Articles Archives - Governance Docs

NCA ECC implementation in 6 steps: scope, gap assessment, governance, remediation, internal review and assessment - plus the…

ISO 13485 purchasing in 3 parts: supplier evaluation, purchasing information and verification - plus the change-notification agreement most…

An AI system impact assessment looks outward, not inward. What ISO/IEC 42005:2025 asks for in 7 steps, how…

Threat intelligence under ISO 27001 control 5.7: the 3 levels, the 5 artefacts that make it auditable, and…

A plan of action and milestones in 9 fields, where the POA&M is still required in 2026, where…

A shared responsibility matrix decides who patches, configures and restores. What goes in it across IaaS, PaaS and…

ISO 21001 implementation in 6 steps for a school or training provider: beneficiary mapping, learner needs, what to…

ISO 28000 was retitled and widened in 2022. What the current edition requires, the 6 clause 8 requirements,…

The Cloud Controls Matrix explained: 17 domains, how the CAIQ turns it into a STAR submission, what CCM…

RTS performance factors under ISO 39001: exposure, intermediate and final safety outcomes - why a system measured only…

Facility management KPIs in 4 groups, what ISO 41001 clause 9.1 asks you to determine, and how to…

CCPA service provider, contractor or third party: the section 1798.140 definitions, the 5 contract terms that create the…

Category: Articles