Frameworks / ISO 26262:2018 - Functional Safety for Road Vehicles / ISO-26262-3-7 What else in your programme already covers this This control maps to 203 controls across 126 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
BSI-13 Risk assessment procedures BSI-15 Security categorization BSI-17 Continuous monitoring strategy NISTSP30-3 Threat Source and Threat Event Identification NISTSP30-4 Vulnerability and Predisposing Condition Identification NISTSP30-6 Risk Determination, Uncertainty, and Sensitivity Analysis NAIC-1 NAIC Model Law Adoption, Scope, and Licensee Definitions NAIC-2 Information Security Program (ISP) - Section 4 NIST-CSF-GV.RM-07 Strategic opportunities (i.e., positive risks) are characterized and are included in organizational cybersecurity risk discussions NIST-CSF-ID.RA-09 The authenticity and integrity of hardware and software are assessed prior to acquisition and use NISTSP37-2 RMF Categorize Step: Information and System Categorisation NISTSP37-3 RMF Select Step: Security and Privacy Control Selection NDPA-1 Applicability, Scope, and Carve-Outs NDPA-7 Data Protection Assessments and Processor Contracts NZISM-1 NZISM Governance, Documentation, and Classification System NZISM-3 Personnel Security, Physical Security, and Cryptography NG-NDPA-1 Scope, Applicability, and Establishment of Nigeria Data Protection Commission NG-NDPA-7 Cross-Border Data Transfers and International Cooperation ORSA-S1 ORSA Manual Section 1: Description of Insurer's Risk Management Framework ORSA-S2 ORSA Manual Section 2: Insurer's Assessment of Risk Exposure 2.4.4 Hazard Analysis and Risk Assessment 2.7.2 Food Fraud Plan CH-FADP-21 Data protection impact assessments FADP-7 Data Protection Impact Assessment (Articles 9-10) CRM-1 AML/CFT Compliance CRM-4 Business Risk Assessment CPS230-11 Identification, Assessment and Management of Operational Risk SPS220-22 Framework Enabling Strategies, Policies, Procedures and Controls 4.3.1 Risk Assessment and Impact Analysis P1-S1 Advance Electronic Information BB-DPA-20 Sections 50-60 - Registration and Responsibilities RA-1 Policy and Procedures RA-1 Policy and Procedures ISO13485-06 Security management process and risk analysis ISO27799-06 Security management process and risk analysis 29147-5.11 Researcher Safe Harbour and Legal Posture NERCCIP-5 System Security Management + Configuration Change Management and Vulnerability Assessments (CIP-007 + CIP-010) NISTPF-8 Protect-P Information Protection Processes (PR.PO-P) NISTSP122-8 Continuous Monitoring, Training, and Privacy Programme Governance NISTSP144-1 Cloud Governance, Risk Assessment, and Provider Trust Evaluation NISTSP145-7 Cloud Procurement Standards Aligned to NIST SP 800-145 Definition NISTSP146-1 Cloud Adoption Strategy, Workload Suitability, and Decision Framework 3.11 Encrypt Sensitive Data at Rest NISTSP39-3 Risk Assessing: Organisation, Mission, and System Level Assessments RA-1 Policy and Procedures RA-1 Policy and Procedures RA-1 Policy and Procedures NISTSP66-1 Security Management Process: Risk Analysis and Risk Management for ePHI NISTSP82-2 OT Risk Assessment and Threat/Vulnerability Identification NRFCS-2 Risk Assessment, Customer Data Inventory, Classification, and Retail Threat Model NHPA-7 Data Protection Assessments and Processor Contracts NJDPA-7 Data Protection Assessments and Processor Contracts NGNDPR-5 Security of Personal Data, Breach Notification, and DPIA under NDPR Section 2.6-Security NGOB-1 Open Banking Registry Participation, Tiered Categorisation, and KYP OECDAI-3 Robustness, Security, Safety, and Adversarial Attack Protection OECDMNE-5 Environment, Climate, and Biodiversity OREGONCPA-5 Data Protection Assessments, Privacy by Design, Security Practices PDPASG-4 Children's Data, DPIA, and Privacy by Design PDPATH-4 DPIA, Privacy by Design, Children's Data POPIASA-4 Special Personal Information, Children, Information Quality, Documentation NORWAY-4 DPIA, Privacy by Design, Records of Processing NZPRV-6 IPP 13 Unique Identifiers, Privacy Impact Assessment, Privacy by Design QATAR-7 DPO, Records, Retention, Marketing, Training SECCLIM-2 Risk Management: Identification, Assessment, Integration TSAPIPE-1 Cybersecurity Implementation Plan and Coordinator UKAI-1 Risk-Based Approach and Pro-Innovation Principles UKOPRES-3 Self-Assessment and Board Engagement s.54(5) Statement Content Requirements UNICEFAI-4 Transparency, Explanation, Adult Capacity URUGUAY-5 Database Registration with AGESIC URCDP Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected .
Other controls in Part 3: Concept Phase Query this from an agent The graph holds this control, the 203 it maps to, and the evidence behind each claim, over MCP and REST.