Articles Archives - Governance Docs

NERC CIP audit preparation: writing the RSAW narrative, computing your own intervals, the three checks worth running first,…

CIP-015 internal network security monitoring is not enforceable until 1 October 2028, not September 2025. What the standard…

CIP-014 physical security explained: the two separate unaffiliated third-party gates at R2 and R6, the six R5 functions,…

CIP-013 supply chain risk management: the planning stage everyone skips, the six procurement elements, and what to do…

NERC CIP patch management under CIP-007 R2: the two separate 35-calendar-day clocks, named patch sources, and mitigation plans…

NERC CIP low impact explained: the seven CIP-003 Attachment 1 topics, the vendor remote access control added in…

BES Cyber System categorization under CIP-002: the high, medium and low criteria, the process auditors test, and the…

NERC CIP compliance explained: how RSAW audits work, the three evidence rules, the compliance calendar, and where programmes…

NERC CIP standards explained: all 13 enforceable standards, 46 requirements, the 2028 cutover, and why CIP-015 is not…

ISO 27001 certification cost in 2026 runs $8,000 to $30,000 for most small US companies. A full line-item…

A gifts and hospitality policy has to fix 5 things a salesperson can apply at dinner. What ISO…

ISO 27018 applies in one narrow case: public cloud, personal data, acting as processor. The 6 obligations that…

Category: Articles