Articles Archives - Governance Docs

Records management metadata explained: point-of-capture and process metadata, entities and classes, schemas and why metadata makes records evidence.

Records appraisal under ISO 15489-1 clause 7: scoping, functional analysis, risk, records requirements, decisions and authorisation, step by…

How to build a business classification scheme: functions, activities and transactions, file plans, and linking classes to access…

What a records management policy should contain under ISO 15489-1 clause 6.2: scope, mandates, responsibilities, approval, review and…

ISO 27001 remote working (Annex A 6.7) explained: why the 2022 control no longer names a policy, plus…

ISO 27001 configuration management (Annex A 8.9) is new in the 2022 edition. The five verbs auditors test,…

An internal audit findings rating scale that meets Standard 14.3: likelihood and impact, rating bands, priorities and engagement…

The IIA Third Party Topical Requirement explained: effective 15 September 2026, its 17 items across the third-party life…

The IIA Cybersecurity Topical Requirement explained: effective 5 February 2026, its 17 items, what to test and how…

Quality assurance and improvement program for internal audit: ongoing monitoring, self-assessment, the five-yearly external assessment and reporting.

Build a risk based internal audit plan under Standard 9.4: audit universe, annual risk assessment, required coverage areas…

Internal audit charter requirements under the 2024 IIA Standards: minimum contents, mandate, reporting lines, independence and the board's…

Category: Articles