TISAX Exchange: The Half of TISAX Suppliers Never Use
TISAX is an exchange mechanism, not a certificate. The four steps, why scope decides what customers receive, and…
Read More
SWIFT CSCF: Your Independent Assessment Can Be Internal
The SWIFT CSCF independent assessment can be performed by your own second or third line of defence, not…
Read More
SOX 404a vs 404b: The Complete 2026 Guide
SOX 404a vs 404b: 404(a) binds every issuer, 404(b) only 35.4% of registrants. The float and revenue tests…
Read More
PCI DSS Validation: Who Requires It, and What to Do First
PCI SSC does not require PCI DSS validation — your acquirer or payment brand does. How scope really…
Read More
NIST AI RMF: The Four Functions, and the Revision Underway
The NIST AI RMF is voluntary, widely referenced, and version 1.0 is being revised under the White House…
Read More
ISO 50001: The Standard Held Still, the Family Did Not
ISO 50001:2018 is confirmed and stable, but ISO 50100:2026 and the rebuilt ISO 50002 audit series changed the…
Read More
ISO 41001: The Facility Management Standard, and Its Revision
ISO 41001:2018 is current and certifiable, but its replacement has reached DIS stage. What the standard requires, the…
Read More
ISO 55001:2024: The Asset Management Standard, Rewritten
ISO 55001:2024 replaced the 2014 edition in July 2024. What the asset management system requires, why the SAMP…
Read More
Data Governance and the DMBOK: What It Is, and Is Not
Data governance explained through the DAMA-DMBOK — what the framework covers, the boundaries DAMA sets explicitly, and the…
Read More
COSO: Two Frameworks, and the New Generative AI Guidance
COSO explained — the 2013 internal control framework, the 2017 ERM framework, and the supplemental guidance on sustainability…
Read More
Basel III in 2026: Adoption Is Still Incomplete
Basel III was set to be in effect from 1 January 2023, but adoption runs jurisdiction by jurisdiction…
Read More
NIST SP 800-30: The Complete 2026 Risk Assessment Guide
NIST SP 800-30 in full: the three tiers, all 15 numbered tasks, the Appendix G likelihood scales with…
Read More