Skip to content

Monthly Selected Authority Documents - May, 2019

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past...

UCF

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.



AD Common Name AD Type Selected Groups Initiatives
ISO 27001-2013 International or National Standard 92 158 22
NIST SP 800-53 R4 International or National Standard 75 103 13
PCI DSS Requirements and Security Assessment Procedures Contractual Obligation 63 124 11
EU General Data Protection Regulation (GDPR) Regulation or Statute 59 121 8
NIST SP 800-53 R4 High Impact International or National Standard 59 130 9
NIST SP 800-53 R4 Moderate Impact International or National Standard 51 50 10
NIST SP 800-53 R4 Low Impact International or National Standard 44 41 9
Sarbanes Oxley SOX Regulation or Statute 44 125 17
AICPA Reporting on Controls at a Service Organization SOC-2 Safe Harbor 43 86 6
FedRAMP Baseline Security Controls Audit Guideline 33 85 5
HIPAA Bill or Act 32 73 8
CobiT Safe Harbor 31 137 6
ISO/IEC 27002:2013(E) International or National Standard 31 130 17
CIS Controls V7 Best Practice Guideline 28 3 0
NIST CSF 1.1 International or National Standard 28 4 0
California Consumer Privacy Act of 2018 Bill or Act 23 14 0
ISO 31000 R 2009 International or National Standard 22 130 4
ISO/IEC 27017:2015(E) Self-Regulatory Body Requirement 21 2 1
CSIS 20 Critical Security Controls Best Practice Guideline 20 127 4
ISO 27002 International or National Standard 19 11 7
NIST SP 800-53 International or National Standard 19 12 3
HIPAA Electronic Health Record Technology Regulation or Statute 18 7 3
Gramm Leach Bliley Bill or Act 17 14 10
Cloud Controls Matrix, Version 3.0 Self-Regulatory Body Requirement 16 8 1
FFIEC CAT Best Practice Guideline 16 8 3
NIST CSF 1.0 International or National Standard 16 20 7
ISO/IEC 27018:2014 International or National Standard 15 5 3
Red Book (Condensed) International or National Standard 15 1 1
Authentication in an Internet Banking Environment Best Practice Guideline 14 13 4
NIST 800-53A International or National Standard 13 6 3
Supplement to Authentication in an Internet Banking Environment Best Practice Guideline 12 4 2
DoD Instruction 8500.2 DIACAP Audit Guideline 11 42 0
FCRA Regulation or Statute 11 20 4
NIST SP 800 66 Safe Harbor 11 9 5
PCI SAQ A v3.1 Contractual Obligation 11 6 1
23 NYCRR 500 Regulation or Statute 10 4 6
COSO Internal Control - Integrated Framework Self-Regulatory Body Requirement 10 5 0
FFIEC Audit April 2012 Best Practice Guideline 10 0 0
ISF Standard of Good Practice 2013 Best Practice Guideline 10 9 2
NIST SP 800-122 International or National Standard 10 11 2
SSAE No. 16 Reporting on Controls at a Service Organization SOC-1 Safe Harbor 10 15 5
FFIEC Business Continuity Planning Handbook 2015 Audit Guideline 9 6 0
FFIEC IT Examination Handbook Audit Guideline 9 3 0
FFIEC Management Best Practice Guideline 9 8 0
FFIEC Retail Payment Systems 2016 Best Practice Guideline 9 1 0
ISO 22301- Societal Security - Business Continuity Management Systems - Requirements International or National Standard 9 3 1
Massachusetts 201 CMR 17.00 Standards for The Protection of Personal Information of Residents of the Commonwealth of Massachusetts Regulation or Statute 9 11 4
PCI DSS 3.0 Requirements Self-Regulatory Body Requirement 9 52 6
Trust Services Criteria Self-Regulatory Body Requirement 9 2 0
45 CFR Part 164 Regulation or Statute 8 13 7