International (ISO/IEC)

ISO/IEC 23837

36 controls. 162 other frameworks in our corpus share controls with it. Here is all of it, and how much of it you are already doing.

Page built . This page is derived from the framework corpus, which changes when the corpus is extended rather than daily.

36 controls 162 frameworks share controls with it International (ISO/IEC) held in the corpus

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you runShared controls
3GPP 5G Security Architecture (TS 33.501)3measure it →
ASD Strategies to Mitigate Cyber Security Incidents3measure it →
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)3measure it →
Belgium CyberFundamentals3measure it →
BSI IT-Grundschutz3measure it →
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.03measure it →
FDA 21 CFR Part 113measure it →
FedRAMP Rev 53measure it →
FIDO2 / WebAuthn3measure it →
FISMA3measure it →
FTC GLBA Safeguards Rule (16 CFR Part 314)3measure it →
Ghana Cybersecurity Act3measure it →

Every control

CodeControlAlso in
23837-1.4.1QKD module structural analysis0
23837-1.4.2Classification of QKD protocols0
23837-1.4.3Security problems analysis0
23837-1.5.1Network component SFRs overview0
23837-1.5.2Cryptographic module requirements137
23837-1.5.3Network device testing requirements137
23837-1.6.1Quantum optical component SFRs0
23837-1.6.2Photon source security0
23837-1.6.3Quantum channel security0
23837-1.7.1Protocol implementation SFRs0
23837-1.7.2Key distillation process security0
23837-1.7.3Authentication and classical post-processing91
23837-2.1Evaluation activities for protocol implementation0
23837-2.2Evaluation activities for quantum optical components0
23837-2.3Evaluation activities for conventional network components0
23837-2.4Evaluation assurance levels0
23837-CHANChannel Integrity and Authentication0
23837-DEVDevelopment Process Assurance0
23837-ECError Correction Parameters0
23837-GUIGuidance Documentation0
23837-INCIncident Handling0
23837-KEYMGTOutput Key Management0
23837-LCMLife-cycle Management0
23837-MONOperational Monitoring0
23837-NETNetwork Integration0
23837-PAPrivacy Amplification0
23837-PHYPhysical Security of Modules0
23837-PROOFSecurity Proof Mapping0
23837-RNGRandom Number Generation0
23837-SARSecurity Assurance Requirements0
23837-SFRSecurity Functional Requirements0
23837-SIDESide-channel Resistance0
23837-SRCSource and Detector Characterisation0
23837-TESTTest Methods and Evaluation0
23837-TOETarget of Evaluation Definition0
23837-VULNVulnerability Analysis0

Tell me when ISO/IEC 23837 files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What an auditor will ask you to produce

The artefacts named on the failure modes this framework speaks to.

  • Scope statement
  • Privacy risk assessment
  • Definitions glossary
  • Reference catalog
  • Site list
  • Process map

How programmes fail on this

Failure modes named by this framework and others. Each opens the full record.

What this page is

A control-level reference for ISO/IEC 23837, drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition