Articles Archives - Governance Docs

Scope 1, 2 and 3 emissions under the GHG Protocol: what each scope holds, the 15 Scope 3…

ESG vs CSR on 4 differences — audience, basis, measurement, consequence — where a CSR program becomes an…

The 5 vulnerability management metrics that matter — exposure, MTTR by severity, SLA adherence, backlog age, scan coverage…

Cyber risk quantification with FAIR: the factors from threat event frequency to loss magnitude, the 5 indicators it…

NIST SP 800-55 (December 2024, two volumes): the 4 measure types, the 10 documentation fields, what makes a…

MTTD vs MTTR explained as 4 clocks on one incident timeline — detect, acknowledge, contain, recover — with…

Board cybersecurity reporting built on 6 indicators — exposure, control coverage, detection and response speed, incident impact, third-party…

The ISO 27001 assessment report in 6 sections — summary, method, clause results, Annex A results, findings, action…

A supplier security assessment under ISO 27001 controls A.5.19–A.5.22: tier suppliers, what to ask, what evidence to accept,…

The ISO 27001 control assessment: scoring all 93 Annex A controls for applicability, implementation and evidence, with the…

IMS certification cost runs about $14,400-$30,000 in registrar fees for a 40-person company in 2026. How IAF MD…

An ISO 27001 gap assessment delivers 4 outputs: a gap register, a prioritized remediation plan, a draft SoA…

Category: Articles