APRA CPS 220 Risk Management CPS220-07: Material Risk Categories the Framework Must Address

What else in your programme already covers this

This control maps to 11 controls across 9 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

APRA SPS 220 Risk Management (Superannuation) · 2 controls

SPS220-22 Framework Enabling Strategies, Policies, Procedures and Controls
SPS220-23 Risk Categories the Framework Must Cover

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-GV.RM-03 Cybersecurity risk management activities and outcomes are included in enterprise risk management processes
NIST-CSF-ID.RA-03 Internal and external threats to the organization are identified and recorded

APRA CPS 230 Operational Risk Management · 1 control

23 Para 23 Manage the full range of operational risks end to end

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

CCM-GRC-05 Information Security Program

HIPAA Security Rule · 1 control

164.308(a)(1)(ii)(A) Risk Analysis (Required)

NIST SP 800-161 Rev 1 · 1 control

161R1-RA-3 Risk Assessment

NIST SP 800-53 Rev 5 · 1 control

NIST800-RA-3 RA-3 Risk Assessment

NIST SP 800-66 Rev 2 · 1 control

164.308(a)(1)(ii)(A) Risk Analysis (Required)

SOC 2 · 1 control

SOC2-CC3.2 CC3.2 Identifying and analysing risks to objectives (COSO principle 7)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.