Articles Archives - Governance Docs

NIST 800-171 vs 800-53 on 8 points: purpose, scope, size, baselines, ODPs, assessment, and the tailoring that cuts…

Controlled unclassified information from 32 CFR 2002: what is and isn't CUI, Basic vs Specified, the marking rules,…

NIST 800-171A explained: how a requirement becomes assessment objectives, the examine/interview/test methods, how 320 objectives are scored, and…

NIST 800-171 Rev 3 vs Rev 2: 110 requirements in 14 families became 97 in 17, with 88…

SWIFT CSP assessment cost by architecture type: assessor days × $1,200–2,500/day, from $1,800 (type B) to $25,000 (A1),…

KYC-SA explained: what the SWIFT attestation app is, what is submitted 1 Jul–31 Dec, how the independent assessment…

How to design the SWIFT secure zone under CSCF control 1.1: what goes inside by architecture type, 4…

SWIFT mandatory controls vs advisory in CSCF v2026: the 26 mandatory and 6 advisory controls, the A suffix,…

CSCF v2026 explained: 2.4 now mandatory, customer connectors in scope of 14 controls, the B-to-A4 reclassification, all 32…

TISAX prototype protection under ISA2027: the 20 controls in 8.1 and 8.2, the 4 objectives that trigger them,…

TISAX labels explained: the 12 assessment objectives, the info-security label hierarchy, the prototype and data protection objectives, and…

How to run a TISAX self-assessment: the 6 ISA maturity levels 0–5, the target level 3, how the…

Category: Articles