GRCLibrary.ai

Matrix

Domains by instrument, every column

Reference page for the large matrix table of baseline 1.7.0: 10 domains by 20 instruments, wider than the page, in a box that scrolls both ways with the header row and the domain column pinned. It shows column widths in rem, wrapping cells, the capped pinned column, striped rows with a row and column highlight, empty cells, column toggles, heat shading with its legend, rotated headers and column groups. The instrument names and organizations are real; the groups, identifiers (EX. followed by row and column), counts and shading are illustrative sample data, not references into any instrument.

Shading

  • 1 document
  • 2 documents
  • 3 to 4
  • 5 to 6
  • 7 or more

Matrix

Sample matrix: 10 domains by 20 instruments, in 4 groups
Domain27001ISO/IECSecurity27002ISO/IECSecurity27017ISO/IECSecurityCSFNISTSecuritySP 800-53NISTSecurityCIS ControlsCISSecuritySOC 2AICPASecurityPCI DSSPCI SSCSecurityCCM (Cloud Controls Matrix)CSASecurityCE (Cyber Essentials)UK NCSCSecurityGDPREUPrivacy27701ISO/IECPrivacyCCPACaliforniaPrivacyHIPAAUS HHSPrivacyAI RMFNISTAI42001ISO/IECAIAI ActEUAIDORAEUResilienceNIS2EUResilience22301ISOResilience
GovernanceEX.1.1 EX.1.1a3 sample documentsnoneEX.1.3 EX.1.3a EX.1.3b4 sample documentsEX.1.4 EX.1.4a EX.1.4b4 sample documentsEX.1.5 EX.1.5a4 sample documentsEX.1.62 sample documentsnoneEX.1.83 sample documentsnonenoneEX.1.111 sample documentsnonenoneEX.1.143 sample documents3 sample documents2 sample documentsnone1 sample documents9 sample documents1 sample documents
Identity and access managementEX.2.1 EX.2.1a4 sample documentsnoneEX.2.3 EX.2.3a3 sample documentsEX.2.4 EX.2.4a2 sample documentsnoneEX.2.6 EX.2.6a4 sample documentsnoneEX.2.8 EX.2.8a2 sample documentsEX.2.93 sample documentsEX.2.101 sample documentsEX.2.11 EX.2.11a4 sample documentsEX.2.122 sample documentsEX.2.13 EX.2.13a EX.2.13b4 sample documentsnonenone1 sample documents1 sample documents1 sample documents5 sample documentsnone
Asset managementEX.3.1 EX.3.1a EX.3.1b4 sample documentsEX.3.2 EX.3.2a4 sample documentsnoneEX.3.4 EX.3.4a4 sample documentsnonenonenoneEX.3.8 EX.3.8a3 sample documentsEX.3.93 sample documentsEX.3.101 sample documentsEX.3.11 EX.3.11a3 sample documentsnonenoneEX.3.14 EX.3.14a2 sample documentsnone1 sample documentsnone6 sample documents9 sample documentsnone
Third-party and supply chain riskEX.4.12 sample documentsEX.4.2 EX.4.2a EX.4.2b5 sample documentsEX.4.3 EX.4.3a EX.4.3b4 sample documentsEX.4.4 EX.4.4a EX.4.4b4 sample documentsEX.4.5 EX.4.5a4 sample documentsEX.4.6 EX.4.6a EX.4.6b3 sample documentsEX.4.7 EX.4.7a2 sample documentsEX.4.81 sample documentsnonenoneEX.4.111 sample documentsEX.4.12 EX.4.12a EX.4.12b3 sample documentsEX.4.13 EX.4.13a EX.4.13b5 sample documentsEX.4.14 EX.4.14a3 sample documents4 sample documents3 sample documents5 sample documents2 sample documents3 sample documents1 sample documents
