Security frameworks Guides | Governance Docs

NIST CSF vs ISO 27001 on 5 differences: outcome framework vs certifiable system, Profiles vs certificate, scope, prescription,…

SOX scoping and materiality under AS 2201: the top-down sequence, overall and performance materiality, qualitative factors, locations, service…

SOX control testing under AS 2201: the principles, conventional sample sizes by frequency (annual 1 to daily 20–40),…

SOX 302 vs 404: quarterly CEO/CFO certifications vs the annual ICFR assessment and attestation, section 906, who signs…

SOX compliance cost by profile: 404(a)-only $200k–500k, accelerated filer $750k–2m, large accelerated $2.8–9m+ in year one — our…

SOX ITGC explained: the 4 domains (access, change, development, operations), how they support application controls and IPE, scoping,…

The data governance maturity model: 5 levels (performed to optimized), 7 dimensions, how to run an evidence-based assessment,…

Data lineage explained: business, technical and operational lineage, granularity and direction, 4 capture methods, the regulations that require…

Master data management vs data governance: MDM executes the golden record, governance decides definitions and rules — 5…

Data catalog vs data dictionary on 5 differences — question, unit, meaning, context, currency — where the glossary…

A data governance framework in 5 layers — strategy and policy, operating model, standards and processes, assets and…

The SAMA Cyber Threat Intelligence Principles (2022): 19 principles in 4 domains — core, strategic, operational, technical and…

Category: Security frameworks