Monthly Selected Authority Documents May, 2024

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.

AD Common NameAD TypeSelectedGroupsInitiativesNIST CSF 2.0International or National Standard6311ISO/IEC 27001:2022International or National Standard44104CIS Controls, V8Best Practice Guideline27139NIST SP 800-53 R5International or National Standard272817ISO/IEC 27002:2022International or National Standard251110PCI DSS Defined Approach Requirements, Version 4.0International or National Standard24105PCI DSS Defined Approach Testing Procedures, Version 4.0International or National Standard2265EU General Data Protection Regulation (GDPR)Regulation or Statute2018519NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and OrganizationsInternational or National Standard2016923 NYCRR 500Regulations1933Sarbanes-Oxley Act of 2002Bill or Act196623 NYCRR 500Regulation or Statute17318Gramm Leach BlileyBill or Act17110NIST SP 800-53 Revision 5.1.1International or National Standard1700SOC 2®, 2022Audit Guideline1610CMMC Level 2, v2.0Best Practice Guideline15106Digital Operational Resilience ActRegulations1511FFIEC CATBest Practice Guideline15241ISO/IEC 27701:2019International or National Standard151910NIST SP 800-53International or National Standard15172ISO 27001-2013International or National Standard1421823COBIT 2019Safe Harbor1392hipaa security ruleRegulation or Statute1351NIST AI 100-1Best Practice Guideline1310Appendix B of 12 CFR Part 30Regulation or Statute12235CSF V1.1International or National Standard1200Red Book (Condensed)International or National Standard12227TSP Section 100: 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and PrivacySelf-Regulatory Body Requirement1262California Privacy Rights Act (CPRA)Bill or Act1142Cloud Controls Matrix, v4.0Self-Regulatory Body Requirement1161CobiTSafe Harbor111682FFIEC IT Examination Handbook Architecture, Infrastructure, and Operations 2021Audit Guideline11130NIST Privacy FrameworkInternational or National Standard11157Notice on Cyber HygieneBill or Act11120BSI Cloud Computing Compliance Controls Catalogue (C5)Best Practice Guideline10184California Consumer Privacy Act of 2018Bill or Act10452Guidelines for Reducing and Mitigating Hacking Risks Associated with Internet TradingRegulation or Statute10102SSAE No. 16 Reporting on Controls at a Service Organization SOC-1Safe Harbor1093Trust Services Criteria (with Revised Points of Focus - 2022)Self-Regulatory Body Requirement105316 CFR Part 314, Standards for Safeguarding Customer InformationRegulation or Statute9146AICPA Reporting on Controls at a Service Organization SOC-2Safe Harbor91447CMMC Level 1, v2.0Best Practice Guideline985Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union, 14 December, 2022Regulatory Directive or Guidance911FFIEC Development AcquisitionBest Practice Guideline9220FFIEC Information Technology Examination Handbook - Business Continuity ManagementAudit Guideline9205FFIEC Outsourcing Technology ServicesBest Practice Guideline9221HIPAA HCFABest Practice Guideline932MAS Guidelines on OutsourcingBill or Act990MAS-TRMG-2021Contractual Obligation9160NIST SP 800-37r2International or National Standard9135{{ include_custom_fonts({"Aeonik":["Regular","Bold"]}) }}{{ include_custom_fonts({"Aeonik":["Regular","Bold"]}) }}{{ include_custom_fonts({"Aeonik":["Regular","Bold"]}) }}