Under active development Content is continuously updated and improved

PRM-02Cybersecurity & Data Protection Resource Management

Weight: 8

>Control Description

Mechanisms exist to address all capital planning and investment requests, including the resources needed to implement the cybersecurity and data protection programs and document all exceptions to this requirement.

>Cross-Framework Mappings

NIST SP 800-53 r5

NIST CSF 2.0

SOC 2 TSC

NIST AI RMF

OSFI B-13

Australia ISM

SOC 2 TSC (Detailed)

ISO 27001:2022 (Detailed)

ISO 27002:2022

ISO 27701

ISO 42001:2023 (Detailed)

NAIC Model Law 668

NIST SP 800-161

Data Privacy Management Principles

NY DFS 23 NYCRR 500

Ask AI

Configure your API key to use AI features.