Skip to content

Monthly Selected Authority Documents - July, 2019

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past...

UCF

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.



AD Common Name AD Type Selected Groups Initiatives
ISO 27001-2013 International or National Standard 72 180 23
NIST SP 800-53 R4 International or National Standard 60 123 13
EU General Data Protection Regulation (GDPR) Regulation or Statute 41 143 8
NIST SP 800-53 R4 High Impact International or National Standard 40 151 9
NIST SP 800-53 R4 Moderate Impact International or National Standard 39 60 10
AICPA Reporting on Controls at a Service Organization SOC-2 Safe Harbor 35 108 6
NIST SP 800-53 R4 Low Impact International or National Standard 35 51 9
PCI DSS Requirements and Security Assessment Procedures Contractual Obligation 34 142 11
Sarbanes Oxley SOX Regulation or Statute 33 144 17
ISO/IEC 27002:2013(E) International or National Standard 29 151 17
NIST CSF 1.1 International or National Standard 27 4 0
CIS Controls V7 Best Practice Guideline 26 6 0
HIPAA Bill or Act 26 90 8
CobiT Safe Harbor 24 159 6
PCI DSS Testing Procedures v3.2 Contractual Obligation 24 4 0
FedRAMP Baseline Security Controls Audit Guideline 23 106 5
23 NYCRR 500 Regulation or Statute 17 7 6
MAS TRM Contractual Obligation 17 22 0
ISO 31000 R 2009 International or National Standard 16 151 5
Notice on Technology Risk Management, Notice No. CMG-N02 Self-Regulatory Body Requirement 16 28 0
California Consumer Privacy Act of 2018 Bill or Act 15 14 0
CSIS 20 Critical Security Controls Best Practice Guideline 15 148 4
COBIT 5 Enabling Processes: Basics Safe Harbor 14 28 0
DoD Instruction 8500.2 DIACAP Audit Guideline 13 58 0
PCI DSS 3.0 Requirements Self-Regulatory Body Requirement 13 69 6
Risk Management of E-banking Contractual Obligation 13 4 0
HIPAA Electronic Health Record Technology Regulation or Statute 12 7 3
AICPA Trust Services Principles and Criteria Self-Regulatory Body Requirement 11 6 1
FFIEC CAT Best Practice Guideline 11 7 3
HKMA General Principles for Technology Risk Management Regulation or Statute 11 4 0
NIST CSF 1.0 International or National Standard 11 20 7
Good Practices For Computerized systems In Regulated GXP Environments Self-Regulatory Body Requirement 10 43 1
HKMA Supervisory Policy Manual TM-G-2 Business Continuity Planning Contractual Obligation 10 12 0
NIST SP 800 66 Safe Harbor 10 11 5
Cloud Security Alliance CCM V1.3 Best Practice Guideline 9 16 6
Gramm Leach Bliley Bill or Act 9 14 10
HIPAA HCFA Best Practice Guideline 9 19 2
ISO/IEC 27017:2015(E) Self-Regulatory Body Requirement 9 5 1
ITIL Security Management Best Practice Guideline 9 6 3
NIST SP 800-53 International or National Standard 9 12 3
FFIEC IT Examination Handbook Audit Guideline 8 3 0
Guidelines on Information Security, Electronic Banking, Technology Risk Management and Cyber Frauds Best Practice Guideline 8 4 0
India Indian Info Privacy Act Regulation or Statute 8 9 0
ISO 27002 International or National Standard 8 10 7
PCI SAQ A v3.1 Contractual Obligation 8 6 1
HITECH title within the American Recovery and Reinvestment Act of 2009 Bill or Act 7 12 2
ITIL Service Support Best Practice Guideline 7 4 3
NIST SP 800-30 International or National Standard 7 6 2
Payments Service Directive 2 International or National Standard 7 0 0
Red Book (Condensed) International or National Standard 7 1 1