Monthly Selected Authority Documents March 2026

Discover the Top 50 Most Popular Authority Documents in the Common Controls Hub (CCH) for March.

See how often each document was assigned across user groups and compliance initiatives—insightful data to help guide your compliance strategy.

AD_nameAD_idAD_typeselectedgroupsinitiativesISO/IEC 27001:20223567International or National Standard29266ISO/IEC 27002:20223430International or National Standard172913NIST CSF 2.03789International or National Standard17209EU General Data Protection Regulation (GDPR)2802Regulation or Statute1520723Digital Operational Resilience Act3668Regulations112311Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union, 14 December, 20223714Regulatory Directive or Guidance10156ISO 9001:20152942International or National Standard9296NIST 800-171 Rev 33946International or National Standard993PCI DSS Defined Approach Requirements v4.0.13987International or National Standard971FedRAMP Version 5 Moderate Baseline3644Audit Guideline841ISO/IEC 27001:2022/Amendment 1:20244103International or National Standard800ISO/IEC 27018:20193429International or National Standard8102NIST AI 100-13591Best Practice Guideline851NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations3134International or National Standard82512NIST SP 800-53 Revision 5.1.13687International or National Standard884CMMC Level 14042Regulations700CMMC Level 2, v2.03427Best Practice Guideline7187HIPAA Security and Privacy Rule3986Regulations72111ISO 27001-20131367International or National Standard723525ISO 42001:20234039International or National Standard762ISO/IEC 20000-1:20183002International or National Standard770NIST 800-53B, Moderate Impact Baseline, v5.2.04256International or National Standard700Sarbanes-Oxley Act of 20023296Bill or Act786SOC 2®, 20223647Audit Guideline77123 NYCRR 5003686Regulations6282023 NYCRR 5002895Regulation or Statute65424Artificial Intelligence Act3972Regulations693California Consumer Privacy Act of 20182957Bill or Act6575CIS Controls, V83323Best Practice Guideline62411Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 20203275International or National Standard62812COSO Internal Control - Integrated Framework1578Self-Regulatory Body Requirement6248ITIL Foundation 43272Best Practice Guideline601NIST 800-53 Sample4259International or National Standard600NIST AI 600-13990International or National Standard674NIST SP 800-53 R53241International or National Standard64118AICPA Reporting on Controls at a Service Organization SOC-21132Safe Harbor51528California Privacy Rights Act (CPRA)3290Bill or Act595Cloud Controls Matrix, v4.03303Self-Regulatory Body Requirement5131Cyber Resilience Act (CRA)4090Regulations511FFIEC IT Examination Handbook - Information Security, 20164024Audit Guideline5116ISO/IEC 27017:2015(E)2838Self-Regulatory Body Requirement53212PCI Sample4260Self-Regulatory Body Requirement500TISAX, v6.0.34070Audit Guideline533Trust Services Criteria (with Revised Points of Focus – 2022)3609Self-Regulatory Body Requirement5133Appendix B of 12 CFR Part 3015Regulation or Statute44322CMMC Level 1, v2.03426Best Practice Guideline4166CobiT102Safe Harbor41772COSO Enterprise Risk Management (2017)2947Best Practice Guideline4259CSF V1.13709International or National Standard470Digital Personal Data Protection Act, 20233679Statutes (Bills or Acts)4101