ISO 22739:2024 - Blockchain and Distributed Ledger Technologies Vocabulary
Section 3.2: Blockchain Concepts

ISO 22739:2024 - Blockchain and Distributed Ledger Technologies Vocabulary ISO-22739-3.2.4: Hash function

Defines the cryptographic function used to create fixed-length output from variable-length input for block identification.

What else in your programme already covers this

This control maps to 181 controls across 117 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 27043 · 3 controls

ISO/IEC 23837 - Security Requirements for Quantum Key Distribution · 3 controls

ISO/SAE 21434 · 3 controls

MARS-E · 3 controls

NIST Post-Quantum Cryptography Standards (FIPS 203, 204, 205) · 3 controls

  • PQC-5 Cryptographic Inventory and PQC Migration Roadmap
  • PQC-7 FIPS Validated Modules, HSM Readiness, and Algorithm Validation
  • PQC-8 Implementation Requirements - RNG, Side-Channel, Key Management, Operations, Incident Response

NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements · 3 controls

NIST SP 800-53 Rev 5 · 3 controls

NSA Guidance for Transition to Quantum-Resistant Cryptography · 3 controls

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 2 controls

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 2 controls

FBI CJIS Security Policy · 2 controls

  • CJIS-8 Media Protection
  • CJIS-9 System and Communications Protection

ISO 13485 · 2 controls

ISO 27799 · 2 controls

NIST SP 800-124 Revision 2 - Guidelines for Managing the Security of Mobile Devices · 2 controls

Nebraska Data Privacy Act · 2 controls

  • NDPA-1 Applicability, Scope, and Carve-Outs
  • NDPA-7 Data Protection Assessments and Processor Contracts

Nigeria Data Protection Act 2023 (NDPA) · 2 controls

  • NG-NDPA-1 Scope, Applicability, and Establishment of Nigeria Data Protection Commission
  • NG-NDPA-7 Cross-Border Data Transfers and International Cooperation

OWASP MASVS · 2 controls

PTES · 2 controls

Secure by Design: A Guide for Manufacturers (CISA) · 2 controls

  • CISABD-1 Take Ownership of Customer Security Outcomes
  • SBD-DEV-04 Phishing-Resistant Authentication

TISAX - Trusted Information Security Assessment Exchange · 2 controls

UK Open Banking Standard · 2 controls

US ITAR and EAR - Export Control and Data Security · 2 controls

3GPP 5G Security Architecture (TS 33.501) · 1 control

APPI · 1 control

  • APPI-A34 Request for Correction, Addition or Deletion

AS9100D:2016 - Quality Management Systems for Aviation, Space, and Defence · 1 control

  • 9.1 Risk communication and consultation

ASD Strategies to Mitigate Cyber Security Incidents · 1 control

  • ASD37-17 TLS encryption between email servers (Limited)

BSI IT-Grundschutz · 1 control

  • BSI-08 Cryptographic protection of data

Bahrain PDPL · 1 control

FFIEC IT Examination Handbook · 1 control

FIDO2 / WebAuthn · 1 control

FTC GLBA Safeguards Rule (16 CFR Part 314) · 1 control

  • FTC-Safeguards-9-Elements 9 Safeguard Elements - Access, Inventory, Encryption, Secure-Dev, MFA, Disposal, Change-Mgmt, Monitoring, Pen-Test (16 CFR 314.4(c))

Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (UAE PDPL) · 1 control

  • UAE-PDPL-Art.4_5 Lawful basis and principles for processing personal data (UAE PDPL Articles 4-5)

