Authorised Economic Operator (AEO) Programmes - Global Standards AEO-6: Cargo Security

What else in your programme already covers this

This control maps to 15 controls across 14 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST SP 800-53 Rev 5 · 2 controls

NIST800-PE-1 PE-1 Policy and Procedures
NIST800-PM-1 PM-1 Information Security Program Plan

Azure Security Benchmark · 1 control

GS-1 Align organization roles, responsibilities and accountabilities

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

CCM-GRC-01 Governance Program Policy and Procedures

FedRAMP High · 1 control

PE-1 Policy and Procedures

FedRAMP Moderate · 1 control

PE-1 Policy and Procedures

HIPAA Security Rule · 1 control

164.316(a) Policies and Procedures (Standard)

ISO 22301:2019 · 1 control

5.2 Policy

ISO 27001:2022 · 1 control

5.1 Policies for information security

ISO 27002:2022 · 1 control

5.1 Policies for information security

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-GV.PO-01 Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and is communicated and enforced

NIST SP 800-171 Rev 3 · 1 control

03.15.01 Policy and Procedures

NIST SP 800-66 Rev 2 · 1 control

164.316(a) Policies and Procedures (Standard)

PCI DSS 4.0 · 1 control

12.1.1 12.1.1 Overall information security policy established and disseminated

SOC 2 · 1 control

SOC2-CC5.3 CC5.3 Deploying controls through policies and procedures (COSO principle 12)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.