What Changed In This Release
- Added a new Evidence Request List (ERL) to help standardize naming for evidence artifacts, and wordsmithed the Risk Catalog for clearer understanding.
- Standardized nomenclature, for example "security program" became "cybersecurity program" and "sensitive data" became "sensitive/regulated data".
- Added mapping for 12 frameworks, including ISO 27001:2022, ISO 27017:2015, the California Privacy Rights Act (CPRA), C2M2 v2.1 and Shared Assessments SIG 2023. Removed 3 outdated mappings.
- Added 33 controls, including GOV-15 Operationalizing Cybersecurity & Privacy Practices (GOV-15.1 through GOV-15.5).
- Renamed 9 controls, wordsmithed 8 controls and 4 standards.
- Updated existing mappings for CIS v8, the FTC Act Part 314, ISO 27002:2013, NIST SP 800-53 R4 and R5, and IRS Publication 1075.
Did You Purchase An Older Version Of This Product?
Releases from before 2024 are significantly out of date. Existing customers are encouraged to repurchase the current version at 50% of the original product price.