Frameworks / Section 508 - ICT Accessibility (Revised) / 502 What else in your programme already covers this This control maps to 90 controls across 69 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
P1 Demonstrates Commitment to Integrity and Ethical Values P7 Identifies and Analyzes Risk NDPA-1 Applicability, Scope, and Carve-Outs NDPA-4 Sensitive Data Processing Consent and Childrens Protections NG-NDPA-1 Scope, Applicability, and Establishment of Nigeria Data Protection Commission NG-NDPA-4 Data Subject Rights and Automated Decision-Making CH-FADP-09 Notification of data files to the FDPIC FADP-13 Right to Data Portability (Article 28) SO2.3 Open-source health data standards SO3.4 Standards and interoperability governance APPI-A27 Restriction on Provision to Third Parties P3-S3 Cooperative Arrangements/Procedures DS-2 Ensure software supply chain security BB-DPA-14 Section 15 - Right to Data Portability DIQ-1 Data Integration and Interoperability EN301549-11.5 Software - interoperability with assistive technology NISTPF-1 Identify-P - Business Environment, Data Processing Inventory, Ecosystem, and Risk Assessment NISTSP122-3 PII Data Subject Rights and Automated Decision-Making NRFCS-4 Consumer Privacy Rights, Consent, Marketing, and Loyalty Data NHPA-4 Sensitive Data, Children, and Minors 13-16 Opt-In Consent NJDPA-4 Sensitive Data, Children, and Adolescents 13-17 Opt-In NGNDPR-4 Data Subject Rights and Automated Decision-Making OREGONCPA-2 Consumer Rights: Access, Correction, Deletion, Portability, Opt-Out PDPASG-3 Access, Correction, Data Portability, and Individual Rights PDPATH-3 Data Subject Rights, Automated Decisions, Accuracy POPIASA-3 Data Subject Rights (Access, Correction, Objection), Automated Decisions NORWAY-2 Data Subject Rights and Automated Decision-Making PERU-5 Security of Personal Data and Processor Agreements AUPRV-5 APP 12-13 Access and Correction of Personal Information NZPRV-3 IPP 6-8 Access, Correction, Accuracy RIDTPPA-2 Consumer Rights (Access, Correction, Deletion, Portability, Opt-Out) TAIWAN-2 Consent, Notice, Sensitive Data URUGUAY-2 Data Subject Rights (ARCO + Habeas Data) Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected .
Other controls in Chapter 5: Software Query this from an agent The graph holds this control, the 90 it maps to, and the evidence behind each claim, over MCP and REST.