StateRAMP Is Now GovRAMP: The Verification Pathway Explained
StateRAMP has been renamed GovRAMP. The verification pathway, the 60 Core controls, the overlays, and why TX-RAMP is…
Read More
ITIL 4 in 2026: Still Current, But Version 5 Has Started
ITIL 4 explained, and where it stands now that ITIL (Version 5) is released — what carries over,…
Read More
COBIT 2019: The 40 Objectives and Why There Is No Certificate
COBIT 2019 explained — the 40 governance and management objectives, the five domains, the design factors that tailor…
Read More
ISO 37001:2025 Anti-Bribery: What the New Edition Requires
ISO 37001:2025 is the current edition and the 2016 standard is withdrawn. What the anti-bribery management system requires,…
Read More
CCPA Compliance in 2026: Every New Deadline Explained
CCPA compliance changed on 1 January 2026. The risk assessment, ADMT and cybersecurity audit deadlines, read from the…
Read More
ISO 31000 Risk Management: The 3 Components Explained
ISO 31000:2018 explained — the three components, why there is no certification, and the third edition now at…
Read More
CIS Controls v8.1: The 18 Controls and 3 Implementation Groups
A practical guide to CIS Controls v8.1 — the 18 Controls, the 153 Safeguards, and how the three…
Read More
Cyber Essentials Certification: The Five Controls
Cyber Essentials certification explained: the five technical controls, why scope decides the outcome, and the four failures that…
Read More
FedRAMP Authorization: What FedRAMP 20x Changed
FedRAMP authorization has changed. 20x is past the pilots and in wide-scale adoption, Key Security Indicators replaced yearly…
Read More
CMMC Compliance: The Four-Phase Rollout Explained
CMMC compliance explained: the three levels, the four phases, and why Phase 2 on 10 November 2026 is…
Read More
CRA Product Classification: Default, Class I, Class II, Critical
Classification decides whether you need a notified body. Article 7(1) contains the two rules that settle most cases,…
Read More
CRA Conformity Assessment: Do You Need a Notified Body?
No harmonised standard has been cited under the CRA, so Article 32(2) currently sends every Annex III product…
Read More