Incident responsenoneEX.5.2 EX.5.2a3 sample documentsEX.5.31 sample documentsEX.5.4 EX.5.4a EX.5.4b4 sample documentsEX.5.5 EX.5.5a3 sample documentsEX.5.61 sample documentsnonenoneEX.5.9 EX.5.9a EX.5.9b3 sample documentsEX.5.101 sample documentsEX.5.11 EX.5.11a3 sample documentsnoneEX.5.132 sample documentsEX.5.14 EX.5.14a3 sample documents3 sample documents2 sample documentsnone1 sample documents3 sample documents2 sample documents
Business continuityEX.6.1 EX.6.1a EX.6.1b5 sample documentsnoneEX.6.32 sample documentsEX.6.4 EX.6.4a EX.6.4b5 sample documentsnoneEX.6.6 EX.6.6a EX.6.6b3 sample documentsEX.6.7 EX.6.7a2 sample documentsEX.6.82 sample documentsEX.6.9 EX.6.9a EX.6.9b3 sample documentsnoneEX.6.111 sample documentsEX.6.12 EX.6.12a4 sample documentsEX.6.13 EX.6.13a EX.6.13b3 sample documentsEX.6.14 EX.6.14a EX.6.14b4 sample documents5 sample documents1 sample documentsnone9 sample documentsnone1 sample documents
Privacy and data protectionEX.7.1 EX.7.1a EX.7.1b3 sample documentsEX.7.22 sample documentsEX.7.3 EX.7.3a EX.7.3b5 sample documentsEX.7.4 EX.7.4a2 sample documentsEX.7.52 sample documentsEX.7.61 sample documentsEX.7.71 sample documentsnoneEX.7.9 EX.7.9a EX.7.9b5 sample documentsnoneEX.7.11 EX.7.11a EX.7.11b5 sample documentsEX.7.121 sample documentsEX.7.13 EX.7.13a EX.7.13b5 sample documentsEX.7.14 EX.7.14a EX.7.14b4 sample documents8 sample documentsnone2 sample documents6 sample documents6 sample documents3 sample documents
Secure developmentnoneEX.8.2 EX.8.2a2 sample documentsnonenoneEX.8.5 EX.8.5a EX.8.5b5 sample documentsEX.8.63 sample documentsnonenoneEX.8.9 EX.8.9a3 sample documentsEX.8.103 sample documentsEX.8.112 sample documentsEX.8.12 EX.8.12a EX.8.12b5 sample documentsEX.8.13 EX.8.13a EX.8.13b4 sample documentsEX.8.14 EX.8.14a EX.8.14b4 sample documents3 sample documents1 sample documents3 sample documents8 sample documents7 sample documents8 sample documents
Workforce and trainingEX.9.1 EX.9.1a4 sample documentsEX.9.2 EX.9.2a EX.9.2b5 sample documentsEX.9.3 EX.9.3a EX.9.3b5 sample documentsEX.9.42 sample documentsEX.9.5 EX.9.5a EX.9.5b3 sample documentsnonenoneEX.9.8 EX.9.8a EX.9.8b4 sample documentsnoneEX.9.10 EX.9.10a4 sample documentsEX.9.111 sample documentsEX.9.123 sample documentsEX.9.13 EX.9.13a4 sample documentsEX.9.14 EX.9.14a4 sample documentsnone6 sample documents9 sample documents6 sample documents2 sample documents3 sample documents
AI systemsnoneEX.10.21 sample documentsEX.10.3 EX.10.3a3 sample documentsEX.10.43 sample documentsEX.10.51 sample documentsnoneEX.10.73 sample documentsEX.10.8 EX.10.8a4 sample documentsEX.10.9 EX.10.9a EX.10.9b5 sample documentsnonenoneEX.10.12 EX.10.12a4 sample documentsEX.10.13 EX.10.13a EX.10.13b4 sample documentsEX.10.14 EX.10.14a2 sample documents1 sample documents8 sample documents6 sample documentsnone2 sample documents6 sample documents