Skip to content

Monthly Selected Authority Documents - May, 2022

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past...

UCF

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.



AD Common Name AD Type Selected Groups Initiatives
ISO 27001-2013 International or National Standard 46 192 17
NIST SP 800-53 R5 International or National Standard 28 14 11
NIST CSF 1.1 International or National Standard 27 39 19
EU General Data Protection Regulation (GDPR) Regulation or Statute 23 169 15
CIS Controls, V8 Best Practice Guideline 21 6 7
Payment Card Industry (PCI) Data Security Standard, Requirements and Security Assessment Procedures, Version 3.2.1 Contractual Obligation 19 4 4
ISO/IEC 27002:2022 International or National Standard 17 0 3
HIPAA Electronic Health Record Technology Regulation or Statute 15 2 1
Sarbanes-Oxley Act of 2002 Bill or Act 15 2 4
ISO 27002 International or National Standard 14 7 2
CobiT Safe Harbor 12 162 1
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, High Impact Baseline, October 2020 International or National Standard 12 9 8
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 2020 International or National Standard 12 8 5
FFIEC CAT Best Practice Guideline 12 10 1
hipaa security rule Regulation or Statute 12 5 1
SOC2 Safe Harbor 12 0 0
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Low Impact Baseline, October 2020 International or National Standard 10 8 5
ISO/IEC 27002:2013(E) International or National Standard 10 144 13
NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations International or National Standard 10 9 7
NIST SP 800-53 R4 International or National Standard 10 4 3
PCI DSS Requirements and Security Assessment Procedures Contractual Obligation 10 150 7
23 NYCRR 500 Regulation or Statute 9 10 3
Cloud Controls Matrix, v4.0 Self-Regulatory Body Requirement 9 0 0
FFIEC IT Examination Handbook Architecture, Infrastructure, and Operations 2021 Audit Guideline 9 0 0
ISO/IEC 27017:2015(E) Self-Regulatory Body Requirement 9 19 9
MAS-TRMG-2021 Contractual Obligation 9 3 0
NIST SP 800-37r2 International or National Standard 9 10 4
SWIFT Customer Security Controls Framework Best Practice Guideline 9 0 0
AICPA Reporting on Controls at a Service Organization SOC-2 Safe Harbor 8 137 4
California Consumer Privacy Act of 2018 Bill or Act 8 1 1
Cloud Security Alliance CCM V1.3 Best Practice Guideline 8 5 1
FFIEC Audit April 2012 Best Practice Guideline 8 6 2
Gramm Leach Bliley Bill or Act 8 0 1
ISO/IEC 27701:2019 International or National Standard 8 17 8
NIST SP 800-39 International or National Standard 8 10 6
NIST SP 800-53 International or National Standard 8 17 1
Authentication in an Internet Banking Environment Best Practice Guideline 7 7 2
CIS Controls, V7.1 Best Practice Guideline 7 6 2
EBA/GL/2019/04 Regulation or Statute 7 3 0
ITIL Foundation 4 Best Practice Guideline 7 0 0
NIST CSF 1.0 International or National Standard 7 11 2
NIST SP 800 66 Safe Harbor 7 26 1
OWASP Top 10 - 2017 International or National Standard 7 8 5
Red Book (Condensed) International or National Standard 7 11 7
TSP Section 100: 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy Self-Regulatory Body Requirement 7 4 2
CMMC Level 1, v2.0 Best Practice Guideline 6 5 5
Federal Information Security Management Act FISMA Regulation or Statute 6 4 1
FFIEC Business Continuity Planning Best Practice Guideline 6 4 0
FFIEC Management Best Practice Guideline 6 6 1
FFIEC Wholesale Payment Systems Best Practice Guideline 6 4 0