prm-04-cybersecurity&dataprivacyinprojectmanagement.md

SCF - PRM-04 - Cybersecurity & Data Privacy In Project Management

Mechanisms exist to assess cybersecurity & data privacy controls in system project development to determine the extent to which the controls are implemented correctly, operating as intended and producing the desired outcome with respect to meeting the requirements.

Mapped framework controls

ISO 27002

• A.5.8

NIST 800-53

• CA-2

SOC 2

• CC3.1
• CC4.1
• CC5.2

Control questions

Does the organization assess cybersecurity & data privacy controls in system project development to determine the extent to which the controls are implemented correctly, operating as intended and producing the desired outcome with respect to meeting the requirements?