About Us Contact Blog
Governance DocsGovernance Docs
Which Toolkit?SoA GeneratorFree TemplatesSample ReportsFind the Right AssessmentRecords of Processing (ROPA)Data Privacy Impact AssessmentLegitimate Interests AssessmentTransfer Impact AssessmentPrivacy Risk AssessmentGDPR Gap AssessmentUK GDPR Gap AssessmentCCPA/CPRA Gap AssessmentISO 27701 Gap AssessmentHIPAA Gap AssessmentISO 27001 Risk AssessmentThird-Party Risk AssessmentSoA GeneratorISO 27001 Assessment Tool (Excel)ISO 27001 Gap AssessmentSOC 2 Gap AssessmentNIST CSF 2.0 Gap AssessmentNIST SP 800-53 Gap AssessmentNIST RMF Gap AssessmentCIS Controls Gap AssessmentPCI DSS 4.0 Gap AssessmentNIS2 Gap AssessmentCMMC 2.0 Gap AssessmentNIST SP 800-171 Gap AssessmentFedRAMP Gap AssessmentBSI C5 Gap AssessmentIEC 62443 Gap AssessmentSAMA CSF Gap AssessmentNCA ECC Gap AssessmentISO 20000 Gap AssessmentAI Risk AssessmentAI Impact AssessmentISO 42001 Gap AssessmentEU AI Act Gap AssessmentBusiness Impact AnalysisContinuity Risk AssessmentISO 22301 Assessment Tool (Excel)ISO 22301 Gap AssessmentDORA Gap AssessmentISO 9001 Gap AssessmentISO 13485 Gap AssessmentIATF 16949 Gap AssessmentISO 14001 Gap AssessmentISO 45001 Gap AssessmentISO 45001 Assessment Tool (Excel)HACCP Gap AssessmentEnterprise Risk AssessmentISO 31000 Gap AssessmentData Governance Gap AssessmentProject Management Gap AssessmentAll Gap AssessmentsAboutBlogContactMy AccountCart
FOX v.2.4.9
Browse Toolkits
Governance Docs
  • Browse All Toolkits
  • Information Security & Cybersecurity
  • Data Privacy & Protection
  • Governance, Risk & Compliance
  • Quality Management
  • Health, Safety & Environment
  • AI Governance

My Account

CART

No products in the cart.

Category: Articles

FedRAMP ATO agency authorization guide

FedRAMP ATO: A Clear Guide to the 5 Agency Steps in 2026

Governance Docs02nd September 2026

A FedRAMP ATO is the agency's risk decision, not FedRAMP's. The 5 steps of initial agency authorization in…
Read More
DPDP Rules 2025 compliance deadlines guide

DPDP Rules 2025: A Clear Guide to the 2 Compliance Deadlines

Governance Docs02nd September 2026

The DPDP Rules 2025 commence in 3 tranches: 13 Nov 2025, 13 Nov 2026 and 13 May 2027.…
Read More
TISAX audit checklist guide for VDA ISA 2027

TISAX Audit Checklist: A Clear Guide to the 7 ISA 2027 Steps

Governance Docs02nd September 2026

A TISAX audit checklist for ISA 2027: which catalogue applies from 1 January 2027, the 7 preparation steps,…
Read More
PCI DSS SAQ types compared, showing which questionnaire fits each payment setup

PCI DSS SAQ Types: The Complete 2026 Guide to Choosing Yours

Governance Docs02nd September 2026

There are nine PCI DSS SAQ types in v4.0.1. This 2026 guide compares all of them, explains the…
Read More
CMMC Level 2 certification cost breakdown for 2026 showing DoD three-year estimates

CMMC Level 2 Certification Cost: The Complete 2026 Breakdown

Governance Docs01st September 2026

CMMC Level 2 certification cost runs about $104,670 over three years in DoD's own rule. Here's what to…
Read More
ITIL 4 to ITIL 5 - what needs rewriting

