IEC 62304 FDA Guidance: Documentation Levels vs Safety Classes, Mapped (Clear 2026 Guide)
IEC 62304 FDA guidance explained: why Documentation Level is not software safety class, how each element of the…
Read More
IEC 62304 Legacy Software: The Clause 4.4 Route Explained Step by Step (Clear 2026 Guide)
IEC 62304 legacy software under clause 4.4: who qualifies, the four-step route, the gap analysis scoped to 5.2,…
Read More
IEC 62304 Edition 2: Release Date, What Changes and What To Do Now (Clear 2026 Update)
IEC 62304 Edition 2 status, September 2026: committee-draft stage, publication not before 2028, what the draft changes, and…
Read More
IEC 62304 SOUP: What Counts and What You Owe at Every Class (Clear 2026 Guide)
IEC 62304 SOUP explained: what counts as software of unknown provenance, the identification and maintenance duties every class…
Read More
IEC 62304 vs IEC 82304-1: Which Standard Does SaMD Need? (Complete 2026 Comparison)
IEC 62304 vs IEC 82304-1 for software-only medical devices: one governs the software life cycle, the other the…
Read More
IEC 62304 vs ISO 13485: How the Two Standards Fit Together (Clause-by-Clause, 2026)
IEC 62304 vs ISO 13485: one is the QMS, the other the software life cycle inside it. Clause-by-clause…
Read More
IEC 62304 Software Safety Classification: Class A, B and C Explained (2026 Guide)
IEC 62304 software safety classification explained: how Class A, B and C are decided, the Class C default,…
Read More
Fourth-Party Risk: Managing the Subcontractor You Never Contracted With (2026)
Fourth-party risk explained: the subcontractor you never contracted with, the regimes that reach it (DORA, GDPR, HIPAA), the…
Read More
Vendor Due Diligence Checklist: 14 Factors, Three Depths, One Evidence Rule (2026)
A vendor due diligence checklist built on the Interagency Guidance's 14 factors, tiered by risk, with the evidence…
Read More
Third-Party Risk Assessment: Tiering, Due Diligence Depth and Scoring (2026 Guide)
How to run a third-party risk assessment: the 12 inherent-risk tiering questions, how a score becomes a tier,…
Read More
TPRM Policy: What It Must Contain and What Makes It Evidence (2026 Guide)
What a TPRM policy must contain, which regimes require it (NIST CSF GV.SC-01, SR-1, ISO 27001 5.19, EBA,…
Read More
Third-Party Risk Management Framework: One Lifecycle, Twelve Regimes (2026 Guide)
A third-party risk management framework mapped to 12 regimes at once: Interagency Guidance, NIST CSF 2.0, DORA, ISO…
Read More