Samoa Telecommunications Act (2005) - Privacy & Data Protection
Customer Information Confidentiality (Sections 48 to 51)

Samoa Telecommunications Act (2005) - Privacy & Data Protection SAM-6: Legal Authorization Requirements

Disclosure is only permitted when required or authorized by the Regulator or by law

What else in your programme already covers this

This control maps to 65 controls across 40 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

ISO 22739:2024 - Blockchain and Distributed Ledger Technologies Vocabulary · 3 controls

NIST SP 800-53 Rev 5 · 3 controls

3GPP 5G Security Architecture (TS 33.501) · 2 controls

ASD Strategies to Mitigate Cyber Security Incidents · 2 controls

  • ASD37-18 Restrict administrative privileges (Essential)
  • ASD37-20 Multi-factor authentication (Essential)

AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) · 2 controls

SOC 2 · 2 controls

  • SOC2-CC6.2 Prior to granting access, registration and authorization processes are established
  • SOC2-CC6.3 Role-based access and least privilege are enforced

SSAE 18 - Attestation Standards (SOC Reporting) · 2 controls

Authorised Economic Operator (AEO) Programmes - Global Standards · 1 control

BSI IT-Grundschutz · 1 control

  • BSI-02 Access enforcement and least privilege

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 1 control

DAMA-DMBOK2 - Data Management Body of Knowledge (2nd Edition) · 1 control

  • DSO-3 Data Access Management

FFIEC Cybersecurity Assessment Tool (CAT) · 1 control

IEC 62351 - Power Systems Communication Security · 1 control

  • 62351-8 Role-based access control (RBAC)

ISO 13485 · 1 control

ISO 15189:2022 - Medical Laboratories Requirements for Quality and Competence · 1 control

ISO 19650 - Organisation and Digitisation of Information about Buildings and Civil Engineering Works (BIM) · 1 control

ISO 27017 · 1 control

ISO 27018 · 1 control

ISO 27043 · 1 control

ISO 27799 · 1 control

ISO/IEC 27011:2024 · 1 control

ISO/IEC 27400:2022 · 1 control

ISO/SAE 21434 · 1 control

NIST Cybersecurity Framework 2.0 · 1 control

  • NIST-CSF-PR.AA-05 Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties

NIST SP 800-171A Rev 3 - Assessing CUI Security Requirements · 1 control

  • 3.7.1 Key-management policies and procedures are implemented to include generation of strong cryptographic keys used to protect stored account data

NIST SP 800-190 · 1 control

  • NIST190-08 Privileged access in cloud environments

NRC 10 CFR 73.54 - Nuclear Facility Cybersecurity · 1 control

OWASP SAMM · 1 control

  • OWASPSAMM-2 Design: Threat Assessment, Security Requirements, Security Architecture

SIG (Shared Assessments) · 1 control

SLSA · 1 control

  • SUPCHAIN-2 Source Integrity - Branch Protection, Code Review, Two-Person Rule

Secure by Design: A Guide for Manufacturers (CISA) · 1 control

  • CISABD-1 Take Ownership of Customer Security Outcomes

Security of Critical Infrastructure Act 2018 (SOCI) · 1 control

Sigstore - Software Artifact Signing and Verification · 1 control

  • SIGSTORE-2 Transparency Log (Rekor) and Verification

Singapore Government Instruction Manual on ICT&SS Management (IM8) · 1 control

South Korea ISMS-P · 1 control

TISAX - Trusted Information Security Assessment Exchange · 1 control

TSA Pipeline Cybersecurity Directives · 1 control

  • TSAPIPE-2 OT/IT Network Segmentation and Access Control

UK Telecommunications (Security) Act 2021 · 1 control

US Automated Commercial Environment (ACE) - CBP Trade Data Requirements · 1 control

Uganda Data Protection and Privacy Act (2019) · 1 control

  • UGA-10 Sensitive Personal Data Prohibition

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.

Other controls in Customer Information Confidentiality (Sections 48 to 51)

Query this from an agent

The graph holds this control, the 65 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpointAll Samoa Telecommunications Act (2005) - Privacy & Data Protection controls