Monthly Selected Authority Documents  November, 2023

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.

AD Common NameAD TypeSelectedGroupsInitiativesNIST SP 800-53 R5International or National Standard422717ISO/IEC 27001:2022International or National Standard40104NIST CSF 1.1International or National Standard406123PCI DSS Defined Approach Requirements, Version 4.0International or National Standard3184CIS Controls, V8Best Practice Guideline26139EU General Data Protection Regulation (GDPR)Regulation or Statute2618519ISO 27001-2013International or National Standard2621622ISO/IEC 27002:2022International or National Standard261010Cloud Controls Matrix, v4.0Self-Regulatory Body Requirement1650hipaa security ruleRegulation or Statute1651ISO/IEC 27701:2019International or National Standard16189AICPA Reporting on Controls at a Service Organization SOC-2Safe Harbor151447NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and OrganizationsInternational or National Standard15158HIPAA Electronic Health Record TechnologyRegulation or Statute1465Digital Operational Resilience ActRegulations1300NIST SP 800-53International or National Standard13171BSI Cloud Computing Compliance Controls Catalogue (C5)Best Practice Guideline12184CobiTSafe Harbor121671California Privacy Rights Act (CPRA)Bill or Act1142Cyber Assurance FrameworkBest Practice Guideline1111Gramm Leach BlileyBill or Act1130HIPAABill or Act11104ISO 27002International or National Standard1184ISO/IEC 27002:2013(E)International or National Standard1114816ISO/IEC 27017:2015(E)Self-Regulatory Body Requirement112311ITIL Foundation 4Best Practice Guideline1101NIST AI 100-1Best Practice Guideline1110NIST Privacy FrameworkInternational or National Standard11157PCI DSS Defined Approach Testing Procedures, Version 4.0International or National Standard1165ISO 22301- Societal Security - Business Continuity Management Systems - RequirementsInternational or National Standard10191ISO/IEC 27018:2019International or National Standard1032SOC2Safe Harbor1050SSAE No. 16 Reporting on Controls at a Service Organization SOC-1Safe Harbor109323 NYCRR 500Regulation or Statute9275HIPAA Electronic Health Record TechnologyRegulation or Statute921NIST SP 800-53 Revision 5.1.1International or National Standard900PCI DSS v3.2.1Contractual Obligation984Red Book (Condensed)International or National Standard9147CMMC Level 2, v2.0Best Practice Guideline8106ISO 22301:2019(E)International or National Standard812NIST SP 800-63CInternational or National Standard862Sarbanes-Oxley Act of 2002Bill or Act856TSP Section 100: 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and PrivacySelf-Regulatory Body Requirement862California Consumer Privacy Act of 2018Bill or Act7452CMMC Level 1, v2.0Best Practice Guideline785Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 2020International or National Standard7115Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Privacy Control Baseline, October 2020International or National Standard763NIST CSF 1.0International or National Standard7122NIST SP 800-39International or National Standard7196NIST SP 800-53 R4International or National Standard753{{ include_custom_fonts({"Aeonik":["Regular","Bold"]}) }}