Authorised Economic Operator (AEO) Programmes - Global Standards AEO-13: Measurement, Analyses and Improvement

What else in your programme already covers this

This control maps to 17 controls across 13 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 22301:2019 · 2 controls

10.1 Nonconformity and corrective action
9.1 Monitoring, measurement, analysis and evaluation

ISO 27001:2022 · 2 controls

5.35 Independent review of information security
5.36 Compliance with policies, rules and standards for information security

ISO 27002:2022 · 2 controls

5.35 Independent review of information security
5.36 Compliance with policies, rules and standards for information security

SOC 2 · 2 controls

SOC2-CC4.1 CC4.1 Ongoing and separate evaluations of control (COSO principle 16)
SOC2-CC4.2 CC4.2 Evaluating and communicating control deficiencies (COSO principle 17)

CMMC 2.0 · 1 control

CA.L2-3.12.3 Security Control Monitoring

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

CCM-A&A-05 Audit Management Process

FedRAMP High · 1 control

CA-7 Continuous Monitoring

FedRAMP Moderate · 1 control

CA-7 Continuous Monitoring

HIPAA Security Rule · 1 control

164.308(a)(8) Evaluation (Standard)

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-ID.IM-03 Improvements are identified from execution of operational processes, procedures, and activities

NIST SP 800-53 Rev 5 · 1 control

NIST800-CA-7 CA-7 Continuous Monitoring

NIST SP 800-66 Rev 2 · 1 control

164.308(a)(8) Evaluation (Standard)

Union Customs Code (UCC) - Regulation (EU) No 952/2013 · 1 control

EU-UCC-21 Internal Control and Training Programme for Customs

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.