Articles Archives - Governance Docs

IIA Topical Requirements explained: all four issued requirements, effective dates, item counts, the applicability rule and how to…

Global Internal Audit Standards explained: 5 domains, 15 principles, 52 standards, what changed from the 2017 IPPF and…

ISO 27001 privileged access sits in Annex A control 8.2, one of 93 controls. What it covers, why…

ISO 27001 data leakage prevention is Annex A 8.12, one of 11 new 2022 controls. What it requires,…

Does IEC 62443 help with the EU Cyber Resilience Act? Yes, but certification currently gives no presumption of…

How an OT incident response plan differs from an IT one, the 12 sections it needs, how it…

How to build and maintain an OT asset inventory for IEC 62443: the attributes to capture, four discovery…

NIST CSF 2.0 gives the board an outcome view; IEC 62443 gives plant engineers testable requirements. Compare scope,…

IEC 62443 is a certifiable, paid standard series; NIST SP 800-82 is free US guidance. Compare risk methods,…

How long IEC 62443 implementation takes and what happens in each phase: nine steps from scope to evidence,…

How asset owners run an IEC 62443 gap analysis: scope 2-1, 3-2/3-3 and 2-4, assess against 2-1:2024, sample…

What IEC 62443 documentation an asset owner needs, organized by part and by the 8 security program elements,…

Category: Articles