APPI APPI-A46: Security and Proper Handling of Anonymized Personal Information

What else in your programme already covers this

This control maps to 21 controls across 13 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

C5 (Germany) · 3 controls

C5-CRY-03 Encryption of sensitive data for storage
C5-OIS-06 Risk Management Policy
C5-PSS-01 Guidelines and Recommendations for Cloud Customers

ANSSI Guide d'hygiene informatique (42 mesures, v2.0) · 2 controls

ANSSI-HYG-09 Assign the Correct Rights on Sensitive Resources
ANSSI-HYG-31 Encrypt Sensitive Data, in Particular on Equipment That May Be Lost

Azure Security Benchmark · 2 controls

ASBv3-GS-3 Define and implement data protection strategy
DP-4 Enable data at rest encryption by default

CIS Controls v8 · 2 controls

CIS-3.11 Encrypt Sensitive Data at Rest
CIS-3.3 Configure Data Access Control Lists

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-DSP-01 Security and Privacy Policy and Procedures
CCM-DSP-17 Sensitive Data Protection

FedRAMP High · 2 controls

AC-3 Access Enforcement
SC-28 Protection of Information at Rest

FedRAMP Moderate · 2 controls

AC-3 Access Enforcement
SC-28 Protection of Information at Rest

HIPAA Security Rule · 1 control

164.306 Security Standards: General Rules

ISO 27001:2022 · 1 control

5.34 Privacy and protection of personal identifiable information (PII)

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-PR.DS-01 The confidentiality, integrity, and availability of data-at-rest are protected

NIST SP 800-161 Rev 1 · 1 control

161R1-SC-28 Protection of Information at Rest

NIST SP 800-53 Rev 5 · 1 control

NIST800-SC-28 SC-28 Protection of Information at Rest

SOC 2 · 1 control

SOC2-CC6.1 CC6.1 Logical access security over protected information assets

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of APPI have you already done?

APPI APPI-A46 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of APPI your existing evidence covers. Hold APEC Cross-Border Privacy Rules (CBPR) System and 16 of 30 APPI controls already carry evidence.

If you hold APEC Cross-Border Privacy Rules (CBPR) System53.3% covered · 14 gaps If you hold ISO 27701:201953.3% covered · 14 gaps If you hold NIST SP 800-53 Rev 553.3% covered · 14 gaps If you hold SOC 253.3% covered · 14 gaps If you hold GDPR50% covered · 15 gaps If you hold CCPA/CPRA46.7% covered · 16 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the APEC Cross-Border Privacy Rules (CBPR) System pair alone.

See the released pairs, $299 each Browse the graph free