Under active development Content is continuously updated and improved · Last updated Feb 18, 2026, 2:55 AM UTC

2301.02301.0

>Control Description

The Supplier shall have a good understanding and classification of the data important to the operation of Functions and protection of Data, including where it is stored, where it travels, the application of protective markings to media. The Supplier shall understand how unauthorised access, modification or availability of data would adversely impact the organisation. This shall apply to data released to third parties including those important to the operation of Functions and protection of all Data.

>Cross-Framework Mappings

Ask AI

Configure your API key to use AI features.