Proposed coverage
Covering artifact
Target requirement
Composition paths
Relation strength
Art. 28
Processor contracts
- ISO 27001:2022 A.5.20 — Addressing information security within supplier agreements Supplier and third-party security Related
- ISO 27001:2022 A.5.22 — Monitoring, review and change management of supplier services Supplier and third-party security Related
Related
Art. 28
Processor contracts
- ISO 27001:2022 A.5.19 — Information security in supplier relationships Supplier and third-party security Related
- ISO 27001:2022 A.5.22 — Monitoring, review and change management of supplier services Supplier and third-party security Related
Related
Art. 28
Processor contracts
- NIS2 CIR 2024/2690 Annex 5 — Supply chain policy and supplier register Supplier and third-party security Related
- NIS2 Netherlands (Cbw, 2026) Cyberbeveiligingsbesluit art. 10 — Supply chain security Supplier and third-party security Related
Related
Art. 32
Security of processing
- ISO 27001:2022 A.5.34 — Privacy and protection of PII Security of personal data processing Partial
Partial
Art. 32
Security of processing
- ISO 27001:2022 A.8.3 — Information access restriction Access control Related
- NIS2 CIR 2024/2690 Annex 11 — Access rights, privileged accounts and authentication Access control Related
Related
Art. 32
Security of processing
- ISO 27001:2022 A.8.3 — Information access restriction Access control Related
- NIS2 Netherlands (Cbw, 2026) Cyberbeveiligingsbesluit art. 15 — Access policy Access control Related
Related
Art. 32
Security of processing
- ISO 27001:2022 A.8.3 — Information access restriction Access control Related
Related
Art. 32
Security of processing
- NIS2 CIR 2024/2690 Annex 9 — Cryptography policy and key management Cryptography Related
Related
Art. 32
Security of processing
- ISO 27001:2022 A.8.3 — Information access restriction Access control Related
Related
Art. 32
Security of processing
- ISO 27001:2022 A.5.15 — Access control Access control Related
- NIS2 Netherlands (Cbw, 2026) Cyberbeveiligingsbesluit art. 15 — Access policy Access control Related
Related
Art. 32
Security of processing
- ISO 27001:2022 A.8.4 — Access to source code Access control Related
Related
Art. 33
Notification of a personal data breach to the supervisory authority
- NIS2 Netherlands (Cbw, 2026) Cyberbeveiligingswet art. 25 — Duty to report significant incidents Security and privacy breach notification Equivalent
Equivalent
Art. 33
Notification of a personal data breach to the supervisory authority
- NIS2 Netherlands (Cbw, 2026) Cyberbeveiligingswet art. 25 — Duty to report significant incidents Security and privacy breach notification Equivalent
Equivalent
Art. 34
Communication of a personal data breach to the data subject
- NIS2 Netherlands (Cbw, 2026) Cyberbeveiligingswet art. 25 — Duty to report significant incidents Security and privacy breach notification Equivalent
Equivalent
Art. 34
Communication of a personal data breach to the data subject
- NIS2 Netherlands (Cbw, 2026) Cyberbeveiligingswet art. 25 — Duty to report significant incidents Security and privacy breach notification Equivalent
Equivalent
Art. 5(1)(a)
Lawfulness, fairness and transparency
- ISO 27001:2022 A.5.34 — Privacy and protection of PII Data protection principles Related
Related
Art. 5(1)(b)
Purpose limitation
- ISO 27001:2022 A.5.34 — Privacy and protection of PII Data protection principles Related
Related
Art. 5(1)(f)
Integrity and confidentiality
- ISO 27001:2022 A.8.3 — Information access restriction Access control Related
- NIS2 CIR 2024/2690 Annex 11 — Access rights, privileged accounts and authentication Access control Related
Related
Art. 5(1)(f)
Integrity and confidentiality
- ISO 27001:2022 A.8.3 — Information access restriction Access control Related
- NIS2 Netherlands (Cbw, 2026) Cyberbeveiligingsbesluit art. 15 — Access policy Access control Related
Related
Art. 5(1)(f)
Integrity and confidentiality
- ISO 27001:2022 A.8.3 — Information access restriction Access control Related
Related
Art. 5(1)(f)
Integrity and confidentiality
- ISO 27001:2022 A.8.3 — Information access restriction Access control Related
Related
Art. 5(1)(f)
Integrity and confidentiality
- ISO 27001:2022 A.5.15 — Access control Access control Related
- NIS2 Netherlands (Cbw, 2026) Cyberbeveiligingsbesluit art. 15 — Access policy Access control Related
Related
Art. 5(1)(f)
Integrity and confidentiality
- ISO 27001:2022 A.8.4 — Access to source code Access control Related
Related
23 total
Page 1 of 1