, plus the aerospace processes…

What AS9100D and AS9146 require for foreign object damage prevention, how to designate FOD areas and the seven…

Where human factors appear in AS9100D, why 'operator error' is not a root cause, and how to build…

Category: Articles