APRA CPS 220 Risk Management CPS220-P22: Framework Structure for Managing Each Material Risk

What else in your programme already covers this

This control maps to 16 controls across 10 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST Cybersecurity Framework 2.0 · 3 controls

NIST-CSF-GV.OC-01 The organizational mission is understood and informs cybersecurity risk management
NIST-CSF-GV.RM-03 Cybersecurity risk management activities and outcomes are included in enterprise risk management processes
NIST-CSF-ID.RA-06 Risk responses are chosen, prioritized, planned, tracked, and communicated

HIPAA Security Rule · 2 controls

164.306 Security Standards: General Rules
164.308(a)(1)(ii)(A) Risk Analysis (Required)

NIST SP 800-161 Rev 1 · 2 controls

161R1-PM-28 Risk Framing
161R1-RA-3 Risk Assessment

NIST SP 800-53 Rev 5 · 2 controls

NIST800-PM-28 PM-28 Risk Framing
NIST800-PM-9 PM-9 Risk Management Strategy

SOC 2 · 2 controls

SOC2-CC3.2 CC3.2 Identifying and analysing risks to objectives (COSO principle 7)
SOC2-CC5.1 CC5.1 Selecting control activities that mitigate risk (COSO principle 10)

APRA CPS 230 Operational Risk Management · 1 control

12 Para 12 Identify, assess and manage operational risk

C5 (Germany) · 1 control

C5-OIS-07 Application of the Risk Management Policy

CMMC 2.0 · 1 control

RA.L2-3.11.1 Risk Assessments

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

CCM-GRC-02 Risk Management Program

NIST SP 800-66 Rev 2 · 1 control

164.308(a)(1)(ii)(A) Risk Analysis (Required)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.