Monthly Selected Authority Documents  September, 2024

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.

AD_NameAD_idAD_typeselectedgroupsinitiativesISO/IEC 27001:20223567International or National Standard28104NIST CSF 2.03789International or National Standard2641ISO/IEC 27002:20223430International or National Standard221210EU General Data Protection Regulation (GDPR)2802Regulation or Statute1918920NIST SP 800-53 R53241International or National Standard153118NIST SP 800-53 Revision 5.1.13687International or National Standard1211Digital Operational Resilience Act3668Regulations1152PCI DSS Defined Approach Requirements, Version 4.03444International or National Standard10176PCI DSS Defined Approach Testing Procedures, Version 4.03445International or National Standard9106CIS Controls, V83323Best Practice Guideline8139ISO 27001-20131367International or National Standard822123ISO/IEC 27701:20193020International or National Standard82010Sarbanes-Oxley Act of 20023296Bill or Act87623 NYCRR 5003686Regulations775AICPA Reporting on Controls at a Service Organization SOC-21132Safe Harbor71448BSI Cloud Computing Compliance Controls Catalogue (C5)3007Best Practice Guideline7184Directive (EU) 2022/2555 on measures for a high common level of cybersecurity across the Union, 14 December, 20223714Regulatory Directive or Guidance774FedRAMP High Baseline, Version 53636Regulation or Statute700HIPAA3201Bill or Act7104NIST SP 800-1712798International or National Standard762NIST SP 800-392428International or National Standard7227PCI DSS v3.2.13315Contractual Obligation7105SOC 2®, 20223647Audit Guideline730Cloud Controls Matrix, v4.03303Self-Regulatory Body Requirement661CobiT102Safe Harbor61682CSF V1.13709International or National Standard600Gramm Leach Bliley3302Bill or Act6110hipaa security rule3204Regulation or Statute672ISO 22301:2019(E)3454International or National Standard612ISO 31000:20182936International or National Standard6258ISO 9001:20152942International or National Standard6236ISO/IEC 27017:2015(E)2838Self-Regulatory Body Requirement62311NIST AI 100-13591Best Practice Guideline610Trust Services Criteria (with Revised Points of Focus – 2022)3609Self-Regulatory Body Requirement673AICPA Trust Services1176Audit Guideline582COBIT 20193009Safe Harbor592Commission of the European Communities Information Technology Security Evaluation Manual383Safe Harbor510CSCFv20243658Self-Regulatory Body Requirement591FedRAMP Version 5 Moderate Baseline3644Audit Guideline500HIPAA HCFA3200Best Practice Guideline544ISO 27005 R 20111092International or National Standard5259ISO 31000 R 20091093International or National Standard51711ISO/IEC 27018:20193429International or National Standard532NIST 800-171 Rev 33946International or National Standard500NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations3134International or National Standard51710NIST SP 800-53902International or National Standard5183Red Book (Condensed)2840International or National Standard5217California Consumer Privacy Act of 20182957Bill or Act4452California Privacy Rights Act (CPRA)3290Bill or Act453CMMC Level 2, v2.03427Best Practice Guideline4116{{ include_custom_fonts({"Aeonik":["Regular","Bold"]}) }}