Articles Archives - Governance Docs

A problematic data action can arise from processing that is authorised, accurate and secure. The ten questions that…

NIST Privacy Framework 1.1 vs 1.0: four Categories retired, six added and all 34 Subcategory identifiers that moved,…

Privacy risk vs cybersecurity risk: why a privacy problem can arise from processing that is authorised, accurate and…

The NIST Privacy Framework explained: the Core, Profiles and Implementation Tiers, all 102 Subcategories, and why version 1.1…

A WISP for sole practitioners is smaller, but not for the reason most assume. What 16 CFR 314.6…

The FTC Safeguards Rule for tax preparers sets ten obligations at 16 CFR 314.4. What each requires, what…

A written information security plan template is only the shape. Here is what a WISP must contain under…

NERC CIP vs IEC 62443 compared: mandatory versus voluntary, impact ratings versus zones and conduits, and how to…

NERC CIP audit preparation: writing the RSAW narrative, computing your own intervals, the three checks worth running first,…

CIP-015 internal network security monitoring is not enforceable until 1 October 2028, not September 2025. What the standard…

CIP-014 physical security explained: the two separate unaffiliated third-party gates at R2 and R6, the six R5 functions,…

CIP-013 supply chain risk management: the planning stage everyone skips, the six procurement elements, and what to do…

Category: Articles