What Changed In This Release
- All policies were reviewed and updated in light of Executive Order 14028 and NIST SP 800-160 vol 2 rev 1, reflecting the US Government's focus on software supply chain security and resiliency.
- Added mapping for 14 laws, regulations and frameworks, including the Shared Assessments SIG, ISO 27002:2022, NIST SP 800-171A, NIST SP 800-218 v1.1, the Colorado Privacy Act, TX-RAMP and Australia CPS 234.
- Added MT-11 Statutory / Regulatory / Contractual Obligation to the threat catalog.
- Added 5 controls: CLD-06.1 Customer Responsibility Matrix (CRM), IAC-03.5 Acceptance of External Authenticators, PRI-03.6 Proxy Consent, PRI-04.4 Acquired Personal Data (PD) and TDA-20.3 Software Escrow.
- Renamed DCH-22.3 and TDA-06.3, and wordsmithed AST-02.7 and HRS-09.3.
- Updated mapping for CMMC 2.0 (Levels 1-3), IEC 62443-4-2 and CIS v8.
Did You Purchase An Older Version Of This Product?
Releases from before 2024 are significantly out of date. Existing customers are encouraged to repurchase the current version at 50% of the original product price.