Articles Archives - Governance Docs

NERC CIP patch management under CIP-007 R2: the two separate 35-calendar-day clocks, named patch sources, and mitigation plans…

NERC CIP low impact explained: the seven CIP-003 Attachment 1 topics, the vendor remote access control added in…

BES Cyber System categorization under CIP-002: the high, medium and low criteria, the process auditors test, and the…

NERC CIP compliance explained: how RSAW audits work, the three evidence rules, the compliance calendar, and where programmes…

NERC CIP standards explained: all 13 enforceable standards, 46 requirements, the 2028 cutover, and why CIP-015 is not…

ISO 27001 certification cost in 2026 runs $8,000 to $30,000 for most small US companies. A full line-item…

A gifts and hospitality policy has to fix 5 things a salesperson can apply at dinner. What ISO…

ISO 27018 applies in one narrow case: public cloud, personal data, acting as processor. The 6 obligations that…

An ISO 21001 internal audit has to test whether learning happened. What to check clause by clause, the…

Authorised Economic Operator status comes as AEOC or AEOS, against 4 cumulative criteria. What the audit examines, and…

STAR Level 2 comes in 2 forms: certification built on ISO 27001, attestation built on SOC 2. Which…

The ICAAP is the bank's own capital argument. The 6 building blocks, the 2 perspectives, what the 2026…

Category: Articles