About Us Contact Blog
Governance DocsGovernance Docs
Which Toolkit?SoA GeneratorFree TemplatesSample ReportsFind the Right AssessmentRecords of Processing (ROPA)Data Privacy Impact AssessmentLegitimate Interests AssessmentTransfer Impact AssessmentPrivacy Risk AssessmentGDPR Gap AssessmentUK GDPR Gap AssessmentCCPA/CPRA Gap AssessmentISO 27701 Gap AssessmentHIPAA Gap AssessmentISO 27001 Risk AssessmentThird-Party Risk AssessmentSoA GeneratorISO 27001 Assessment Tool (Excel)ISO 27001 Gap AssessmentSOC 2 Gap AssessmentNIST CSF 2.0 Gap AssessmentNIST SP 800-53 Gap AssessmentNIST RMF Gap AssessmentCIS Controls Gap AssessmentPCI DSS 4.0 Gap AssessmentNIS2 Gap AssessmentCMMC 2.0 Gap AssessmentNIST SP 800-171 Gap AssessmentFedRAMP Gap AssessmentBSI C5 Gap AssessmentIEC 62443 Gap AssessmentSAMA CSF Gap AssessmentNCA ECC Gap AssessmentISO 20000 Gap AssessmentAI Risk AssessmentAI Impact AssessmentISO 42001 Gap AssessmentEU AI Act Gap AssessmentBusiness Impact AnalysisContinuity Risk AssessmentISO 22301 Assessment Tool (Excel)ISO 22301 Gap AssessmentDORA Gap AssessmentISO 9001 Gap AssessmentISO 13485 Gap AssessmentIATF 16949 Gap AssessmentISO 14001 Gap AssessmentISO 45001 Gap AssessmentISO 45001 Assessment Tool (Excel)HACCP Gap AssessmentEnterprise Risk AssessmentISO 31000 Gap AssessmentData Governance Gap AssessmentProject Management Gap AssessmentAll Gap AssessmentsISO 27001 Internal AuditISO 42001 Internal AuditAboutBlogContactMy AccountCart
Browse Toolkits
Governance Docs
  • Browse All Toolkits
  • Information Security & Cybersecurity
  • Data Privacy & Protection
  • Governance, Risk & Compliance
  • Quality Management
  • Health, Safety & Environment
  • AI Governance

My Account

CART

No products in the cart.

Category: Articles

PCI PIN scope — PCI PIN Scope: Which of the 145 Requirements Apply to You

PCI PIN Scope: Which of the 145 Requirements Apply to You

Governance Docs08th September 2026

PCI PIN scope explained: the four requirement columns, why 96 + 85 + 105 + 94 does not…
Read More
PCI PIN key blocks — PCI PIN Key Blocks: The 3 Phases and What Phase 3 Did Not Require

PCI PIN Key Blocks: The 3 Phases and What Phase 3 Did Not Require

Governance Docs08th September 2026

PCI PIN key blocks explained: the three phases, why Phase 3 never required existing POI deployments to convert,…
Read More
PCI PIN vs PCI DSS — PCI PIN vs PCI DSS: Which One Applies to You in 2026

PCI PIN vs PCI DSS: Which One Applies to You in 2026

Governance Docs08th September 2026

PCI PIN vs PCI DSS explained: different assessors, no self-assessment route for PIN, a two-year cycle, and scope…
Read More
PCI PIN Security Requirements — PCI PIN Security Requirements: A Complete Guide to v3.1 in 2026

PCI PIN Security Requirements: A Complete Guide to v3.1 in 2026

Governance Docs08th September 2026

PCI PIN Security Requirements v3.1 explained: 7 control objectives, 33 requirements, 145 sub-requirements, the four scope columns and…
Read More
HIPAA compliance cost in 2026 broken down by organization size, with 2026 civil money penalty figures

HIPAA Compliance Cost in 2026: The Complete Breakdown

Governance Docs08th September 2026

HIPAA compliance cost in 2026 runs $3,000 to $35,000 in year one for most small organizations. A full…
Read More
ISO 13485 certification cost breakdown showing IAF MD 9 audit days of 3, 6 and 10 for different company sizes and an indicative $1,100 to $1,800 per audit day rate

