IEC 60601-1 - Medical Electrical Equipment Safety 60601-1.7.1: Equipment identification and marking

What else in your programme already covers this

This control maps to 64 controls across 51 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

21 CFR Part 211 - Current Good Manufacturing Practice · 3 controls

CFR211-G-122 Section 211.122 - Materials Examination and Usage Criteria
CFR211-G-125 Section 211.125 - Labeling Issuance
CFR211-G-130 Section 211.130 - Packaging and Labeling Operations

API 1164 · 1 control

API1164-02 Risk Management Framework

BSI IT-Grundschutz · 1 control

BSI-15 Security categorization

Belgium CyberFundamentals · 1 control

BE-CF-15 Security categorization

FDA Quality Management System Regulation (QMSR) · 1 control

QMSR-820.45 Device labelling and packaging controls (§820.45)

FISMA · 1 control

FISMA-NIST-800-53-RMF-800-171-FIPS Operationalisation via NIST 800-53 + 800-37 RMF + 800-171 + FIPS 199 + FIPS 200

Ghana Cybersecurity Act · 1 control

GhCSA-Implementation-Roadmap Implementation Roadmap - Organizational Roles, Tooling and Metrics

IEC 62443 · 1 control

IEC62443-02 System security categorization

IEEE 1686 · 1 control

IEEE1686-Scope-IED-Substation-Automation-2022-IEC-NERC-NIST-Coord IEEE 1686 - Scope + Intelligent Electronic Devices (IEDs) + Substation Automation + 2022 Edition + Coordination with IEC 62351 + IEC 62443 + NERC CIP + NIST SP 800-82

IEEE 7000 · 1 control

IEEE7000-EthicalRisk-Identification-Analysis-Treatment-ValidationOutcomes IEEE 7000 Clauses 8 + 8.1 + 8.2 - Ethical Risk Identification + Analysis + Treatment + Validation of Ethical Outcomes + AI Safety + Robustness + Adversarial Protection

ISMAP (Japan) · 1 control

ISMAP-DataProtection-Classification-Encryption-DataResidencyJapan-Backup-SecureDeletion-Cryptography-FIPS ISMAP Data Protection - Data Classification + AES-256 Encryption At Rest + TLS 1.3 In Transit + Data Residency Japan + Backup + Secure Deletion + Cryptography per FIPS 140-3 + CRYPTREC + KMS HSM

ISO 14064 - Greenhouse Gas Accounting and Verification (Parts 1-3) · 1 control

ISO-14064-1-5.4 Categorization of indirect GHG emissions

ISO 27017 · 1 control

ISO27017-11 Data classification for cloud

ISO 27018 · 1 control

ISO27018-11 Data classification for cloud

ISO 27019 · 1 control

ISO27019-02 System security categorization

ISO 27043 · 1 control

ISO27043-08 Information classification and labeling

ISO/IEC 27010:2015 · 1 control

27010-8.2 Membership Termination

ISO/SAE 21434 · 1 control

ISO21434-08 Information classification and labeling

Japan AI Guidelines · 1 control

JP-AIG-Risk-Based-AI-System-Categorisation-Tiered-Approach-EU-AI-Act-Aligned-Generative-Foundation-Models Japan AI Guidelines Risk-Based AI System Categorisation + Tiered Approach + EU AI Act Aligned + Generative AI + Foundation Models + High-Risk + Limited-Risk + Minimal-Risk + AISI Capability-Based Thresholds

MITRE ATT&CK · 1 control

MITRE-ATTACK-Techniques-Sub-Techniques-200-600-T1078-T1059-T1566-T1190-T1486-Procedures-Adversary-Behaviour MITRE ATT&CK Techniques + 200+ + Sub-Techniques + 600+ + T1078 + T1059 + T1566 + T1190 + T1486 + Procedures

MITRE D3FEND · 1 control

MITRE-D3FEND-Model-Tactic-System-Inventory-Network-Mapping-Identity-Discovery-Asset-Identification MITRE D3FEND Model Tactic + System Inventory + Network Mapping + Identity Discovery + Asset Identification

