C5 (Germany) C5-COM-01: Identification of applicable legal, regulatory, self-imposed or contractual requirements

What else in your programme already covers this

This control maps to 32 controls across 23 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIS2 Directive · 4 controls

Art.24 Use certified ICT products, services and processes where the Member State requires it
Art.26 Establish which Member State has jurisdiction, and designate a Union representative if not established in the Union
Art.3.4 Submit and maintain entity registration information with the competent authority
Art.32 Cooperate with supervision: inspections, security audits, scans and requests for information and evidence

APRA CPS 230 Operational Risk Management · 2 controls

CPS230-9 Management of the Full Range of Operational Risks
CPS230-P12 Key Principles for Operational Risk, Resilience and Service Providers

APRA CPS 234 · 2 controls

CPS234-35 APRA Notification of Material Incidents within 72 Hours
CPS234-36 APRA Notification of Material Control Weakness within 10 Business Days

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 2 controls

CCM-A&A-04 Requirements Compliance
CCM-GRC-07 Information System Regulatory Mapping

ISO 27001:2022 · 2 controls

5.31 Legal, statutory, regulatory and contractual requirements
5.32 Intellectual property rights

ISO 27002:2022 · 2 controls

5.31 Legal, statutory, regulatory and contractual requirements
5.32 Intellectual property rights

ISO 27701:2019 · 2 controls

6.15.1 Compliance with legal and contractual requirements
7.5.1 Identify basis for PII transfer between jurisdictions

APEC Cross-Border Privacy Rules (CBPR) System · 1 control

CBPR-PR-39 Measures to ensure compliance

AWS Well-Architected Security Pillar · 1 control

SEC01-BP03 Identify and validate control objectives

Australia My Health Records Act 2012 · 1 control

MYHR-REG-3 Conditions of registration and participation

Azure Security Benchmark · 1 control

ASBv3-LT-6 Configure log storage retention

DORA · 1 control

DORA-Art.56 Data protection

FedRAMP High · 1 control

PL-2 System Security and Privacy Plans

GDPR · 1 control

GDPR-Art.24 Responsibility of the controller

HIPAA Security Rule · 1 control

164.306 Security Standards: General Rules

NIST Cybersecurity Framework 2.0 · 1 control

NIST-CSF-GV.OC-03 Legal, regulatory, and contractual requirements regarding cybersecurity - including privacy and civil liberties obligations - are understood and managed

NIST SP 800-171 Rev 3 · 1 control

03.14.08 Information Management and Retention

NIST SP 800-218 · 1 control

SP800-218-PO.1.1 Define Security Requirements for Software Development

NIST SP 800-53 Rev 5 · 1 control

NIST800-PM-1 PM-1 Information Security Program Plan

PCI DSS 4.0 · 1 control

12.5.2 12.5.2 Annual and change-driven scope confirmation

SOC 2 · 1 control

SOC2-CC3.1 CC3.1 Objectives specified clearly enough to assess risk (COSO principle 6)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

You are reading one control. How much of C5 (Germany) have you already done?

C5 (Germany) C5-COM-01 is one control. If you already hold one of the frameworks below, a reviewed crosswalk already says how much of C5 (Germany) your existing evidence covers. Hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 and 95 of 121 C5 (Germany) controls already carry evidence.

If you hold Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.178.5% covered · 26 gaps If you hold NIST SP 800-53 Rev 572.7% covered · 33 gaps If you hold FedRAMP Moderate71.1% covered · 35 gaps If you hold ISO 27002:202267.8% covered · 39 gaps If you hold ISO 27001:202257% covered · 52 gaps If you hold NIST SP 800-171 Rev 350.4% covered · 60 gaps

Each report names every control your existing framework evidences, every one it does not, the reasoning behind each claim, and the claims that were argued against and rejected. 0 were rejected on the Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 pair alone.

See the released pairs, $299 each Browse the graph free