Monthly Selected Authority Documents April 2026

Discover the Top 50 Most Popular Authority Documents in the Common Controls Hub (CCH) for April.

See how often each document was assigned across user groups and compliance initiatives—insightful data to help guide your compliance strategy.

AD_nameAD_idAD_typeselectedgroupsinitiativesISO/IEC 27002:20223430International or National Standard253013ISO/IEC 27001:20223567International or National Standard24276NIST CSF 2.03789International or National Standard22219ISO/IEC 27001:2022/Amendment 1:20244103International or National Standard1810NIST 800-53, v5.2.04137International or National Standard1410EU General Data Protection Regulation (GDPR)2802Regulation or Statute1320723ISO 27001-20131367International or National Standard122352523 NYCRR 5003686Regulations112820CIS Controls, V83323Best Practice Guideline112411Digital Operational Resilience Act3668Regulations112411SOC 2®, 20223647Audit Guideline118123 NYCRR 5002895Regulation or Statute105524HIPAA Security and Privacy Rule3986Regulations102211PCI DSS Defined Approach Requirements v4.0.13987International or National Standard1081PCI DSS Defined Approach Testing Procedures v4.0.13988International or National Standard1051AICPA Reporting on Controls at a Service Organization SOC-21132Safe Harbor91528CIS Controls Version 8.13955Best Practice Guideline973CMMC Level 24043Regulations941NIST 800-53B, Moderate Impact Baseline, v5.2.04256International or National Standard900NIST AI 600-13990International or National Standard984NIST SP 800-53 R53241International or National Standard94218CMMC Level 14042Regulations810Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 20203275International or National Standard82812HIPAA3201Bill or Act8176ISO 42001:20234062International or National Standard831ISO/IEC 27018:20193429International or National Standard8102NIST 800-171 Rev 33946International or National Standard893NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations3134International or National Standard82512PCI DSS v4.0.1 SAQ A-EP4081Self-Regulatory Body Requirement810PCI DSS v4.0.1 SAQ SPoC4089Self-Regulatory Body Requirement810CobiT102Safe Harbor71782CSIS 20 Critical Security Controls1134Best Practice Guideline71700Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union, 14 December, 20223714Regulatory Directive or Guidance7166NIST 800-171A r34056International or National Standard711NIST 800-53B, Privacy Impact Baseline, v5.2.04258International or National Standard700NIST AI 100-13591Best Practice Guideline7