127 indexed

COMPLIANCECompliance controls

127 controls across 14 compliance frameworks, grouped by framework. For cross-framework Jaccard overlap see /explore/crosswalk. Authored by Adam Lundqvist.

5 in CRA · 127 total

IDTitleSummary
CRA-AnnexI-1Essential cybersecurity properties — Confidentiality
CRApentest:high
Products with digital elements must protect the confidentiality of stored, transmitted, or otherwise processed data, personal or other, by encrypting relevant …
CRA-AnnexI-2Essential cybersecurity properties — Integrity
CRApentest:high
Products with digital elements must protect the integrity of stored, transmitted, or otherwise processed data, commands, programs and configuration against any…
CRA-AnnexI-3Essential cybersecurity properties — Vulnerability handling
CRApentest:high
Manufacturers must identify and document vulnerabilities and components contained in products, including by drawing up an SBOM, address and remediate vulnerabi…
CRA-Art13Essential cybersecurity requirements for products with digital elements
CRApentest:high
Products with digital elements must be designed, developed and produced in such a way that they ensure an appropriate level of cybersecurity based on the risks…
CRA-Art14Reporting obligations of manufacturers
CRApentest:high
Manufacturers must notify ENISA and the competent CSIRT designated as coordinator without undue delay and in any event within 24 hours of becoming aware of any…
Sourced from EUR-Lex (DORA, NIS2, GDPR, AI Act, CRA), ISO, NIST, OWASP, CIS, PCI SSC, ENISA TIBER-EU. Curated by Adam Lundqvist, Founder at SQUR.
Compliance controls — by framework | SQUR Knowledge Base