Articles Archives - Governance Docs

The ISO 22301 risk assessment is the half of clause 8.2 that gets skipped. What it covers, how…

The 3 HITRUST assessments compared: 43 controls at e1, 182 at i1, a tailored set at r2 -…

TX-RAMP explained: who must comply, the 2 certification levels, the 18-month provisional route, and which FedRAMP and GovRAMP…

A compliance obligations register for ISO 37301 clause 4.5: what counts as an obligation, the 8 columns it…

The 6 DAMA data quality dimensions defined, with the measure for each - plus why validity and accuracy…

SAMA CSF vs NCA ECC: who each binds, why one scores maturity 0-5 and the other tests compliance,…

Risk criteria under ISO 31000: the 6 decisions to make before assessing anything, how they differ from risk…

All 20 NIST 800-53 control families with their two-letter IDs, base controls versus enhancements, and the 3 families…

Critical ICT third-party providers under DORA: the 4 designation criteria, how a Lead Overseer is chosen, and the…

DORA incident reporting has 3 deadlines: 4 hours from classification, 72 hours for the intermediate report, one month…

A cybersecurity risk register in 10 elements, from NIST IR 8286 Revision 1 - what each field is…

The NIST RMF in 7 steps, from Prepare to Monitor, with the publication behind each - and how…

Category: Articles