Supports voice and video authentication, encryption, access control, session protection, monitoring and incident management by ensuring that voice & video authentication is governed and implemented consistently, reducing unauthorized access, network attack exposure, service disruption, and security control gaps.
Document the required control objective and scope; assign an accountable owner; define approved standards and configurations; implement the control across applicable network environments; integrate it with monitoring and change management; retain evidence; and review effectiveness periodically. For voice & video authentication, require strong authentication for the relevant network access or communication.
| FRAMEWORK CODE | FRAMEWORK NAME & DETAILS | FAMILY / CATEGORY | VERSION | ACTION |
|---|---|---|---|---|
| IRDAI | IRDAI Information & Cyber Security Guidelines IRDAI information and cyber-security requirements... Clause: §2.11-3.3 – Network Management |
India
Guideline
|
vLatest | View → |
| RBI-CSF | RBI Cyber Security Framework / Master Directions RBI cyber-security requirements and directions set... Clause: 8) User Access Control / Management – 8.1 Secure access with protection of data at rest and in transit |
India
Regulation
|
vLatest | View → |
| SEBI-CSCRF | SEBI Cyber Security & Cyber Resilience Framework SEBI’s Cybersecurity and Cyber Resilience Framewor... Clause: 3.4 PR.IP: Information Protection Processes and Procedures |
India
Regulation
|
vLatest | View → |
| DORA | Digital Operational Resilience Act The EU Digital Operational Resilience Act establis... Clause: Article 9(3) – ICT solutions/processes for secure data transfer and prevention of loss, unauthorised access and data compromise Article 9(4)(d) – Strong authentication, cryptographic keys and encryption |
EU
Regulation
|
vCurrent | View → |
| NIS2 | NIS2 Directive The NIS2 Directive establishes EU-wide cybersecuri... Clause: Article 21(2)(j) – MFA/continuous authentication, secured voice/video/text communications and secured emergency communications |
EU
Directive
|
vCurrent | View → |
| PCI-DSS | PCI DSS PCI DSS is an industry security standard maintaine... Clause: 1.2.1 – Configuration standards for NSC rulesets are:; 1.2.2 – All changes to network connections and to; 1.2.3 – An accurate network diagram(s) is maintained; 1.2.4 – An accurate data-flow diagram(s) is |
PCI
Standard
|
v4 | View → |
| COBIT2019 | COBIT COBIT is an enterprise governance and management f... Clause: 4.4 – Deliver, Service and Support (DSS) > DSS05 – Managed Security Services > DSS05.04 – Manage user identity and logical access. |
COBIT
Governance Framework
|
v2019 | View → |
| NIST-CSF | NIST Cybersecurity Framework (CSF) The NIST Cybersecurity Framework provides high-lev... Clause: PR.IR – Technology Infrastructure Resilience | PR.IR-01 – Networks and environments are protected from unauthorized logical access and usage DE.CM – Continuous Monitoring | DE.CM-01 – Networks and network services are monitored to find potentially adverse events |
NIST
Framework
|
v2 | View → |
| NIST80053 | NIST SP 800-53 NIST SP 800-53 Rev. 5 presents control families, i... Clause: 3.18 – SYSTEM AND COMMUNICATIONS PROTECTION; SC-19 – VOICE OVER INTERNET PROTOCOL |
NIST
Control Catalog
|
vRev. 5 | View → |
| GDPR | General Data Protection Regulation (GDPR) The General Data Protection Regulation is a bindin... Clause: Article 32(1)(b) – Confidentiality, integrity, availability and access resilience; Article 29 – Processing under the authority of the controller or processor |
EU
Regulation
|
vCurrent | View → |
| NPCI-ISR | NPCI Information Security Requirements NPCI information-security requirements define cont... Clause: Security Measures / Controls; Network Security |
India
Standard
|
vLatest | View → |
| SOC2 | SOC 2 Trust Services Criteria SOC 2 is an independent examination and reporting... Clause: CC6.7 – Logical and Physical Access Controls – The entity restricts the transmission, movement, and removal of information to authorized internal and external users and processes, and protects it during transmission, movement, or removal to meet the entity’s objectives. CC6.2 – Logical and Physical Access Controls – Prior to issuing system credentials and granting system access, the entity registers and authorizes new internal and external users whose access is administered by the entity. For those users whose access is administered by the entity, user system credentials are removed when user access is no longer authorized. CC6.1 – Logical and Physical Access Controls – The entity implements logical access security software, infrastructure, and architectures over protected information assets to protect them from security events to meet the entity's objectives. |
AICPA
Audit Framework
|
vLatest | View → |