Control Framework
What is Control Framework?
A structured set of controls organized into domains and objectives that provides a systematic approach to managing specific types of risk.
Terms that appear alongside control framework
Each of these is named in at least one of the same controls as control framework. The number is how many controls name both.
- security framework 2 shared controls
- nist 2 shared controls
- audit 2 shared controls
- authentication 2 shared controls
- access control 2 shared controls
- information security 2 shared controls
- cybersecurity 2 shared controls
- internal control 2 shared controls
Frameworks that govern control framework
What the standards actually require on control framework
Requirements naming control framework across 6 standards, quoted from the control text.
The risk assessment of each in-scope information asset is guided by appropriate security standards or IT control frameworks.
rbi-cybersecurity-framework-for-banks::41 · Para 41: asset risk assessment guided by security standards or control frameworks →Procedures keep policies and the other parts of the control framework complied with and their performance measured; consequences are enforced when compliance fails or performance falls short;
cobit-2019::APO01.09 · APO01.09 Define and communicate policies and procedures →When reviewing how the entity has performed, the organization takes risk into account. Reviews of performance against targets and tolerances are integrated into business practices, asking whether the entity is performing as expected, what risks are occurring t...
coso-enterprise-risk-management-erm-framework-2017::P16 · Principle 16: Reviews Risk and Performance →Entities under DORA Article 16(1) must have an internal governance and control framework for effective and prudent ICT risk management.
dora-rts-on-ict-risk-management-framework-commission-delegated-regulation-eu-2024-1774::28 · Article 28: Governance and organisation (simplified framework) →The bank has an internal control framework, the responsibility of the board and senior management, that keeps an effectively controlled and tested operating environment for its risk profile with a forward-looking view (including climate-related and emerging ri...
basel-core-principles-for-effective-banking-supervision-2024::P26 · Principle 26: internal control and audit →Operate an information security programme that covers all the domains of the control framework rather than a chosen subset.
CCM-GRC-05 · Information Security Program →Questions people ask about control framework
What is Control Framework?
Why is Control Framework important for compliance?
Which compliance frameworks address Control Framework?
Where can I learn more about Control Framework?
See how Control Framework applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.