Monthly Selected Authority Documents June, 2024

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.

AD_common_nameAD_typeSelectedGroupsInitiativesNIST CSF 2.0International or National Standard4921CIS Controls, V8Best Practice Guideline31139ISO/IEC 27001:2022International or National Standard31104NIST SP 800-53 Revision 5.1.1International or National Standard2900EU General Data Protection Regulation (GDPR)Regulation or Statute2418719HIPAABill or Act22104ISO/IEC 27002:2022International or National Standard221110Sarbanes-Oxley Act of 2002Bill or Act2166PCI DSS Defined Approach Requirements, Version 4.0International or National Standard2011523 NYCRR 500Regulations1633NIST SP 800-53 R5International or National Standard162817California Privacy Rights Act (CPRA)Bill or Act1542CMMC Level 2, v2.0Best Practice Guideline15106hipaa security ruleRegulation or Statute1551NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and OrganizationsInternational or National Standard15169SOC 2®, 2022Audit Guideline1510Childrens Online Privacy Protection ActRegulation or Statute1460CobiTSafe Harbor141682NIST AI 100-1Best Practice Guideline1410NIST SP 800-53International or National Standard14183California Consumer Privacy Act of 2018Bill or Act13452Cloud Controls Matrix, v4.0Self-Regulatory Body Requirement1361Digital Operational Resilience ActRegulations1221ISO 27001-2013International or National Standard1121823ISO/IEC 27701:2019International or National Standard111910Red Book (Condensed)International or National Standard11227COBIT 2019Safe Harbor1092COSO Internal Control - Integrated FrameworkSelf-Regulatory Body Requirement10248FFIEC CATBest Practice Guideline10241Massachusetts 201 CMR 17.00 Standards for The Protection of Personal Information of Residents of the Commonwealth of MassachusettsRegulation or Statute1075NIST Privacy FrameworkInternational or National Standard10157NIST SP 800-161, Revision 1, Appendix A, C-SCRM Baseline ControlsInternational or National Standard1000NIST SP 800-161, Revision 1, Appendix A, C-SCRM Level 2 ControlsInternational or National Standard1000NIST SP 800-37r2International or National Standard10135Trust Services Criteria (with Revised Points of Focus – 2022)Self-Regulatory Body Requirement105316 CFR Part 310Regulation or Statute90016 CFR Part 310 AmendmentsRegulation or Statute900Australian Privacy ActBill or Act920CAN SPAM Act of 2003Regulation or Statute900Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Privacy Control Baseline, October 2020International or National Standard963COPPARegulation or Statute910Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union, 14 December, 2022Regulatory Directive or Guidance931HIPAA HCFABest Practice Guideline932ISO 27002International or National Standard985ISO 31000 R 2009International or National Standard91701NIST SP 800-161 r1International or National Standard910NIST SP 800-161, Revision 1, Appendix A, C-SCRM Level 1 ControlsInternational or National Standard900PCI DSS v4 SAQ D for Service ProvidersSelf-Regulatory Body Requirement90042 CFR Parts 412, 413, 422 et al.Regulation or Statute802California Civil Code Section 1798.80-1798.84Regulation or Statute841

{{ include_custom_fonts({"Aeonik":["Regular","Bold"]}) }}