Monthly Selected Authority Documents  March, 2024

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.

AD Common NameAD TypeSelectedGroupsInitiativesNIST CSF 2.0International or National Standard6311EU General Data Protection Regulation (GDPR)Regulation or Statute4018519ISO/IEC 27002:2022International or National Standard401010CIS Controls, V8Best Practice Guideline39139ISO/IEC 27001:2022International or National Standard39104NIST SP 800-53 Revision 5.1.1International or National Standard3200NIST SP 800-53 R5International or National Standard30271723 NYCRR 500Regulation or Statute28297ISO/IEC 27701:2019International or National Standard26191023 NYCRR 500Regulations2422NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and OrganizationsInternational or National Standard22169PCI DSS Defined Approach Testing Procedures, Version 4.0International or National Standard2165CSF V1.1International or National Standard2000PCI DSS Defined Approach Requirements, Version 4.0International or National Standard1995CobiTSafe Harbor181682ISO 27001-2013International or National Standard1821723NIST AI 100-1Best Practice Guideline1810Sarbanes-Oxley Act of 2002Bill or Act1856BSI Cloud Computing Compliance Controls Catalogue (C5)Best Practice Guideline17184Cloud Controls Matrix, v4.0Self-Regulatory Body Requirement1661Gramm Leach BlileyBill or Act1630OWASP Top 10 - 2021Organizational Governance Documents1611Digital Operational Resilience ActRegulations1511Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union, 14 December, 2022Regulatory Directive or Guidance1411HIPAABill or Act14104hipaa security ruleRegulation or Statute1351India Indian Info Privacy ActRegulation or Statute13250NIST CSF 1.1International or National Standard136123Australia Privacy Amendment ActRegulation or Statute12200California Privacy Rights Act (CPRA)Bill or Act1242NIST Privacy FrameworkInternational or National Standard12157Cyber Assurance FrameworkBest Practice Guideline1111FedRAMP Version 5 Moderate BaselineAudit Guideline1100FFIEC IT Examination HandbookAudit Guideline11222FFIEC IT Examination Handbook Architecture, Infrastructure, and Operations 2021Audit Guideline1150FFIEC Outsourcing Technology ServicesBest Practice Guideline11141HIPAA HCFABest Practice Guideline1132ISO/IEC 27017:2015(E)Self-Regulatory Body Requirement112311NIST SP 800-53International or National Standard11172PCI DSS v3.2.1Contractual Obligation1184Security and Privacy Controls for Federal Information Systems and Organizations, NIST SP 800-53, Moderate Impact Baseline, Revision 4International or National Standard1160ISO 9001:2015International or National Standard10226ISO/IEC 27018:2019International or National Standard1032Australian Government Information Security Manual, September 2023International or National Standard900FINRA Report on Cybersecurity PracticesSelf-Regulatory Body Requirement991HITECH title within the American Recovery and Reinvestment Act of 2009Bill or Act9102Insurance Data Security Model Law, NAIC MDL-668Best Practice Guideline932ISO 22301:2019(E)International or National Standard912ITIL Foundation 4Best Practice Guideline901MAS TRMContractual Obligation9480{{ include_custom_fonts({"Aeonik":["Regular","Bold"]}) }}