IEC 62351 - Power Systems Communication Security · 1 control

  • 62351-9 Cyber security key management

ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence · 1 control

  • 6.7 Conducting Audit Follow-up

ISO 19011 · 1 control

  • 6.7 Conducting Audit Follow-up

ISO 20000-1 · 1 control

  • 9.1 Risk communication and consultation

ISO 27005 · 1 control

  • 9.1 Risk communication and consultation

ISO 27017 · 1 control

ISO 27018 · 1 control

ISO 31000:2018 · 1 control

  • 6.7 Conducting Audit Follow-up

ISO/IEC 27010:2015 · 1 control

ISO/IEC 27011:2024 · 1 control

ISO/IEC 27400:2022 · 1 control

ISO/IEC 27557:2022 - Organisational Privacy Risk Management · 1 control

ISO/IEC 29115:2023 - Entity Authentication Assurance Framework · 1 control

Jamaica Data Protection Act 2020 · 1 control

Kentucky Consumer Data Protection Act · 1 control

LGPD · 1 control

Liechtenstein DPA · 1 control

MARS-E - Minimum Acceptable Risk Standards for Exchanges · 1 control

MDS2 (Medical Device) · 1 control

MITRE ATT&CK · 1 control

MTCS (Singapore) · 1 control

Malaysia PDPA 2010 · 1 control

Maryland Online Data Privacy Act of 2024 · 1 control

Mauritius DPA · 1 control

Mexico LFPDPPP · 1 control

Minnesota Consumer Data Privacy Act · 1 control

Monetary Authority of Singapore Technology Risk Management Guidelines · 1 control

Montana Consumer Data Privacy Act · 1 control

NAIC Insurance Data Security Model Law (MDL-668) · 1 control

  • NAIC-2 Information Security Program (ISP) - Section 4

NATO STANAG 4774 (Confidentiality Metadata Labels) and STANAG 4778 (Metadata Binding) · 1 control

  • STANAG-2 STANAG 4778 Metadata Binding Mechanism and Cryptographic Binding

NIS2 Directive Implementing Acts · 1 control

  • NIS2I-5 Cyber Hygiene, Training, Cryptography, and Human Resources Security

NIST Privacy Framework · 1 control

  • NISTPF-8 Protect-P Information Protection Processes (PR.PO-P)

NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment) · 1 control

  • NISTSP115-8 Operational Considerations - Tools, Reporting Templates, ISMS Integration, Annex Material

NIST SP 800-122 · 1 control

  • NISTSP122-5 PII Security Controls - Encryption, Access Control, Storage, Audit

NIST SP 800-123 · 1 control

  • NISTSP123-4 Server Cryptography - Encryption, Key Management, Certificates

NIST SP 800-137 · 1 control

  • NISTSP137-5 Vulnerability + Patch + Configuration Status Monitoring

NIST SP 800-144 · 1 control

  • NISTSP144-5 Identity and Access in Cloud, Federation, and Privileged Access

NIST SP 800-145 · 1 control

  • NISTSP145-8 Governance, Reporting, and Stakeholder Education on Cloud Definition

NIST SP 800-146 · 1 control

NIST SP 800-190 · 1 control

NIST SP 800-61 · 1 control

  • NISTSP61-3 Preparation: Communications, Toolkits, Training, Exercises, Threat Intelligence

NIST SP 800-63-4 · 1 control

  • NISTSP63R4-5 Federation: Assertions, Trust Agreements, RP Validation, Pseudonymous Identifiers

NIST SP 800-66 · 1 control

  • NISTSP66-6 Technical Safeguards: Access Control, Audit Controls, Integrity, Person Authentication

NIST SP 800-82 Revision 3: Guide to Industrial Control Systems (ICS) Security · 1 control

  • NISTSP82-2 OT Risk Assessment and Threat/Vulnerability Identification

NIST SP 800-88 · 1 control

  • NISTSP88-4 Cryptographic Erase, Key Management, and Verification of Erase

NIST SP 800-92 · 1 control

  • NISTSP92-4 Log Management: Time Synchronisation, Parsing, Storage, Integrity, Access Control

