Monthly Selected Authority Documents April 2025

Discover the Top 50 Most Popular Authority Documents in the Common Controls Hub (CCH) for March.

See how often each document was assigned across user groups and compliance initiatives—insightful data to help guide your compliance strategy.

AD_common_nameAD_idAD_typeselectedgroupsinitiativesISO/IEC 27001:20223567International or National Standard41174NIST CSF 2.03789International or National Standard37125ISO/IEC 27002:20223430International or National Standard261911EU General Data Protection Regulation (GDPR)2802Regulation or Statute2219321SOC 2®, 20223647Audit Guideline2061NIST SP 800-53 R53241International or National Standard173618NIST SP 800-53 Revision 5.1.13687International or National Standard1722PCI DSS Defined Approach Requirements v4.0.13987International or National Standard1731Digital Operational Resilience Act3668Regulations1392HIPAA Security and Privacy Rule3986Regulations1362NIST AI 100-13591Best Practice Guideline1320HIPAA3201Bill or Act12134ISO/IEC 27017:2015(E)2838Self-Regulatory Body Requirement122812CIS Controls Version 8.13955Best Practice Guideline1110Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union, 14 December, 20223714Regulatory Directive or Guidance119423 NYCRR 5003686Regulations10139Artificial Intelligence Act3972Regulations1031CobiT102Safe Harbor101682ISO 22301:2019(E)3454International or National Standard1012NIST AI 600-13990International or National Standard1011NIST 800-171 Rev 33946International or National Standard930Sarbanes-Oxley Act of 20023296Bill or Act976HIPAA HCFA3200Best Practice Guideline874NIST SP 800-66r23960International or National Standard83023 NYCRR 5002895Regulation or Statute74013Cloud Controls Matrix, v4.03303Self-Regulatory Body Requirement7101ISO 42001:20234039International or National Standard731ISO 9001:20152942International or National Standard7256ISO/IEC 27018:20193429International or National Standard772NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations3134International or National Standard72010PCI DSS Defined Approach Testing Procedures v4.0.13988International or National Standard731SSAE No. 16 Reporting on Controls at a Service Organization SOC-11108Safe Harbor794Trust Services Criteria (with Revised Points of Focus – 2022)3609Self-Regulatory Body Requirement710345 CFR Part 160986Regulation or Statute6104BSI Cloud Computing Compliance Controls Catalogue (C5)3007Best Practice Guideline6195CCM v4.03578Self-Regulatory Body Requirement611CMMC Level 2, v2.03427Best Practice Guideline6156CSF V1.13709International or National Standard630Cyber Essentials Self-Assessment, Version 133413Best Practice Guideline675FedRAMP Version 5 Moderate Baseline3644