Articles Archives - Governance Docs

AMLR vs AMLD compared provision by provision: the two compliance roles, the 60-day SDD limit, retention that became…

AMLR applies from 10 July 2027. The complete timeline: application dates, the 2029 football carve-out, AMLA supervision, and…

A vendor security questionnaire slows deals only when you improvise. Here are the four formats, the ten recurring…

An ISO 42001 checklist covering both halves: the 7 mandatory clauses and the 38 Annex A controls, plus…

A FedRAMP compliance checklist for 2026: the 8 steps in order, the Rev5 and 20x paths, and the…

There is no CSF certification audit. What an internal NIST CSF audit checklist is for, the six fields…

CSF 2.0 has no maturity model. Here is a defensible 5-point scale for scoring all 106 outcomes, why…

What NIST CSF policy templates must cover across the six Functions, the documents most programmes are missing, and…

NIST maps all 106 CSF 2.0 outcomes to SP 800-53 Rev 5 with 740 control references. How to…

CSF 2.0 withdrew 79 Subcategories and removed 12 Categories. The full mapping, the 16 outcomes with no predecessor,…

The GOVERN function is 31 of the 106 CSF 2.0 outcomes across six Categories, ten of them supply…

The 4 NIST CSF Tiers explained, including the two axes CSWP 29 scores them on and why Tier…

Category: Articles