Monthly Selected Authority Documents  January, 2024

AD Common NameAD TypeSelectedGroupsInitiativesCobiTSafe Harbor511671Cross Border Privacy AssessmentBest Practice Guideline4331Basel IIRegulation or Statute42120ISO/IEC 27001:2022International or National Standard36104PCI DSS Defined Approach Requirements, Version 4.0International or National Standard2884EU General Data Protection Regulation (GDPR)Regulation or Statute2518519NIST SP 800-53 R5International or National Standard252717ISO/IEC 27002:2022International or National Standard241010CIS Controls, V8Best Practice Guideline20139ISO/IEC 27701:2019International or National Standard19189NIST CSF 1.1International or National Standard196123NIST SP 800-53 Revision 5.1.1International or National Standard1900ISO 27001-2013International or National Standard172162223 NYCRR 500Regulations1511Digital Operational Resilience ActRegulations1400ISO 22301- Societal Security - Business Continuity Management Systems - RequirementsInternational or National Standard14191NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and OrganizationsInternational or National Standard14158ISO/IEC 27017:2015(E)Self-Regulatory Body Requirement122311NIST SP 800-53International or National Standard12172hipaa security ruleRegulation or Statute1151PCI DSS v3.2.1Contractual Obligation1184Cloud Controls Matrix, v4.0Self-Regulatory Body Requirement1050COBIT 2019Safe Harbor1052SOC2Safe Harbor1050Brazilian General Data Protection Law (LGPD)Bill or Act9110California Privacy Rights Act (CPRA)Bill or Act942COBIT 5 Enabling Processes: BasicsSafe Harbor9553CSF V1.1International or National Standard900HIPAABill or Act9104ISO/IEC 27018:2019International or National Standard932PCI DSS Defined Approach Testing Procedures, Version 4.0International or National Standard965Sarbanes-Oxley Act of 2002Bill or Act95623 NYCRR 500Regulation or Statute8286AICPA Reporting on Controls at a Service Organization SOC-2Safe Harbor81447BSI Cloud Computing Compliance Controls Catalogue (C5)Best Practice Guideline8184FFIEC Information Technology Examination Handbook - Business Continuity ManagementAudit Guideline8205ISO 22301:2019(E)International or National Standard812ISO 27002International or National Standard885Trust Services Criteria (with Revised Points of Focus - 2022)Self-Regulatory Body Requirement853Australia Privacy Amendment ActRegulation or Statute7200COSO Enterprise Risk Management (2017)Best Practice Guideline7259HIPAA Electronic Health Record TechnologyRegulation or Statute721NIST AI 100-1Best Practice Guideline710NIST Privacy FrameworkInternational or National Standard7157NIST SP 800-34, Rev 1International or National Standard700NIST SP 800-39International or National Standard7196SWIFT Customer Security Controls FrameworkBest Practice Guideline700AICPA/CICA Privacy Management FrameworkBest Practice Guideline600Australian Government Information Security Manual ControlsInternational or National Standard630Australian Government Information Security Manual, September 2023International or National Standard600

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.

{{ include_custom_fonts({"Aeonik":["Regular","Bold"]}) }}