iao-01-informationassuranceiaoperations.md

SCF - IAO-01 - Information Assurance (IA) Operations

Mechanisms exist to facilitate the implementation of cybersecurity & data privacy assessment and authorization controls.

Mapped framework controls

GDPR

• Art 32.1
• Art 32.2
• Art 32.3

ISO 27002

• A.5.21

NIST 800-53

• CA-1

SOC 2

• CC4.1

Control questions

Does the organization facilitate the implementation of cybersecurity & data privacy assessment and authorization controls?