API 1164
Identify (ID): governance, risk strategy, business environment, supply chain, risk assessment, asset management (Section 6) – API 1164

API 1164 ID.GV-3: Legal and regulatory requirements catalogued, used in risk decisions and communicated

What does ID.GV-3 require?

The plan must catalogue the sources of legal and regulatory requirements that apply to or affect IAC cybersecurity (contracts and local, state, tribal, federal and international laws and regulations), include them in risk management decisions and communicate them clearly to stakeholders.

Maintained by Gerard BlokdykControl text last updated

Other controls in Identify (ID): governance, risk strategy, business environment, supply chain, risk assessment, asset management (Section 6) – API 1164

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll API 1164 controls