ISO 20000 Mandatory Documents and Records, Clause by Clause
The documents and records ISO/IEC 20000-1:2018 requires, clause by clause, plus the ones no clause names that every…
Read More
ISO 20000 Certification: How the Process Actually Works
ISO 20000 certification explained: what ISO/IEC 20000-1 requires, the audit stages, realistic timings, and why an ITIL-mature team…
Read More
HIPAA Notice of Privacy Practices: What Changed in February 2026
What a HIPAA notice of privacy practices must contain, the 42 CFR Part 2 update that took effect…
Read More
How to Implement HIPAA: A Ten-Step Plan
A practical HIPAA implementation plan in ten steps: risk analysis, policies, business associates, training and breach response, with…
Read More
The HIPAA Security Rule Overhaul: What Is Proposed and When
The proposed HIPAA Security Rule overhaul explained: what would change, why the final rule slipped to 2027, and…
Read More
HIPAA Risk Assessment Template: What It Must Contain
What a HIPAA risk assessment template must contain to satisfy the Security Rule risk analysis requirement at 45…
Read More
How to Implement ISO 20000: A Ten-Step Plan
A practical ISO/IEC 20000-1 implementation plan in ten steps: service portfolio, SLAs, the service management processes and how…
Read More
How to Implement ISO 42001: A Ten-Step Plan
A practical ISO 42001 implementation plan in ten steps: AI inventory, risk assessment, the AI system impact assessment…
Read More
How to Implement GDPR: A Ten-Step Plan
A practical GDPR implementation plan in ten steps: records of processing, lawful basis, DPIAs, data subject rights and…
Read More
How to Implement ISO 13485: A Ten-Step Plan
A practical ISO 13485 implementation plan in ten steps, with realistic timings, what QMSR changed for US manufacturers,…
Read More
How to Implement ISO 27001: A Ten-Step Plan
A practical ISO 27001 implementation plan in ten steps for the 2022 edition, with realistic timings and the…
Read More
IVDR Classification: Annex VIII, Seven Rules, Classes A to D
IVDR classification decides whether a notified body is involved at all, which conformity route applies, and which transitional…
Read More