graphgrc

SCF - SEA-01 - Secure Engineering Principles

Mechanisms exist to facilitate the implementation of industry-recognized cybersecurity & data privacy practices in the specification, design, development, implementation and modification of systems and services.

Mapped framework controls

GDPR

ISO 27002

NIST 800-53

SOC 2

Control questions

Does the organization facilitate the implementation of industry-recognized cybersecurity & data privacy practices in the specification, design, development, implementation and modification of systems and services?