Monthly Selected Authority Documents Oct 2025

Discover the Top 50 Most Popular Authority Documents in the Common Controls Hub (CCH) for October.

See how often each document was assigned across user groups and compliance initiatives—insightful data to help guide your compliance strategy.

AD_nameAD_idAD_typeselectedgroupsinitiativesISO/IEC 27001:20223567International or National Standard29245ISO/IEC 27002:20223430International or National Standard252712NIST CSF 2.03789International or National Standard25188PCI DSS Defined Approach Requirements v4.0.13987International or National Standard1961ISO/IEC 27001:2022/Amendment 1:20244103International or National Standard1600ISO 27001-20131367International or National Standard1522924SOC 2®, 20223647Audit Guideline1571ISO/IEC 27701:20193020International or National Standard142110Digital Operational Resilience Act3668Regulations13199NIST SP 800-53 R53241International or National Standard134018Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union, 14 December, 20223714Regulatory Directive or Guidance12135EU General Data Protection Regulation (GDPR)2802Regulation or Statute1220022NIST SP 800-53 Revision 5.1.13687International or National Standard1273ISO/IEC 27017:2015(E)2838Self-Regulatory Body Requirement113112NIST 800-53, v5.2.04137International or National Standard1100NIST AI 100-13591Best Practice Guideline1151Sarbanes-Oxley Act of 20023296Bill or Act1186CIS Controls Version 8.13955Best Practice Guideline1062CIS Controls, V83323Best Practice Guideline102311CobiT102Safe Harbor101722Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 20203275International or National Standard92310ISO/IEC 27002:2013(E)2421International or National Standard91501623 NYCRR 5002895Regulation or Statute8502223 NYCRR 5003686Regulations82418Cloud Controls Matrix, v4.03303Self-Regulatory Body Requirement8121COSO Enterprise Risk Management (2017)2947Best Practice Guideline8259COSO Internal Control - Integrated Framework1578Self-Regulatory Body Requirement8248HIPAA3201Bill or Act8165Insurance Data Security Model Law, NAIC MDL-6682920Best Practice Guideline897Artificial Intelligence Act3972Regulations782California Privacy Rights Act (CPRA)3290Bill or Act784CIS 20 Critical Security Controls2795Best Practice Guideline7363CMMC Level 24043Regulations731Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, High Impact Baseline, October 20203270International or National Standard7118Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Privacy Control Baseline, October 20203279International or National Standard773HIPAA Security and Privacy Rule3986Regulations7169ISO 27002482International or National Standard795NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations3134International or National Standard72311PCI DSS Defined Approach Testing Procedures v4.0.13988International or National Standard751Regulations specifying criteria (policy) for the critical ICT third-party service providers in the financial sector3977Regulations730RTS specifying criteria regarding ICT risk management3975Regulations730RTS specifying the criteria for classification of ICT-related incidents3976Regulations730TSP Section 100: 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy3288Self-Regulatory Body Requirement773CMMC Assessment Guide Level 2, v2.134060Regulations600COBIT 20193009Safe Harbor