Security frameworks Guides | Governance Docs

The 11 COBIT design factors with their values and the objectives each raises, the 4-stage design workflow, a…

COBIT vs ITIL: governance framework vs service management framework — 8 points compared, the 4 differences that matter,…

Management review controls per PCAOB Practice Alert 11: the 6 precision factors, the 4 questions an auditor tests,…

Fraud risk assessment under the COSO/ACFE Guide 2nd edition: the 5 principles, a scheme-by-scheme method with a worked…

ICSR explained: COSO's March 2023 guidance applying the 17 principles to ESG data — why sustainability data breaks…

Material weakness vs significant deficiency vs deficiency under PCAOB AS 2201: definitions, the 2-factor test, 4 indicators, who…

The 20 COSO ERM principles from the 2017 framework by component, what each asks you to show, how…

Cyber Essentials requirements v3.3: the 5 controls with numbers — 14-day patching, MFA on cloud, 12-character passwords, 10-attempt…

Cyber Essentials scope under v3.3: whole organisation vs sub-set, 12 device rules, the role-based BYOD table, cloud never…

Cyber Essentials renewal: 12-month validity, a full reassessment each year at £320–600, the April question-set change, Plus timing,…

Cyber Essentials vs ISO 27001 on 10 points: 5 prescribed controls vs a risk-based ISMS, cost, validity, who…

NIST 800-171 compliance cost: DoD's assessment estimates ($37,196 self, $104,670 certified) plus our implementation estimate by scope, $26,000…

Category: Security frameworks