APEC Cross-Border Privacy Rules (CBPR) System CBPR-06: Security Safeguards

What else in your programme already covers this

This control maps to 30 controls across 15 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

Azure Security Benchmark · 3 controls

ASBv3-GS-3 Define and implement data protection strategy
DP-4 Enable data at rest encryption by default
IM-6 Use strong authentication controls

C5 (Germany) · 3 controls

C5-IDM-09 Authentication mechanisms
C5-OIS-06 Risk Management Policy
C5-PS-01 Physical Security and Environmental Control Requirements

FedRAMP High · 3 controls

AC-3 Access Enforcement
SC-13 Cryptographic Protection
SC-28 Protection of Information at Rest

FedRAMP Moderate · 3 controls

AC-3 Access Enforcement
SC-13 Cryptographic Protection
SC-28 Protection of Information at Rest

Australia Consumer Data Right - Banking (CDR) · 2 controls

AUCDR-IS-STEP3 Step 3 - Have and maintain an information security capability
AUCDR-PS-12 Privacy Safeguard 12 - Security of CDR data and destruction or de-identification of redundant CDR data

Australia My Health Records Act 2012 · 2 controls

MYHR-SEC-1 Written security and access policy
MYHR-SEC-2 Access controls and user account management

CCPA/CPRA · 2 controls

§1798.100 General Duties of Businesses that Collect Personal Information
§1798.150 Private Right of Action for Data Breaches

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-DSP-17 Sensitive Data Protection
CCM-GRC-02 Risk Management Program

GDPR · 2 controls

GDPR-Art.32 Security of processing
GDPR-Art.5 Principles relating to processing of personal data

HIPAA Security Rule · 2 controls

164.306 Security Standards: General Rules
164.312(a)(1) Access Control (Standard)

NIST SP 800-161 Rev 1 · 2 controls

161R1-AC-3 Access Enforcement
161R1-SC-28 Protection of Information at Rest

APPI · 1 control

APPI-A23 Security Control Measures

Australian Privacy Principles (APPs) · 1 control

APP-11 APP 11 - Security of personal information

NIST SP 800-66 Rev 2 · 1 control

164.312(a)(1) Access Control (Standard)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of APEC Cross-Border Privacy Rules (CBPR) System have you already done?

APEC Cross-Border Privacy Rules (CBPR) System CBPR-06 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of APEC Cross-Border Privacy Rules (CBPR) System your existing evidence covers. Hold GDPR and 43 of 59 APEC Cross-Border Privacy Rules (CBPR) System controls already carry evidence.

If you hold GDPR72.9% covered · 16 gaps If you hold ISO 27701:201967.8% covered · 19 gaps If you hold APPI64.4% covered · 21 gaps If you hold Australia Consumer Data Right - Banking (CDR)55.9% covered · 26 gaps If you hold CCPA/CPRA55.9% covered · 26 gaps If you hold Australian Privacy Principles (APPs)47.5% covered · 31 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the GDPR pair alone.

See the released pairs, $299 each Browse the graph free