SIG (Shared Assessments): every control, and what you already have

31 controls 143 frameworks share controls with it International verified against its source document

Every control below is one this framework asks for. The right hand column counts how many other frameworks in our corpus carry the same control, which is the difference between doing this work once and doing it again for the next standard.

There is no implementation kit for this framework yet. The control list and the overlap above are free and complete.

What you already have

Frameworks whose controls overlap this one, most first. If you run any of them, the count is roughly what you have already evidenced.

If you run	Shared controls
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association)	4	measure it →
CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0	4	measure it →
FTC GLBA Safeguards Rule (16 CFR Part 314)	4	measure it →
IEC 62351	4	measure it →
ISO 27017	4	measure it →
ISO 27018	4	measure it →
ISO/IEC 27010:2015	4	measure it →
ISO/IEC 27011:2024	4	measure it →
ISO/IEC 27043:2015	4	measure it →
ISO/SAE 21434	4	measure it →
NIST SP 800-124 Revision 2	4	measure it →
NIST SP 800-190	4	measure it →

Every control

Code	Control	Also in
`SHAREASSESS-1`	Information Governance and Risk	98
`SHAREASSESS-2`	Access Control, Identity, Authentication	79
`SHAREASSESS-3`	Network Security, Endpoint, Data Protection	43
`SHAREASSESS-4`	Vulnerability Management, Patching, Application Security	61
`SHAREASSESS-5`	Incident Response, BCM, DR	0
`SHAREASSESS-6`	Third Party / Subcontractor Management	0
`SHAREASSESS-7`	Privacy, Compliance, GDPR Alignment	0
`SHAREASSESS-8`	Cloud, SaaS, Infrastructure	0
`SIG-A-01`	Risk Assessment and Treatment Program	0
`SIG-B-01`	Information Security Policy Suite	0
`SIG-C-01`	Organizational Security and Roles	0
`SIG-CORE-01`	SIG Core Coverage and Use	0
`SIG-D-01`	Asset and Information Management	0
`SIG-E-01`	Human Resources Security	0
`SIG-F-01`	Physical and Environmental Security	0
`SIG-G-01`	IT Operations Management	0
`SIG-H-01`	Access Control	0
`SIG-I-01`	Application Security	0
`SIG-J-01`	Cybersecurity Incident Management	0
`SIG-K-01`	Business Resiliency	0
`SIG-L-01`	Compliance and Operational Risk	0
`SIG-LITE-01`	SIG Lite Coverage and Use	0
`SIG-M-01`	End User Device Security	0
`SIG-N-01`	Network Security	0
`SIG-O-01`	Privacy	0
`SIG-P-01`	Threat Management	0
`SIG-Q-01`	Server Security	0
`SIG-R-01`	Cloud Hosting Services	0
`SIG-S-01`	Mobile Computing Security	0
`SIG-T-01`	Supply Chain Risk Management	0
`SIG-U-01`	Artificial Intelligence Risk Management	0

Tell me when SIG (Shared Assessments) files something new

One email when a public company newly discloses something this framework governs, naming the company and what our corpus says it puts in scope. Nothing else, and one click to stop.

What this page is

A control-level reference for SIG (Shared Assessments), drawn from our framework corpus. Control codes and titles are references to the standard, not reproductions of it. The overlap counts and the auditor artefacts are our own work and are the part you will not find elsewhere.

Measure this against what you already run · All frameworks · Today's edition