Monthly Selected Authority Documents April, 2024

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.

AD Common NameAD TypeSelectedGroupsInitiativesNIST CSF 2.0International or National Standard7111ISO/IEC 27001:2022International or National Standard43104ISO/IEC 27002:2022International or National Standard321010NIST SP 800-53 R5International or National Standard302817CIS Controls, V8Best Practice Guideline29139PCI DSS Defined Approach Requirements, Version 4.0International or National Standard24105ISO/IEC 27701:2019International or National Standard221910NIST SP 800-53 Revision 5.1.1International or National Standard2000PCI DSS Defined Approach Testing Procedures, Version 4.0International or National Standard1965CobiTSafe Harbor181682EU General Data Protection Regulation (GDPR)Regulation or Statute1818519Sarbanes-Oxley Act of 2002Bill or Act1856Cloud Controls Matrix, v4.0Self-Regulatory Body Requirement1661ISO 27001-2013International or National Standard1621823NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and OrganizationsInternational or National Standard16169PCI DSS v3.2.1Contractual Obligation1684Digital Operational Resilience ActRegulations1511ISO 27002International or National Standard1585hipaa security ruleRegulation or Statute1451ISO/IEC 27017:2015(E)Self-Regulatory Body Requirement14231123 NYCRR 500Regulations1322FFIEC CATBest Practice Guideline13241NIST SP 800-53International or National Standard13172SOC 2®, 2022Audit Guideline1300SWIFT Customer Security Controls FrameworkBest Practice Guideline1300FFIEC IT Examination HandbookAudit Guideline12222NIST CSF 1.1International or National Standard12622323 NYCRR 500Regulation or Statute11307ISO 27005:2018International or National Standard1111NIST SP 800-171International or National Standard1142Trust Services Criteria (with Revised Points of Focus - 2022)Self-Regulatory Body Requirement1153Gramm Leach BlileyBill or Act1030NIST Privacy FrameworkInternational or National Standard10157AICPA Reporting on Controls at a Service Organization SOC-2Safe Harbor91447CMMC Level 2, v2.0Best Practice Guideline9106ISO/IEC 27018:2019International or National Standard932NIST AI 100-1Best Practice Guideline910NIST SP 800-37r2International or National Standard9135Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, High Impact Baseline, October 2020International or National Standard8108Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Low Impact Baseline, October 2020International or National Standard895CSF V1.1International or National Standard800HIPAABill or Act8104ISO 31000:2018International or National Standard8247NIST SP 800-63BInternational or National Standard8118SSAE No. 16 Reporting on Controls at a Service Organization SOC-1Safe Harbor893COBIT 2019Safe Harbor752Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 2020International or National Standard7115COSO Internal Control - Integrated FrameworkSelf-Regulatory Body Requirement7248FedRAMP Version 5 Moderate BaselineAudit Guideline700HIPAA Electronic Health Record TechnologyRegulation or Statute721{{ include_custom_fonts({"Aeonik":["Regular","Bold"]}) }}