Frameworks / NIST SP 800-190 / 04 NIST SP 800-190
NIST SP 800-190: Cloud Governance
NIST SP 800-190 04: Regulatory compliance for cloud services Regulatory compliance for cloud services. Control from NIST SP 800-190 framework, domain: NIST SP 800-190: Cloud Governance.
Maintained by Gerard Blokdyk · Verified against the published standard 31 May 2026 · Control text last updated 21 May 2026 What else in your programme already covers this This control maps to 37 controls across 27 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
SASB-3 Leadership and Governance (LG) SASB-LG-1 Business Ethics UAE-PDPL-Status UAE PDPL status, executive regulations, UAE Data Office guidance evolution NRFCS-1 Retail Cybersecurity Governance, Policy, and Regulatory Change Management NJDPA-8 AG Platkin Enforcement, 18-Month Cure Sunset, and Division of Consumer Affairs NZISM-2 Certification and Accreditation (C&A) for Government Systems OECDAI-8 AI Incident Reporting, Regulatory Compliance, Public Reporting, and International Cooperation OREGONCPA-8 Cure Period, Attorney General Enforcement, Training, Compliance Monitoring PDPASG-7 Retention Limitation, Do Not Call, Compliance, Complaints PDPATH-7 DPO, Records of Processing, Retention, Marketing, Training POPIASA-8 Information Regulator Cooperation, Complaints, Enforcement NORWAY-7 DPO, Cooperation with Datatilsynet, Retention, Marketing, Training NZPRV-8 Privacy Officer, OPC Cooperation, Compliance Notices, Complaints, Training QATAR-7 DPO, Records, Retention, Marketing, Training SA-PDPL-25 Compliance monitoring and auditing PIPA-Pseudonymisation-Article-28-2-3-Enforcement-PIPC-Investigation-Surcharges-3-Percent-Revenue-Article64-2 Korea PIPA Pseudonymisation + Article 28-2 + Enforcement + PIPC + Surcharges 3% + Article 63 + 64-2 TCFDREC-1 Governance - Board Oversight, Management Role TAIWAN-4 DPIA, Privacy by Design TEXASTDPSA-3 Sensitive Data, Children, Sale Notice UKAI-2 Sector-Specific Regulator Engagement HE-3 FSA compliance requirements URUGUAY-5 Database Registration with AGESIC URCDP VIETNAMPDP-3 Data Subject Rights VIRGINIAVCDPA-4 Privacy Notice and DPIA Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected .
Other controls in NIST SP 800-190: Cloud Governance Query this from an agent The graph holds this control, the 37 it maps to, and the evidence behind each claim, over MCP and REST.