Monthly Selected Authority Documents Dec 2025

Discover the Top 50 Most Popular Authority Documents in the Common Controls Hub (CCH) for December.

See how often each document was assigned across user groups and compliance initiatives—insightful data to help guide your compliance strategy.

AD_nameAD_idAD_typeselectedgroupsinitiativesNIST CSF 2.03789International or National Standard47188ISO/IEC 27001:20223567International or National Standard34245EU General Data Protection Regulation (GDPR)2802Regulation or Statute2720522HIPAA Security and Privacy Rule3986Regulations221911ISO/IEC 27002:20223430International or National Standard22271223 NYCRR 5003686Regulations212720Digital Operational Resilience Act3668Regulations21221116 CFR Part 314, Standards for Safeguarding Customer Information3449Regulation or Statute203322CRI Profile, v2.14105Best Practice Guideline2083Sarbanes-Oxley Act of 20023296Bill or Act1986Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 20203275International or National Standard17261223 NYCRR 5002895Regulation or Statute165324CMMC Level 24043Regulations1631Insurance Data Security Model Law, NAIC MDL-6682920Best Practice Guideline15129NIST AI 600-13990International or National Standard1564PCI DSS v4.0.1 SAQ D for Merchants4086Self-Regulatory Body Requirement1576Appendix B of 12 CFR Part 3015Regulation or Statute144222Cybersecurity Requirements For Insurance Companies3407Regulation or Statute142321data security3406Regulation or Statute142321Enterprise Information Security Policy, v144223Organizational Governance Documents1441FFIEC IT Examination Handbook - Information Security, 20164024Audit Guideline14106Insurance Data Security3402Regulation or Statute142321Insurance Data Security Act3410Regulation or Statute142321Insurance Data Security Act3405Regulation or Statute142321Insurance Data Security Law3398Regulation or Statute142321Insurance Data Security Law3404Regulation or Statute142321Insurance Data Security Law3408Regulation or Statute142321Insurance Data Security Law3397Regulation or Statute142321ISO 27001-20131367International or National Standard1423424Maine Insurance Data Security Act3409Regulation or Statute142321PCI DSS Defined Approach Requirements v4.0.13987International or National Standard1461Alaska Disclosure of breach of security3733Statutes (Bills or Acts)