Monthly Selected Authority Documents March 2025

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.

AD_nameAD_idAD_typeselectedgroupsinitiativesISO/IEC 27001:20223567International or National Standard37144NIST CSF 2.03789International or National Standard3174Digital Operational Resilience Act3668Regulations2572EU General Data Protection Regulation (GDPR)2802Regulation or Statute2419221NIST SP 800-53 R53241International or National Standard213218ISO/IEC 27002:20223430International or National Standard201510Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union, 14 December, 20223714Regulatory Directive or Guidance1694NIST SP 800-53 Revision 5.1.13687International or National Standard1622SOC 2®, 20223647Audit Guideline1641ISO/IEC 27701:20193020International or National Standard152010PCI DSS Defined Approach Requirements v4.0.13987International or National Standard1520CIS Controls, V83323Best Practice Guideline13159NIST AI 100-13591Best Practice Guideline1320Artificial Intelligence Act3972Regulations1231CobiT102Safe Harbor121682Cross Border Privacy Assessment166Best Practice Guideline123123 NYCRR 5003686Regulations11108NIST 800-171 Rev 33946International or National Standard1110California Privacy Rights Act (CPRA)3290Bill or Act1053ISO 31000:20182936International or National Standard10258ISO 42001:20234039International or National Standard1000ISO 9001:20152942International or National Standard10236NIST SP 800-392428International or National Standard10217Sarbanes-Oxley Act of 20023296Bill or Act1076CMMC Level 2, v2.03427Best Practice Guideline9126Harmonized Rules On Artificial Intelligence (Artificial Intelligence Act) and Ameding Certain Union Legislative Acts, European Commission3320Best Practice Guideline981ISO 22301- Societal Security - Business Continuity Management Systems - Requirements1423International or National Standard9201ISO 31000 R 20091093International or National Standard91711NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations3134International or National Standard91810NIST SP 800-53902International or National Standard918323 NYCRR 5002895Regulation or Statute83813Basel II10Regulation or Statute8250California Consumer Privacy Act of 20182957Bill or Act8452Cloud Controls Matrix, v4.03303Self-Regulatory Body Requirement881