>myctrl.tools
Preferences
Under active development — Content is continuously updated and improved
Compare

RSK-03—Risk Identification

Weight: 9

>Control Description

Mechanisms exist to identify and document risks, both internal and external.

>Cross-Framework Mappings

NIST CSF 2.0

ID

ISO 27001:2022

6.1.2(c)
Compare
6.1.2(c)(1)
Compare
6.1.2(c)(2)
Compare

PCI DSS v4.0.1

12.3.1
Compare
12.3.2
Compare
12.3.3
Compare
12.3.4
Compare

SOC 2 TSC

A1.2
Compare
CC3.2
Compare
CC3.4
Compare
CC7.2
Compare
CC9.1
Compare

NIST AI RMF

MANAGE-1.0
MANAGE-2.3

EU AI Act

Art. 9(2)(c)
Compare

Canada ITSP 10.171

03.11.01.A
Compare

OSFI B-13

1.3
Compare
3.1.1
Compare

Australia ISM

ISM-1526
Compare

EU AI Act (Detailed)

Article 9.2(c)
Compare

EU DORA

Article 8.2
Compare

Saudi Arabia IoT Guidelines

1-1-2
Compare
1-4-1
Compare
1-4-5
Compare

Spain ENS

Article 3.2
Compare

UK DEF STAN 05-138

1200.0
Compare

SOC 2 TSC (Detailed)

A1.2
Compare
A1.2-POF1
Compare
CC3.2
Compare
CC3.2-POF1
Compare
CC3.2-POF2
Compare
CC3.2-POF6
Compare
CC3.4-POF1
Compare
CC3.4-POF2
Compare
CC3.4-POF3
Compare
CC3.4-POF4
Compare
CC3.4-POF5
Compare
CC7.2
Compare
CC9.1
Compare

ISO 27001:2022 (Detailed)

6.1.2(c)
Compare
6.1.2(c)(1)
Compare
6.1.2(c)(2)
Compare

ISO 27002:2022

5.8
Compare

ISO 27701

6.1.2(c)
Compare

ISO 42001:2023 (Detailed)

6.1.2(c)
Compare

NIST SP 800-171 Rev 3

03.11.01.a
Compare

NIST SP 800-171A Rev 3

A.03.11.01.a
Compare

NIST AI 600-1

GV-4.2-002
Compare

TISAX

1.4.1
Compare

FCA CRM

609.930(a)
Compare
609.930(c)(1)(i)
Compare

GLBA (16 CFR 314)

314.4(c)(2)
Compare

HIPAA Simplification 2013

§ 164.306(b)(2)(iv)
Compare

SEC Cybersecurity Rule

17 CFR 229.106(b)(1)
Compare

NY DFS 23 NYCRR 500

500.2(b)(1)
Compare
500.9(b)(1)
Compare

Ask AI

Configure your API key to use AI features.