ISO 13485 Certification Cost: A Clear 2026 Breakdown

Governance Docs07th September 2026

ISO 13485 certification cost, broken down: the normative IAF audit-day table that sets your fee, indicative $1,100-$1,800 day…
Read More
AMLA direct supervision — AMLA Direct Supervision: Who Is Actually Selected in 2027

AMLA Direct Supervision: Who Is Actually Selected in 2027

Governance Docs07th September 2026

AMLA direct supervision reaches about 40 cross-border financial groups, not the whole market. The three gates, the timetable,…
Read More
suspicious transaction report — Suspicious Transaction Report Deadline: The Complete AMLR Guide

Suspicious Transaction Report Deadline: The Complete AMLR Guide

Governance Docs07th September 2026

A suspicious transaction report under AMLR has no fixed filing period. The clocks that do run, the two…
Read More
beneficial ownership threshold — Beneficial Owner 25 Percent: The Complete AMLR Calculation

Beneficial Owner 25 Percent: The Complete AMLR Calculation

Governance Docs07th September 2026

The beneficial ownership threshold under AMLR Article 52: multiply along each chain, add across chains, and the separate…
Read More
AML compliance cost — AML Compliance Cost Under AMLR: A Practical 2027 Method

AML Compliance Cost Under AMLR: A Practical 2027 Method

Governance Docs07th September 2026

AML compliance cost under AMLR: the provisions that drive it, where budgets break, and a worked method to…
Read More
AML compliance officer — AML Compliance Officer Under AMLR: The Essential 2027 Guide

AML Compliance Officer Under AMLR: The Essential 2027 Guide

Governance Docs07th September 2026

AMLR Article 11 requires two appointments, not one. What the AML compliance officer does, what the compliance manager…
Read More
CDD vs EDD — CDD vs EDD: The Complete AMLR Comparison for 2027

CDD vs EDD: The Complete AMLR Comparison for 2027

Governance Docs07th September 2026

CDD vs EDD under AMLR: the eight mandatory enhanced triggers, the seven Article 34(4) measures, the 60-day SDD…
Read More
    ←
  • 1
  • …
  • 66
  • 67
  • 68
  • 69
  • 70
  • …
  • 106
  • →

Recent Posts

ISO 14001 surveillance audit infographic showing the cycle years, audit time, eight review areas and the 2029 transition deadline
ISO 14001 Surveillance Audit: The Complete 2026 Guide

November 3, 2026

ISO 27001 toolkit contents shown as three layers: clause 4 to 10 records, 93 Annex A controls and supporting registers
ISO 27001 Toolkit: What a Complete One Contains (2026)

November 2, 2026

ISO 9001 recertification audit three-year cycle showing surveillance in years 1 and 2 and recertification in year 3
ISO 9001 Recertification Audit: The Complete 2026 Guide

November 1, 2026

ISO 9001 surveillance audit: eight required review areas, the 12-month window and the 2029 transition deadline
ISO 9001 Surveillance Audit: The Complete 2026 Guide

October 31, 2026

ISO 27001 software installation under Annex A 8.19: production systems and end-user endpoints
ISO 27001 Software Installation: Essential A.8.19 Guide 2026

October 31, 2026

Categories

  • Articles
  • DORA
  • GDPR
  • HIPAA
  • ISO 27001
  • ISO 42001 & AI governance
  • ISO 9001
  • Management systems
  • NIS2
  • Security frameworks
  • SOC 2
Governance DocsGovernance Docs

Reliable ISO & compliance documentation toolkits that help your business meet regulatory standards with ease.

Governance Docs LLC
1209 Mountain Road Pl NE, Suite R
Albuquerque, NM 87110, USA
[email protected]
+1 505 289 2455

Toolkits

  • ISO 27001:2022
  • GDPR
  • SOC 2
  • PCI-DSS v4.0
  • HIPAA
  • ISO 42001
  • All toolkits →

Company

  • About Us
  • Blog
  • Contact
  • FAQ
  • Which toolkit do I need?
  • Request a custom toolkit
  • Free templates
  • SoA generator
  • Assessments
  • Sample reports
  • RSS feeds

Policies

  • Privacy Policy
  • Terms & Conditions
  • Refund & Return Policy
  • Delivery Policy
  • Manage cookies
Browse by topicISO 27001ISO 42001 & AI governanceGDPRSOC 2HIPAANIS2DORAISO 9001Management systemsSecurity frameworks
© 2026 Governance Docs LLC. All rights reserved.
Secure checkoutstripeVISA