Articles Archives - Governance Docs

Cyber risk quantification with FAIR: the factors from threat event frequency to loss magnitude, the 5 indicators it…

NIST SP 800-55 (December 2024, two volumes): the 4 measure types, the 10 documentation fields, what makes a…

MTTD vs MTTR explained as 4 clocks on one incident timeline — detect, acknowledge, contain, recover — with…

Board cybersecurity reporting built on 6 indicators — exposure, control coverage, detection and response speed, incident impact, third-party…

The ISO 27001 assessment report in 6 sections — summary, method, clause results, Annex A results, findings, action…

A supplier security assessment under ISO 27001 controls A.5.19–A.5.22: tier suppliers, what to ask, what evidence to accept,…

The ISO 27001 control assessment: scoring all 93 Annex A controls for applicability, implementation and evidence, with the…

IMS certification cost runs about $14,400-$30,000 in registrar fees for a 40-person company in 2026. How IAF MD…

An ISO 27001 gap assessment delivers 4 outputs: a gap register, a prioritized remediation plan, a draft SoA…

An ISO 27001 self-assessment scores clauses 4–10 and all 93 Annex A controls on a 5-point scale with…

CMMC Phase 2 was due 10 November 2026 and was suspended on 13 July 2026. What stopped, what…

CMMC scoping under 32 CFR 170.19: the 5 Level 2 asset categories and how each is assessed, the…

Category: Articles