Articles Archives - Governance Docs

An ISO 27001 self-assessment scores clauses 4–10 and all 93 Annex A controls on a 5-point scale with…

CMMC Phase 2 was due 10 November 2026 and was suspended on 13 July 2026. What stopped, what…

CMMC scoping under 32 CFR 170.19: the 5 Level 2 asset categories and how each is assessed, the…

What a C3PAO must be under 32 CFR 170.9, six checks before you sign, what the Level 2…

CMMC Level 3 explained: all 24 NIST SP 800-172 requirements with DoD parameters, the Final Level 2 (C3PAO)…

CMMC Level 1 explained: the 15 FAR 52.204-21 requirements mapped to 800-171A, the annual self-assessment and SPRS affirmation,…

FedRAMP continuous monitoring is now Ongoing Certification: 6 rulesets, 76 rules, a quarterly report, and vulnerability and incident…

FedRAMP certification cost in 2026: 6 components with labelled ranges, a $150k–$300k Moderate assessment, and how path and…

NIS2 incident reporting under Article 23: 24-hour early warning, 72-hour notification, one-month final report, and the thresholds in…

PCI DSS vs ISO 27001 on 5 differences — scope, enforcement, prescription, assessment cadence, output — with all…

PCI DSS merchant levels explained: the 4 Visa and Mastercard tiers by transaction volume, ROC vs SAQ validation,…

10 CFR Part 21 explained: who it reaches, the 4 definitions that decide reportability, the 60-, 5-, 2-…

Category: Articles