Skip to content

Monthly Selected Authority Documents - December, 2021

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past...

UCF

Here is a list of the 50 most selected Authority Documents in the Common Controls Hub this past month. We also list how many groups each Authority Document has been assigned to and how many initiatives it has been assigned to.



AD Common Name AD Type Selected Groups Initiatives
ISO 27001-2013 International or National Standard 28 187 11
NIST SP 800-53 R5 International or National Standard 26 8 4
CIS Controls, V8 Best Practice Guideline 22 0 0
NIST CSF 1.1 International or National Standard 21 34 12
EU General Data Protection Regulation (GDPR) Regulation or Statute 18 164 10
ISO 27002 International or National Standard 14 7 2
PCI DSS Requirements and Security Assessment Procedures Contractual Obligation 14 146 4
hipaa security rule Regulation or Statute 11 4 1
Payment Card Industry (PCI) Data Security Standard, Requirements and Security Assessment Procedures, Version 3.2.1 Contractual Obligation 11 4 3
ISO/IEC 27002:2013(E) International or National Standard 10 139 7
CMMC Level 3 Best Practice Guideline 9 4 2
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, High Impact Baseline, October 2020 International or National Standard 9 3 3
ISO/IEC 27701:2019 International or National Standard 9 12 3
Sarbanes-Oxley Act of 2002 Bill or Act 9 2 3
AICPA Reporting on Controls at a Service Organization SOC-2 Safe Harbor 8 137 4
Cloud Controls Matrix, v4.0 Self-Regulatory Body Requirement 8 0 0
CMMC Level 1 Best Practice Guideline 8 4 2
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Moderate Impact Baseline, October 2020 International or National Standard 8 2 0
FFIEC IT Examination Handbook Audit Guideline 8 12 2
Gramm Leach Bliley Bill or Act 8 0 0
NIST CSF 1.0 International or National Standard 8 11 2
NIST SP 800-171, Protecting Controlled Unclassified Information in Nonfederal Systems and Organizations International or National Standard 8 3 2
CobiT Safe Harbor 7 162 1
HIPAA Electronic Health Record Technology Regulation or Statute 7 3 5
NIST SP 800-53 International or National Standard 7 16 1
NIST SP 800-53 R4 International or National Standard 7 3 3
TSP Section 100: 2017 Trust Services Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy Self-Regulatory Body Requirement 7 4 2
BSI Cloud Computing Compliance Controls Catalogue (C5) Best Practice Guideline 6 10 0
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Low Impact Baseline, October 2020 International or National Standard 6 2 0
Control Baselines for Information Systems and Organizations, NIST Special Publication 800-53B, Privacy Control Baseline, October 2020 International or National Standard 6 4 3
FFIEC Information Technology Examination Handbook - Business Continuity Management Audit Guideline 6 10 0
HIPAA Bill or Act 6 9 4
ISO/ DIS 37301 DRAFT International or National Standard 6 3 0
ISO/IEC 27017:2015(E) Self-Regulatory Body Requirement 6 14 4
ISO/IEC 27018:2014 International or National Standard 6 15 2
NIST Privacy Framework International or National Standard 6 9 2
NIST SP 800-30 International or National Standard 6 12 6
Red Book (Condensed) International or National Standard 6 9 4
Security and Privacy Controls for Federal Information Systems and Organizations, NIST SP 800-53, Low Impact Baseline, Revision 4 International or National Standard 6 4 0
SOC2 Safe Harbor 6 0 0
SWIFT Customer Security Controls Framework Best Practice Guideline 6 0 0
California Consumer Privacy Act of 2018 Bill or Act 5 1 1
California Consumer Privacy Act of 2018 Bill or Act 5 39 1
CIS Controls, V7.1 Best Practice Guideline 5 5 2
Cloud Security Alliance CCM V1.3 Best Practice Guideline 5 5 0
CMMC Level 2 Best Practice Guideline 5 4 2
CMMC Level 4 Best Practice Guideline 5 3 0
FFIEC CAT Best Practice Guideline 5 10 1
FFIEC IT Examination Handbook Architecture, Infrastructure, and Operations 2021 Audit Guideline 5 0 0
ISO 27005 R 2011 International or National Standard 5 12 3