Security Lights the Way

MajorCyber™

Editorial Policy

Last updated

MajorCyber™ exists to be accurate. This policy explains how content is produced, so readers can judge how much to rely on it.

Source hierarchy

Pages are researched from sources in this order of preference:

  1. Official regulators and government agencies (for example NIST, CISA, HHS, the European Commission, MeitY).
  2. Official standards bodies and framework owners (for example ISO, the AICPA, the PCI Security Standards Council).
  3. Official programme documentation (for example FedRAMP and CMMC programme pages).
  4. Authoritative technical publications.
  5. Credible professional and academic analysis.
  6. Reputable industry commentary, used for context only and labelled “secondary”.

Competitors’ marketing pages are never used as a source of facts.

What must every framework guide contain?

Before a framework guide can be published, the site’s build process checks that it has at least three source references, at least three FAQs, a last-reviewed date and a substantive original explanation. Pages that fail these checks cannot be published. Each guide states what the framework is, who it applies to, what it requires, whether it is binding or voluntary, its current edition or status, and any open questions.

Publication statuses

Status Meaning
Draft Being written. Never public
Research required In the registry, but not yet researched. Never public
Ready for review Researched and drafted, awaiting editorial approval. Visible only in private previews
Approved for publication Approved, scheduled to publish
Published Live, listed and indexed
Needs update Live, but flagged for re-checking. Carries an “under review” notice
Archived Withdrawn, with a redirect to the most relevant replacement

Only published content appears in navigation, search results and the sitemap.

Use of AI

Some research and drafting is done with AI assistance. When it is, the page says so. AI assistance never replaces checking against the official sources listed on the page, and no page claims a human review that did not happen. The “Reviewed by” line appears only when a named person has actually reviewed that page.

Many standards are copyrighted and sold by their publishers. MajorCyber™ explains them in original words, refers to their structure, and links to official listings. It does not reproduce their text.

Independence

There is no sponsored content, paid placement or affiliate linking. MajorCyber™ is not affiliated with any standards body, regulator or certification scheme.

Corrections

Errors are corrected promptly. Material corrections update the page’s review date. To report an error, use the contact page.