MTCS (Singapore) · 1 control

MTCS-Acquisition-Development-Maintenance-Supplier-Vulnerability-DevSecOps-SBOM-SDLC-SCA-API-Container MTCS Acquisition + Development + Maintenance + Supplier + Vulnerability + DevSecOps + SBOM + SDLC + SCA

NAIC Insurance Data Security Model Law (MDL-668) · 1 control

NAIC-2 Information Security Program (ISP) - Section 4

NIST SP 1800-32 · 1 control

NIST1800-32-02 System security categorization

NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment) · 1 control

NISTSP115-8 Operational Considerations - Tools, Reporting Templates, ISMS Integration, Annex Material

NIST SP 800-123 · 1 control

NISTSP123-8 Governance, Policies, and ISMS Integration

NIST SP 800-137 · 1 control

NISTSP137-1 ISCM Strategy, Governance, and Volatility Assessment

NIST SP 800-144 · 1 control

NISTSP144-5 Identity and Access in Cloud, Federation, and Privileged Access

NIST SP 800-145 · 1 control

NISTSP145-8 Governance, Reporting, and Stakeholder Education on Cloud Definition

NIST SP 800-146 · 1 control

NISTSP146-6 Cloud Security and Privacy Recommendations

NIST SP 800-190 · 1 control

NIST190-11 Data classification for cloud

NIST SP 800-53 Rev 5 · 1 control

NIST800-RA-2 Security categorization

NIST SP 800-61 · 1 control

NISTSP61-4 Detection and Analysis: Sources, Triage, Categorisation, Prioritisation

NIST SP 800-63-4 · 1 control

NISTSP63R4-7 Privacy, Records Retention, and User-Controlled Wallets

NIST SP 800-88 · 1 control

NISTSP88-1 Media Sanitization Policy, Roles, and Decision Framework

NIST SP 800-92 · 1 control

NISTSP92-7 Privacy in Logs, Sensitive Content Handling, Cloud and SaaS Log Considerations

NSA Guidance for Transition to Quantum-Resistant Cryptography · 1 control

QRCM-1.3 Data Classification for Migration

OECD AI Principles · 1 control

OECDAI-3 Robustness, Security, Safety, and Adversarial Attack Protection

OWASP ASVS · 1 control

OWASPASVS-8 Data Protection (V8 + V8.3)

OWASP MASVS · 1 control

OWASPMASVS-1 MASVS-STORAGE: Storage of Sensitive Data

OWASP SAMM · 1 control

OWASPSAMM-2 Design: Threat Assessment, Security Requirements, Security Architecture

Oman National Cybersecurity Framework · 1 control

OMANCS-4 Data Protection, Cryptography, and Privacy Alignment

OpenSSF Scorecard · 1 control

OSSFSC-2 Dependency Management, Pinning, Updates, Vulnerability Tracking

PAS 1192-5:2015 - Security-Minded Approach to BIM and Digital Built Environments · 1 control

PASONE-1 Security Triage Process, Asset Sensitivity Classification, and Threat Assessment

PTES · 1 control

PTESPHASE-1 Pre-Engagement Interactions and Scoping

Protective Security Policy Framework (PSPF) Release 2024 · 1 control

PSPF24-2 Information Security, Cybersecurity Maturity, Essential Eight

SASB Standards · 1 control

SASB-SOC-7 Selling Practices and Product Labeling

SIG (Shared Assessments) · 1 control

SHAREASSESS-2 Access Control, Identity, Authentication

SLSA · 1 control

SUPCHAIN-1 Build Integrity - Source, Build, Provenance

Singapore Government Instruction Manual on ICT&SS Management (IM8) · 1 control

IM8-DAT.1 Data Classification

UK AI Regulation Framework · 1 control

UKAI-1 Risk-Based Approach and Pro-Innovation Principles

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.