New Hampshire Data Privacy Act · 1 control

  • NHPA-6 Reasonable Data Security and Breach Response

New Jersey Data Privacy Act · 1 control

  • NJDPA-7 Data Protection Assessments and Processor Contracts

New Zealand Information Security Manual (NZISM) · 1 control

  • NZISM-3 Personnel Security, Physical Security, and Cryptography

Nigeria Data Protection Regulation (NDPR) · 1 control

  • NGNDPR-5 Security of Personal Data, Breach Notification, and DPIA under NDPR Section 2.6-Security

Nigeria Open Banking Regulatory Framework (CBN, 2023) · 1 control

  • NGOB-3 API Security Standards, mTLS, and Encryption

O-RAN WG11 Security Specification · 1 control

  • ORANWG11-3 Cryptography, TLS, SSH, IPsec, and PKI Lifecycle Management

OSFI B-13 · 1 control

  • OSFIB13-3 Cyber Security: Identification, Protection, Detection, Response, Recovery

OWASP SAMM · 1 control

  • OWASPSAMM-2 Design: Threat Assessment, Security Requirements, Security Architecture

Oman National Cybersecurity Framework · 1 control

  • OMANCS-4 Data Protection, Cryptography, and Privacy Alignment

Open Banking Security · 1 control

  • OPENBANK-3 Mutual TLS, Token Binding, Request Signing (JWS), Key Management

OpenSSF Scorecard · 1 control

  • OSSFSC-6 Signed Releases, Provenance, Trusted Publishing, Binary Artifacts

Oregon Consumer Privacy Act · 1 control

  • OREGONCPA-7 Processor Contracts, Cross-Border Transfers, DPAs

PAS 1192-5:2015 - Security-Minded Approach to BIM and Digital Built Environments · 1 control

  • PASONE-4 Technical Security: CDE Configuration, BIM Tools, Encryption, Aggregation, Mobile Working

PCI P2PE · 1 control

PCI PIN Security · 1 control

PCI SSF · 1 control

PDPA Singapore · 1 control

  • PDPASG-5 Protection, Accuracy, and Security of Personal Data

PDPA Thailand · 1 control

  • PDPATH-5 Security Measures and Data Protection

POPIA · 1 control

  • POPIASA-5 Security Safeguards, Encryption, Access Control, Operator Obligations

PSD2 SCA · 1 control

  • PSDTWO-2 SCA Exemptions and Risk-Based Authentication

Personal Data Act (personopplysningsloven) · 1 control

  • NORWAY-5 Security of Processing, Encryption, Pseudonymization, Access Control

Peru DPL · 1 control

  • PERU-7 DPO, Records, Retention, Marketing, Training

Privacy Act 2020 · 1 control

  • NZPRV-2 IPP 5 Storage and Security of Personal Information

Qatar DPL · 1 control

SIG (Shared Assessments) · 1 control

SLSA · 1 control

  • SUPCHAIN-2 Source Integrity - Branch Protection, Code Review, Two-Person Rule

SOC for Cybersecurity - Cybersecurity Risk Management Examination · 1 control

Saudi Arabia PDPL · 1 control

Sigstore - Software Artifact Signing and Verification · 1 control

  • SIGSTORE-3 Sigstore for Containers and Artifacts (Cosign)

Singapore Government Instruction Manual on ICT&SS Management (IM8) · 1 control

South Korea ISMS-P · 1 control

Switzerland New Federal Act on Data Protection (nFADP/nDSG, 2023) · 1 control

Taiwan PDPA · 1 control

  • TAIWAN-2 Consent, Notice, Sensitive Data

Texas Data Privacy Act · 1 control

Turkey KVKK · 1 control

Uruguay DPL · 1 control

  • URUGUAY-3 Sensitive Data, Health Data, Children

Vietnam PDPD · 1 control

Virginia CDPA · 1 control

W3C Verifiable Credentials (VC) Data Model 2.0 · 1 control

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Section 3.2: Blockchain Concepts

Query this from an agent

The graph holds this control, the 181 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll ISO 22739:2024 - Blockchain and Distributed Ledger Technologies Vocabulary controls