Ghana CSA crosswalk to international standards. NIST CSF 2.0 (February 2024): mapping GOVERN (CSA Ghana engagement + Cybersecurity Plan) + IDENTIFY (CII designation + asset + risk + supplier) + PROTECT (access controls + segmentation + encryption + training) + DETECT (logging + monitoring + threat intelligence) + RESPOND (24-hour CSA notification + IR plan + CERT-GH coordination) + RECOVER (BCP + DRP). NIST SP 800-53 + 800-37 RMF: detailed control catalog + risk management framework + supports Ghana CSA Cybersecurity Plan content. ISO/IEC 27001:2022 + ISO/IEC 27002:2022 + ISO/IEC 27005:2022: ISMS + risk management structure aligned with Ghana CSA Cybersecurity Plan + annual audit; many Ghana CII organisations pursue ISO 27001 certification for international acceptance. ISO/IEC 22301:2019 BUSINESS CONTINUITY: aligns with Ghana CSA business continuity + disaster recovery requirements. ISO 31000 RISK MANAGEMENT: foundational risk management aligned with Ghana CSA Risk Assessment. SECTOR-SPECIFIC: PCI DSS for payment cards + ISO 27017 cloud + ISO 27018 cloud-PII + ISO 27701 PIMS for privacy-related cybersecurity + SOC 2 for service organizations + Cloud Security Alliance CCM + CIS Critical Security Controls v8.1. COMMONWEALTH CYBERCRIME LEGISLATION MODEL + ITU TOOLKIT FOR CYBERCRIME LEGISLATION: provide model law guidance Ghana drew on for Act 1038. ENGAGEMENT: organizations should maintain crosswalk + leverage international standards alongside Ghana CSA compliance.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.