Articles Archives - Governance Docs

An ISO 21001 internal audit has to test whether learning happened. What to check clause by clause, the…

Authorised Economic Operator status comes as AEOC or AEOS, against 4 cumulative criteria. What the audit examines, and…

STAR Level 2 comes in 2 forms: certification built on ISO 27001, attestation built on SOC 2. Which…

The ICAAP is the bank's own capital argument. The 6 building blocks, the 2 perspectives, what the 2026…

A journey risk assessment weighs 5 factors, and the first is whether the trip is needed. Which journeys…

Automated decision-making technology under the CCPA: what counts, which decisions are caught, the 3 rights, and why HR…

The strategic asset management plan converts organizational objectives into asset objectives. The 9 sections, who writes it, and…

A facility management SLA needs 5 elements, and the last 2 are usually missing. Writing service levels that…

Compliance monitoring tests whether controls work now. How it differs from audit, the 6 steps to a monitoring…

RTO and RPO measure different things, and 2 more metrics decide whether either is achievable. Where each number…

HITRUST scoring evaluates every requirement at 5 maturity levels, weighted so documentation alone cannot certify you. Where the…

GovRAMP status runs across 8 levels in 2 families. What each verified status means, what the 2026 snapshot…

Category: Articles