The Standards Inventory

Universal Standards (11)

S-01: Secure Configuration

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-02: Encryption

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-03: Password and Authentication

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-04: Network Security

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-05: Patch and Vulnerability Management

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-06: Access Control and Identity Management

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-07: Remote Access

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-09: Security Monitoring and Logging

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-10: Data Retention and Disposal

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-13: Server and Endpoint Management

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-19: Personnel Security

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

Common Standards (9)

S-08: Backup and Recovery

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-11: Cloud Computing Security

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-12: Mobile Device Security

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-14: Wireless Network Security

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-15: Change Management

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-16: Physical Security of IT Assets

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-17: Software Licensing and Installation

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-18: Email Security

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-21: Ransomware Response Procedures

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

Emerging Standards (4)

S-20: Zero Trust Architecture

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-22: IoT and Connected Device Security

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-23: Security Exception Management

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed

S-24: International Travel Security

Adoption Prevalence

Primary Owner

Applicability

Key Elements

Common Variations

Regulatory Drivers

Framework Alignment

Related Policies and Standards

Mistake to Avoid

Sources Reviewed