Compliance Map

Overview Authority Documents
Citations
Search All All Groups CIS Controls ® V8 (171)CIS Controls® V7.1 (191)CISA Security Requirements for Restricted Transactions (26)CSA Cloud Controls Matrix (CCM), V4 (197)EU GMP Annex 11 (40)FDA 21 CFR Part 11 (44)HIPAA Security Rule (64)ICFR (51)ISO IEC 27001 (93)NIST CSF v2.0 (134)NIST PF 1.0 (121)
Policies
Control Objectives
Search All All Categories Uncategorized (276)Mapping (20)Acquisition or sale of facilities, technology, and services (19)Application Security (1)Applications (67)Applications/Network (3)Audits and risk management (125)Data (50)Deprecated (2)Devices (55)Encryption (2)Governance, Risk and Compliance (17)Host and Endpoint Security (1)Human Resources management (56)Identity and Access (13)Leadership and high level objectives (50)Logging, Monitoring, Threat Detection, and Analytics (6)Monitoring and measurement (116)Network (84)Network and Infrastructure (3)Operational management (172)Periodic Review (17)Physical Security (10)Physical and environmental protection (80)Privacy protection for information and data (43)Records management (61)Roche Security Standards (4)Root (1)SAP Application Security (12)System hardening through configuration management (131)Systems continuity (74)Systems design, build, and implementation (95)Technical security (197)Third Party and supply chain oversight (46)Users (62)Vulnerability and Configuration Analysis (11)
Processes
Search All All Domains System Lifecycle Management (18)Risk Management (2)AI/ML Lifecycle Management (16)Change & Configuration Management (10)Incident & Problem Management (5)Deviation & CAPA (3)Quality Management System (8)Vendor & Third-Party Management (1)Documentation & Records (2)Information Security (4)
Roles
Search All All Domains Cross-domain (44)System Lifecycle Management (15)Risk Management (1)AI/ML Lifecycle Management (5)Change & Configuration Management (11)Incident & Problem Management (13)Deviation & CAPA (3)Quality Management System (23)Vendor & Third-Party Management (2)Documentation & Records (9)Information Security (6)
Artifacts
Search All All Domains System Lifecycle Management (74)Risk Management (7)AI/ML Lifecycle Management (18)Change & Configuration Management (19)Incident & Problem Management (8)Deviation & CAPA (6)Quality Management System (21)Vendor & Third-Party Management (2)Documentation & Records (21)Information Security (5)
Documentation
Search All All Types Agreement (2)Governance (1)Guideline (5)Other (2)Policy (3)Reference (2)Requirement (1)SOP (19)Supporting Document (4)Work Instruction (3)

Citations

CIS Controls ® V8
171 citations
CIS Controls® V7.1
191 citations
CISA Security Requirements for Restricted Transactions
26 citations
CSA Cloud Controls Matrix (CCM), V4
197 citations
EU GMP Annex 11
40 citations
FDA 21 CFR Part 11
44 citations
HIPAA Security Rule
64 citations
ICFR
51 citations
ISO IEC 27001
93 citations
NIST CSF v2.0
134 citations
NIST PF 1.0
121 citations
Graph Explorer