Articles Archives - Governance Docs

OPRP vs CCP under ISO 22000: a CCP has a measurable critical limit, an OPRP an action criterion.…

QHSE documentation works when the tiers are decided first: manual, procedures, work instructions, records. What belongs in each…

The COSO 17 principles listed by component, plus the present-and-functioning test, what counts as a major deficiency, and…

A HACCP plan is built from the 12 Codex steps - 5 preliminary steps then the 7 principles.…

An ISO 45001 assessment can mean 4 things: self-assessment, gap analysis, internal audit or certification audit. What each…

CIS Benchmarks are configuration guides; CIS Controls are a prioritized program. What each covers, the 3 profile levels,…

A crypto-asset white paper under MiCA: when it is required, the 9 Annex I parts, the mandatory statements,…

A BSI C5 attestation is an assurance report, not a certificate. Type 1 vs type 2, what the…

A first article inspection proves the process, not the part. The 3 AS9102 forms, what triggers a re-accomplishment,…

The Generative AI Profile, NIST AI 600-1, names 12 risks unique to or exacerbated by generative AI, with…

Energy performance indicators under ISO 50001: clauses 6.3 to 6.6, normalization for relevant variables, and when you may…

Cyber Essentials Plus tests the same 5 controls independently. What the 2026 Danzell update changed, the new auto-fail…

Category: Articles