Under active development — Content is continuously updated and improved

CPL-02—Cybersecurity & Data Protection Controls Oversight

Weight: 10

>Control Description

Mechanisms exist to provide a cybersecurity and data protection controls oversight function that reports to the organization's executive leadership.

>Cross-Framework Mappings

NIST SP 800-53 r5

NIST CSF 2.0

ISO 27001:2022

PCI DSS v4.0.1

SOC 2 TSC

CMMC v2.0

NIST SP 800-171

FedRAMP Rev 5

NIST AI RMF

Canada ITSP 10.171

India SEBI Guidelines

New Zealand HISF

New Zealand HISF Suppliers

Saudi Arabia IoT Guidelines

Spain ENS

UK DEF STAN 05-138

SOC 2 TSC (Detailed)

GovRAMP

IMO Maritime Cyber Risk

ISO 27001:2022 (Detailed)

ISO 27002:2022

ISO 27701

ISO 29100

NAIC Model Law 668

NIST SP 800-161

NIST SP 800-171 Rev 3

NIST SP 800-171A Rev 3

NIST SP 800-171A

TISAX

Data Privacy Management Principles

45 CFR 155.260

155.260(a)(3)(viii)

DHS TIC 3.0

FCA CRM

609.930(c)(6)(i)

GLBA (16 CFR 314)

HIPAA Simplification 2013

§ 164.306(d)(3)(i)

§ 164.316(b)(2)(iii)

GDPR

Article 32.1(d)

Ask AI

Configure your API key to use AI features.