MiFID II / MiFIR MiFID-II-Scope-Directive-2014-65-MiFIR-Regulation-600-2014-Effective-3-January-2018-ESMA-NCAs-Authorisation: MiFID II + MiFIR Scope + Directive 2014/65 + Regulation 600/2014 + 3 January 2018 + ESMA + NCAs + Authorisation

What else in your programme already covers this

This control maps to 32 controls across 22 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ASD Strategies to Mitigate Cyber Security Incidents · 2 controls

ASD37-18 Restrict administrative privileges (Essential)
ASD37-20 Multi-factor authentication (Essential)

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 2 controls

AWWA-1.3 Security Awareness and Training
AWWA-2.1 User Access Management

ITAR - International Traffic in Arms Regulations · 2 controls

ITAR-Part123-125-ExportLicensing-DSP-5-DSP-73-DSP-61-MLA-TAA-Classified-Information-Routed ITAR Parts 123-125 Export Licensing - DSP-5 Permanent Export + DSP-73 Temporary Export + DSP-61 Temporary Import + DSP-83 + Manufacturing License Agreements (MLA) + Technical Assistance Agreements (TAA) + Classified Information + Routed Export Transactions
ITAR-TechnicalData-DefenseServices-DeemedExport-ForeignPerson-Access-USPersons-FOC-AUKUS-Exemptions ITAR Technical Data + Defense Services + Deemed Export Rule + Foreign Person Access + US Persons Only + FOCI Foreign Ownership Control Influence + AUKUS Pillar 2 Exemptions + DD-2345 MCTL

OWASP API Security Top 10 - 2023 · 2 controls

OWASPAPI-1 Broken Object Level Authorization (BOLA) and BFLA
OWASPAPI-3 Broken Object Property Level Authorization (BOPLA)

OWASP Top 10:2025 · 2 controls

OWASPTOP10-1 A01:2025 Broken Access Control
OWASPTOP10-6 A06:2025 Vulnerable and Outdated Components

FDA 21 CFR Part 11 · 1 control

Part11.AccessAndAuth Access control + authority + device checks (21 CFR §11.10(d) + (f) + (g) + (h))

FISMA · 1 control

FISMA-CIRCIA-ZTA-EO14028 CIRCIA, Zero Trust Architecture, EO 14028 + 14110 + OMB Memoranda

FedRAMP Rev 5 · 1 control

FedRAMP-Boundary Authorization Boundary, SSP, SAR, POA&M documentation

Ghana Cybersecurity Act · 1 control

GhCSA-CII-Designation-Plan-Audit-Risk CII Designation, Registration, Cybersecurity Plan, Audit and Risk Assessment

HITECH Act · 1 control

HITECH-SubtitleD-StrengthIndividualRights HITECH Subtitle D - Strengthened Individual Rights (Electronic Access, Accounting of Disclosures, Restrictions, Sale Prohibition)

HL7 FHIR Security Framework · 1 control

HL7-FHIR-Auth-SMART-OAuth-OIDC-Backend HL7 FHIR Authentication - SMART App Launch + OAuth 2.0 + OpenID Connect + Backend Services + Token Lifetime

IEC 62351 - Power Systems Communication Security · 1 control

62351-8 Role-based access control (RBAC)

ILO Declaration on Fundamental Principles and Rights at Work (Core Conventions) · 1 control

ILO-FPRW-Cat1-FOA-CollectiveBargaining-C87-C98 ILO Fundamental Category 1 - Freedom of Association (C87) + Effective Recognition of Right to Collective Bargaining (C98) + Trade Unions

ILO Tripartite Declaration of Principles concerning Multinational Enterprises (MNE Declaration) · 1 control

ILO-MNE-SectionE-ConditionsOfWorkAndLife-Wages-Benefits-OSH-MinAge-Para34to41 ILO MNE Declaration Section E Conditions of Work and Life - Wages + Benefits + Conditions of Work + Minimum Age + Safety and Health (Paras 34-41)

ISMAP (Japan) · 1 control

ISMAP-Identity-Access-MFA-Privileged-Federation-SSO-API-Tokens-CloudIAM-PIV-PASETO ISMAP Identity and Access Management - Cloud IAM + Multi-Factor Authentication + Privileged Access + Federation/SSO + API Security + Access Tokens + My Number Card Integration + Government IAM

ISO/IEC 27011:2024 · 1 control

27011-8.1 User Endpoint Devices

ISO/IEC 27400:2022 · 1 control

27400-6.1 Secure Device Design

MARS-E · 1 control

MARS-E-Privacy-PII-PHI-Minimum-Necessary-HIPAA-Privacy-Rule-NIST-800-122-45-CFR-164-Subpart-E MARS-E Privacy + PII + PHI + Minimum Necessary + HIPAA Privacy Rule + NIST 800-122 + 45 CFR 164 Subpart E

MDS2 (Medical Device) · 1 control

MDS2-PHI-Data-Handling-DATA-Storage-STCF-Transmission-TXCF-TXIG-Encryption-FIPS MDS2 PHI Handling + DATA + STCF Storage + TXCF Transmission + TXIG Integrity + Encryption + FIPS

NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements · 1 control

3.7.1 Key-management policies and procedures are implemented to include generation of strong cryptographic keys used to protect stored account data

OWASP ASVS · 1 control

OWASPASVS-4 Access Control (V4 + V4.3)

US Automated Commercial Environment (ACE) - CBP Trade Data Requirements · 1 control

ACE-CR-4 Cargo Release Authorization

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.