STAR Level 2: A Clear Guide to Certification vs Attestation
STAR Level 2 comes in 2 forms: certification built on ISO 27001, attestation built on SOC 2. Which route to take, and the maturity score only one carries.
Read More
Clean Desk Policy: 9 Essential Rules for 2026
A clean desk policy that passes an ISO 27001 audit: what Annex A 7.7 requires, the 9 rules to include, and the clear screen half most policies skip.
Read More
Third-Party Risk Management: One Inventory, Four Regimes
DORA, NIS2, ISO 27001 and sector schemes ask about the same suppliers in different formats. Build one inventory that answers all four, and report from it.
Read More
NIST SP 800-53: The Baselines, and Release 5.2.0
NIST SP 800-53 Rev 5 now ships patch releases. What Release 5.2.0 added, why SP 800-53B matters more than the catalog, and where the ISO 27001 mapping helps.
Read More
DORA Toolkit – 100+ Comprehensive Templates
Achieve compliance with Regulation (EU) 2022/2554 (DORA) with 100+ ready-to-edit templates covering all five pillars — ICT risk management, incident classification and reporting, resilience testing and TLPT, third-party risk, and...
Read More
Governance Docs Home
Editable ISO & compliance documentation toolkits — ISO 27001, SOC 2, NIST, GDPR and 60+ frameworks, auditor-written and ready to download.
Read More
Compliance Consultant Certifications: 6 Essential Credentials
Compliance consultant certifications: Lead Auditor, CISA, CISSP, CISM/CRISC, CCEP, CIPP/E — what each proves, the issuers' prerequisites, and what each unlocks.
Read More
Fixed Fee vs Time and Materials: A Clear Guide for Consultants
Fixed fee vs time and materials for compliance consultants: the 6 differences, which engagements suit each, the hybrids, and a scope that stays fixed.
Read More
STAR Registry: The Clear Guide to CSA’s 2,765 Listings (2026)
STAR Registry: ~2,765 CSA listings on 19 Sept 2026 — CAIQ, CAIQ Lite, Valid-AI-ted, Certification, Attestation, C-STAR, STAR for AI — what each label means.
Read More
AI Controls Matrix: 247 Essential CSA Controls and STAR for AI
AI Controls Matrix v1.1 (22 June 2026): 247 objectives in 18 domains, 5 pillars, 5 roles, mappings to ISO 42001, the EU AI Act and NIST AI RMF, and STAR...
Read More