Skip to content

Monthly Selected Authority Documents - September, 2021

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past...

UCF

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.



AD Common Name AD Type Selected Groups Initiatives
ISO 27001-2013 International or National Standard 42 186 11
NIST SP 800-53 R5 International or National Standard 35 8 3
NIST CSF 1.1 International or National Standard 34 34 12
EU General Data Protection Regulation (GDPR) Regulation or Statute 32 164 10
CIS Controls, V8 Best Practice Guideline 24 0 0
ISO/IEC 27701:2019 International or National Standard 20 11 3
NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations International or National Standard 20 3 2
PCI DSS Requirements and Security Assessment Procedures Contractual Obligation 19 146 4
CobiT Safe Harbor 18 162 1
ISO 27002 International or National Standard 18 7 2
hipaa security rule Regulation or Statute 16 4 1
ISO/IEC 27002:2013(E) International or National Standard 15 138 7
Payment Card Industry (PCI) Data Security Standard, Requirements and Security Assessment Procedures, Version 3.2.1 Contractual Obligation 15 4 3
BSI Cloud Computing Compliance Controls Catalogue (C5) Best Practice Guideline 14 9 0
CMMC Level 3 Best Practice Guideline 14 3 2
HIPAA Bill or Act 14 9 4
ISO 27005 R 2011 International or National Standard 14 12 3
Sarbanes-Oxley Act of 2002 Bill or Act 14 2 3
Cloud Controls Matrix, v4.0 Self-Regulatory Body Requirement 13 0 0
CMMC Level 5 Best Practice Guideline 12 2 0
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 2020 International or National Standard 12 2 0
NIST SP 800-53 International or National Standard 12 16 1
ISO/IEC 27017:2015(E) Self-Regulatory Body Requirement 11 13 4
NIST SP 800 66 Safe Harbor 11 25 1
Red Book (Condensed) International or National Standard 11 9 4
CIS Controls, V7.1 Best Practice Guideline 10 5 2
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Privacy Control Baseline, October 2020 International or National Standard 10 4 3
ISO/IEC 27018:2014 International or National Standard 10 15 2
NICE NIST International or National Standard 10 12 1
23 NYCRR 500 Regulation or Statute 9 9 3
California Consumer Privacy Act of 2018 Bill or Act 9 1 1
CMMC Level 2 Best Practice Guideline 9 3 2
CMMC Level 4 Best Practice Guideline 9 3 0
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, High Impact Baseline, October 2020 International or National Standard 9 3 3
FedRAMP Security Controls Baseline, 2018 Audit Guideline 9 1 4
NIST SP 800-39 International or National Standard 9 4 1
CMMC Level 1 Best Practice Guideline 8 3 2
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Low Impact Baseline, October 2020 International or National Standard 8 2 0
Cyber Essentials Scheme (CES) Questionnaire Best Practice Guideline 8 2 0
NIST SP 800-53 R4 International or National Standard 8 3 3
Security and Privacy Controls for Federal Information Systems and Organizations, NIST SP 800-53, Moderate Impact Baseline, Revision 4 International or National Standard 8 5 0
SWIFT Customer Security Controls Framework Best Practice Guideline 8 0 0
Australian Government Information Security Manual Controls International or National Standard 7 3 0
COSO Internal Control - Integrated Framework Self-Regulatory Body Requirement 7 10 2
Financial Services Sector Cybersecurity Profile International or National Standard 7 1 2
HIPAA Electronic Health Record Technology Regulation or Statute 7 1 1
ISO 22301- Societal Security - Business Continuity Management Systems - Requirements International or National Standard 7 13 0
AICPA Reporting on Controls at a Service Organization SOC-2 Safe Harbor 6 137 4
Cloud Security Alliance CCM V1.3 Best Practice Guideline 6 5 0
COSO ERM Safe Harbor 6 6 3