Articles Archives - Governance Docs

How to run a NIST 800-171 self-assessment that stands up after the CMMC suspension: scope, SSP, evidence, the…

What a covered business needs in place under the CCPA in 2026, with the deadlines, the evidence and…

Stage 1 vs stage 2 audit, explained by an auditor: what each stage checks, why stage 2 is…

NERC CIP-010 guide: R1 baselines and change control, R2 monitoring, R3 vulnerability assessments, R4 transient assets and audit…

NIS2 supply chain security under Article 21: what the directive requires, how to assess suppliers, contract clauses and…

CMMC POA&M rules for Level 2: minimum score, 180-day closeout, which requirements cannot be deferred and what the…

How to write a NIST 800-171 SSP: scope, boundary, control implementation statements, Rev 2 vs Rev 3 and…

DPDP data principal rights under India's DPDP Act and Rules: what individuals can request, how fiduciaries must respond…

The MiCA transitional period ended on 1 July 2026. What ESMA expects from unauthorized and authorized crypto-asset service…

What an ISO 14971 risk management report must contain, how it differs from the risk management file, and…

How the Cyber Resilience Act treats open source: when software is in scope, steward obligations, manufacturer duties and…

Category: Articles