Abby Donoughe

Marketing & Sales Analyst, K2 GRC & Etactics

Abby Donoughe contributes content focused on governance, risk, and compliance topics, helping organizations better understand cybersecurity frameworks, compliance training programs, and security awareness initiatives.

Her work supports educational resources related to GRC platforms, eLearning systems, and phishing simulation technologies. Abby also contributes to content supporting healthcare revenue cycle management technologies through Etactics, where she helps develop resources that explain operational technology and digital healthcare solutions.

SOC 2 Bridge Letter Explained: How to Navigate Between SOC 2 Reports

Abby Donoughe

Mar 4, 2026

A SOC 2 bridge letter maintains stakeholder assurance between audit periods by documenting your control status. Learn what to include and when to issue one.

10 min read

ISO 27001 Data Retention Policy: Guide & Template

Abby Donoughe

Mar 4, 2026

Learn how an ISO 27001 data retention policy helps organizations manage data securely, define retention periods, and reduce risk while maintaining compliance.

10 min read

AIUC-1: Standard for AI Agents & AI Compliance Framework

Abby Donoughe

Mar 4, 2026

AI adoption is accelerating, but security and governance are struggling to keep up. AIUC-1 provides a practical framework to help organizations manage AI risk, strengthen compliance, and securely scale AI systems in real-world environments.

10 min read

CUI Security Training: Best Practices & Requirements

Abby Donoughe

Mar 4, 2026

This blog explains the requirements for DOD CUI training and how organizations must properly handle Controlled Unclassified Information to stay compliant with federal regulations. It covers key frameworks like 32 CFR Part 2002, outlines contractor responsibilities, and shows how structured training and workflows reduce risk and improve audit readiness.

10 min read

Healthcare Risk Assessment: A Complete Guide

Abby Donoughe

Mar 4, 2026

Learn how healthcare organizations can identify, evaluate, and mitigate clinical, operational, cybersecurity, and compliance risks to improve patient safety, strengthen resilience, and support long-term success.*

10 min read

ISO 9001 vs ISO 27001: Which Certification is Right for You?

Abby Donoughe

Mar 4, 2026

Compare ISO 9001:2015 vs ISO 27001:2022 — understand the key differences in quality management and information security, who should pursue each certification, and how to integrate both standards.

12 min read

Risk Register Examples: From Heat Maps to Dollars

Abby Donoughe

Mar 4, 2026

Explore practical risk register examples, including enterprise, operational, qualitative, and FAIR-based cybersecurity registers, to learn how organizations identify, prioritize, and manage risk more effectively.

10 min read

