Monthly Selected Authority Documents May 2025

Discover the Top 50 Most Popular Authority Documents in the Common Controls Hub (CCH) for April.

See how often each document was assigned across user groups and compliance initiatives—insightful data to help guide your compliance strategy.

AD_common_nameAD_idAD_typeselectedgroupsinitiativesNIST CSF 2.03789International or National Standard41146ISO/IEC 27001:20223567International or National Standard36194ISO/IEC 27002:20223430International or National Standard252111NIST SP 800-53 Revision 5.1.13687International or National Standard2532NIST SP 800-53 R53241International or National Standard233718CIS Controls, V83323Best Practice Guideline17199NIST 800-171 Rev 33946International or National Standard164023 NYCRR 5003686Regulations151712NIST AI 100-13591Best Practice Guideline1520Sarbanes-Oxley Act of 20023296Bill or Act1576Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 20203275International or National Standard14177Digital Operational Resilience Act3668Regulations14124NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations3134International or National Standard142110SOC 2®, 20223647Audit Guideline1461Gramm Leach Bliley3302Bill or Act13120PCI DSS Defined Approach Requirements, Version 4.03444International or National Standard13196EU General Data Protection Regulation (GDPR)2802Regulation or Statute1219321NIST CSF 1.12934International or National Standard12672316 CFR Part 314, Standards for Safeguarding Customer Information3449Regulation or Statute11231423 NYCRR 5002895Regulation or Statute114316PCI DSS Defined Approach Requirements v4.0.13987International or National Standard1131PCI DSS v3.2.13315Contractual Obligation1195CIS Controls Version 8.13955Best Practice Guideline1020CMMC Level 2, v2.03427Best Practice Guideline10156Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Privacy Control Baseline, October 20203279International or National Standard1063ISO/IEC 27017:2015(E)2838Self-Regulatory Body Requirement102912ISO/IEC 27701:20193020International or National Standard102010NIST SP 800-161 r13465International or National Standard1010PCI DSS Defined Approach Testing Procedures v4.0.13988International or National Standard1031PCI DSS Defined Approach Testing Procedures, Version 4.03445International or National Standard10126Cloud Controls Matrix, v4.03303Self-Regulatory Body Requirement9111Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, High Impact Baseline, October 20203270International or National Standard9108HIPAA3201Bill or Act9134HIPAA Security and Privacy Rule3986Regulations9104NIST Privacy Framework3087International or National Standard9168NIST SP 800-37r23013International or National Standard9135NIST SP 800-53902International or National Standard9183PCI DSS v4.0 SAQ D Merchants3464