ITIL 4 to ITIL 5: What Needs Rewriting

Governance Docs31st August 2026

ITIL 4 to ITIL 5 means rewriting one document, not the set. What changes, what does not, and…
Read More
Experience level agreement - measuring experience alongside performance

Experience Level Agreements: A Complete Guide

Governance Docs31st August 2026

An experience level agreement measures what using a service feels like. The metrics that work, paired with the…
Read More
ITIL value stream mapping - the five steps and four time metrics

ITIL Value Stream Mapping: A Complete Guide

Governance Docs31st August 2026

ITIL value stream mapping in five steps, with the four time metrics that reveal why a stream is…
Read More
AI governance in ITSM - scaling oversight to capability

AI Governance in ITSM: A Practical 2026 Guide

Governance Docs31st August 2026

AI governance in ITSM starts with an inventory, not a policy. How to scale oversight to capability and…
Read More
ITIL AI Capability Model - the six capabilities

ITIL AI Capability Model: The 6 Capabilities

Governance Docs31st August 2026

The ITIL AI Capability Model classifies AI by what it does across six capabilities, so oversight scales to…
Read More
ITIL 5 practices - all 34 in two categories

ITIL 5 Practices: All 34 and the 2 Categories

Governance Docs31st August 2026

ITIL 5 practices still number 34 with the same names. Three categories became two and five practices moved.…
Read More
ITIL product and service lifecycle - the eight activities

ITIL Product and Service Lifecycle: 8 Activities

Governance Docs31st August 2026

The ITIL product and service lifecycle has eight activities, not six. What each one does, why it is…
Read More
    ←
  • 1
  • …
  • 71
  • 72
  • 73
  • 74
  • 75
  • …
  • 100
  • →

Recent Posts

ISO 27001 remote working Annex A 6.7 diagram showing the four evidence sets: authorisation, provisioning, enforcement and attestation
ISO 27001 Remote Working: Complete A.6.7 Guide 2026

October 12, 2026

ISO 27001 configuration management requirements under Annex A 8.9 - established, documented, implemented, monitored, reviewed
ISO 27001 Configuration Management: Complete 2026 Guide

October 11, 2026

internal audit findings rating scale — Internal Audit Findings Rating Scale: Examples and Template
Internal Audit Findings Rating Scale: Examples and Template

October 11, 2026

third party topical requirement — Third Party Topical Requirement: The 2026 Audit Guide
Third Party Topical Requirement: The 2026 Audit Guide

October 11, 2026

cybersecurity topical requirement — Cybersecurity Topical Requirement: How to Audit It in 2026
Cybersecurity Topical Requirement: How to Audit It in 2026

October 11, 2026

Categories

  • Articles
  • DORA
  • GDPR
  • HIPAA
  • ISO 27001
  • ISO 42001 & AI governance
  • ISO 9001
  • Management systems
  • NIS2
  • Security frameworks
  • SOC 2
Governance DocsGovernance Docs

Reliable ISO & compliance documentation toolkits that help your business meet regulatory standards with ease.

Governance Docs LLC
1209 Mountain Road Pl NE, Suite R
Albuquerque, NM 87110, USA
info@governancedocs.com
+1 505 289 2455

Toolkits

  • ISO 27001:2022
  • GDPR
  • SOC 2
  • PCI-DSS v4.0
  • HIPAA
  • ISO 42001
  • All toolkits →

Company

  • About Us
  • Blog
  • Contact
  • FAQ
  • Which toolkit do I need?
  • Free templates
  • SoA generator
  • Assessments
  • Sample reports
  • RSS feeds

Policies

  • Privacy Policy
  • Terms & Conditions
  • Refund & Return Policy
  • Delivery Policy
  • Manage cookies
Browse by topicISO 27001ISO 42001 & AI governanceGDPRSOC 2HIPAANIS2DORAISO 9001Management systemsSecurity frameworks
© 2026 Governance Docs LLC. All rights reserved.
Secure checkoutstripeVISA