Monthly Selected Authority Documents August, 2024

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.

AD_common_nameAD_typeSelectedGroupsInitiativesISO/IEC 27001:2022International or National Standard29104NIST CSF 2.0International or National Standard2941EU General Data Protection Regulation (GDPR)Regulation or Statute2618920ISO/IEC 27002:2022International or National Standard241210PCI DSS Defined Approach Requirements, Version 4.0International or National Standard24176ISO/IEC 27701:2019International or National Standard202010NIST SP 800-53 R5International or National Standard173118Sarbanes-Oxley Act of 2002Bill or Act1676SOC 2®, 2022Audit Guideline1630Digital Operational Resilience ActRegulations1452CIS Controls, V8Best Practice Guideline13139Cloud Controls Matrix, v4.0Self-Regulatory Body Requirement1361CMMC Level 2, v2.0Best Practice Guideline13116ISO/IEC 27017:2015(E)Self-Regulatory Body Requirement132311PCI DSS Defined Approach Testing Procedures, Version 4.0International or National Standard12106PCI DSS v3.2.1Contractual Obligation1210523 NYCRR 500Regulations1175BSI Cloud Computing Compliance Controls Catalogue (C5)Best Practice Guideline10184California Privacy Rights Act (CPRA)Bill or Act1053ISO 27001-2013International or National Standard1022123NIST SP 800-53 Revision 5.1.1International or National Standard1011COSO Enterprise Risk Management (2017)Best Practice Guideline9269hipaa security ruleRegulation or Statute972ISO 22301- Societal Security - Business Continuity Management Systems - RequirementsInternational or National Standard9201Red Book (Condensed)International or National Standard9217TSP Section 100: 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and PrivacySelf-Regulatory Body Requirement973California Consumer Privacy Act of 2018Bill or Act8452NIST AI 100-1Best Practice Guideline810NIST SP 800 66Safe Harbor8311NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and OrganizationsInternational or National Standard81710NIST SP 800-37r2International or National Standard8145NIST SP 800-39International or National Standard822723 NYCRR 500Regulation or Statute73510CMMC Level 1, v2.0Best Practice Guideline795COBIT 2019Safe Harbor792Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 2020International or National Standard7116FFIEC CATBest Practice Guideline7261ISO 31000 R 2009International or National Standard71711ISO 31000:2018International or National Standard7258NIST SP 800-53 R4International or National Standard773SWIFT Customer Security Controls FrameworkBest Practice Guideline710Trust Services Criteria (with Revised Points of Focus – 2022)Self-Regulatory Body Requirement773COSO Internal Control - Integrated FrameworkSelf-Regulatory Body Requirement6248FedRAMP Security Controls Baseline, 2018Audit Guideline624FedRAMP Version 5 Moderate BaselineAudit Guideline600ISO 22301:2019(E)International or National Standard612ISO 27002International or National Standard685ISO 9001:2015International or National Standard6236NIST Privacy FrameworkInternational or National Standard6178AICPA Trust ServicesAudit Guideline582{{ include_custom_fonts({"Aeonik":["Regular","Bold"]}) }}