Mandatory Reporting
What is Mandatory Reporting?
Legal obligations requiring organizations or individuals to report specific events such as data breaches, suspicious activities, or safety incidents to authorities.
Terms that appear alongside mandatory reporting
Each of these is named in at least one of the same controls as mandatory reporting. The number is how many controls name both.
- incident response 3 shared controls
- incident response team 2 shared controls
- crisis management 2 shared controls
- nist 2 shared controls
- ransomware 2 shared controls
- compliance 2 shared controls
- cyber incident 2 shared controls
Frameworks that govern mandatory reporting
What the standards actually require on mandatory reporting
Requirements naming mandatory reporting across 6 standards, quoted from the control text.
In connection with a consumer credit transaction secured by the principal dwelling, no covered person may directly or indirectly cause the value assigned to the property to be based on any factor other than the independent judgment of a person who prepares val...
truth-in-lending-act-tila::1026.42 · Appraiser independence: prohibited coercion and mandatory reporting →Per UK Building Safety Act 2022: Resident Engagement and Mandatory Reporting. Source-grounded summary control covering authoritative framework structure + key obligations. See manifest + log for detailed mapping.
UKBSA-4 · Resident Engagement and Mandatory Reporting →Evaluate the physical and cyber security of dealings with service providers, vendors and other outside parties, public authorities included, and consider contracts setting cyber requirements, for new and existing agreements, using recognised standards (such as...
BIMCO-1.8 · Relationship with vendors and other external parties →Effective involvement of, communication with and reporting to stakeholders are put in place, including mechanisms to keep information complete and of good quality, oversight of mandatory reporting, and a strategy for communicating with stakeholders.
cobit-2019::EDM05.02 · EDM05.02 Direct stakeholder engagement, communication and reporting →Psychologists avoid vexatious notifications and baseless malicious claims and make notifications and claims only out of genuine concern for public safety.
psychology-board-of-australia-code-of-conduct-for-psychologists-2025::8.2 · 8.2 Vexatious notifications or malicious claims →For patients with additional needs (such as children and young people, older people, people with physical or cognitive disability, people with impaired decision-making capacity and people at greater risk, such as those facing family violence), good practice me...
ahpra-shared-code-of-conduct-2022::4.3 · 4.3 Children, young people and other patients who may have additional needs →Questions people ask about mandatory reporting
What is Mandatory Reporting?
Why is Mandatory Reporting important for compliance?
Which compliance frameworks address Mandatory Reporting?
Where can I learn more about Mandatory Reporting?
See how Mandatory Reporting applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.