Articles Archives - Governance Docs

NIST Privacy Framework vs ISO 27701: a free risk model against a certifiable management system. Which to start…

NIST Privacy Framework vs GDPR: one is a voluntary risk model, one is law. Where they overlap, where…

NIST Privacy Framework Implementation Tiers: Partial, Risk Informed, Repeatable and Adaptive — and why Tier 4 is not…

A NIST Privacy Framework Profile records what you achieve and what you need. How to build an honest…

A problematic data action can arise from processing that is authorised, accurate and secure. The ten questions that…

NIST Privacy Framework 1.1 vs 1.0: four Categories retired, six added and all 34 Subcategory identifiers that moved,…

Privacy risk vs cybersecurity risk: why a privacy problem can arise from processing that is authorised, accurate and…

The NIST Privacy Framework explained: the Core, Profiles and Implementation Tiers, all 102 Subcategories, and why version 1.1…

A WISP for sole practitioners is smaller, but not for the reason most assume. What 16 CFR 314.6…

The FTC Safeguards Rule for tax preparers sets ten obligations at 16 CFR 314.4. What each requires, what…

A written information security plan template is only the shape. Here is what a WISP must contain under…

NERC CIP vs IEC 62443 compared: mandatory versus voluntary, impact ratings versus zones and conduits, and how to…

Category: Articles