To ensure security expertise is applied to major initiatives, preventing security gaps and enabling informed decisions.
Define participation requirements; ensure security involvement; include in project governance; provide security expertise; review participation; address barriers.
| FRAMEWORK CODE | FRAMEWORK NAME & DETAILS | FAMILY / CATEGORY | VERSION | ACTION |
|---|---|---|---|---|
| IRDAI | IRDAI Information & Cyber Security Guidelines IRDAI information and cyber-security requirements... Clause: §1.6-13 – Functional Head/Business Owner; §1.6-3 – Chief Information Security Officer (CISO); §1.6-4 – Chief Technology Officer |
India
Guideline
|
vLatest | View → |
| RBI-CSF | RBI Cyber Security Framework / Master Directions RBI cyber-security requirements and directions set... Clause: Circular §5 – Identification/assessment of inherent cyber risks and controls; Circular §17 – Organisational arrangements |
India
Regulation
|
vLatest | View → |
| SEBI-CSCRF | SEBI Cyber Security & Cyber Resilience Framework SEBI’s Cybersecurity and Cyber Resilience Framewor... Clause: 1.4 GV.OV: Oversight |
India
Regulation
|
vLatest | View → |
| DORA | Digital Operational Resilience Act The EU Digital Operational Resilience Act establis... Clause: Article 5(2)(c) – Clear roles and responsibilities for all ICT-related functions and governance arrangements |
EU
Regulation
|
vCurrent | View → |
| ISO27002 | ISO/IEC 27002 ISO/IEC 27002 is a guidance standard containing a... Clause: 5.8 – Information security in project management |
ISO
Standard
|
v2022 | View → |
| PCI-DSS | PCI DSS PCI DSS is an industry security standard maintaine... Clause: 12.1.1 – An overall information security policy is: |
PCI
Standard
|
v4 | View → |
| COBIT2019 | COBIT COBIT is an enterprise governance and management f... Clause: 4.2 – Align, Plan and Organize (APO) > APO13 – Managed Security > APO13.01 – Establish and maintain an information security management system. |
COBIT
Governance Framework
|
v2019 | View → |
| ISO22301 | ISO/IEC 22301 ISO 22301 specifies requirements for a Business Co... Clause: 5.1 – Leadership and commitment; 5.3 – Roles, responsibilities and authorities |
ISO
Standard
|
v2019 | View → |
| NIST-CSF | NIST Cybersecurity Framework (CSF) The NIST Cybersecurity Framework provides high-lev... Clause: GV.RM – Risk Management Strategy | GV.RM-01 – Risk management objectives are established and agreed to by organizational stakeholders GV.RR – Roles, Responsibilities, and Authorities | GV.RR-02 – Roles, responsibilities, and authorities related to cybersecurity risk management are established, communicated, understood, and enforced GV.OV – Oversight | GV.OV-02 – The cybersecurity risk management strategy is reviewed and adjusted to ensure coverage of organizational requirements and risks |
NIST
Framework
|
v2 | View → |
| NIST80053 | NIST SP 800-53 NIST SP 800-53 Rev. 5 presents control families, i... Clause: 3.13 – PROGRAM MANAGEMENT; PM-7 – ENTERPRISE ARCHITECTURE |
NIST
Control Catalog
|
vRev. 5 | View → |
| SOC2 | SOC 2 Trust Services Criteria SOC 2 is an independent examination and reporting... Clause: CC1.3 – Control Environment – COSO Principle 3: Management establishes, with board oversight, structures, reporting lines, and appropriate authorities and responsibilities in the pursuit of objectives. CC3.2 – Risk Assessment – COSO Principle 7: The entity identifies risks to the achievement of its objectives across the entity and analyzes risks as a basis for determining how the risks should be managed. CC5.1 – Control Activities – COSO Principle 10: The entity selects and develops control activities that contribute to the mitigation of risks to the achievement of objectives to acceptable levels. |
AICPA
Audit Framework
|
vLatest | View → |