Common Controls Hub®

Unified Compliance wishes you a joyful holiday season filled with relaxation, family, and friends!🎁 UC December Newsletter: Simplifying Compliance, Celebrating the Season! 🎄 In this holiday edition, discover: How to Say Goodbye to the Stress of Framework Updates The latest Partner Spotlight: MetricStream Expert insights on Navigating Today’s Regulatory Landscape Highlights from SWARM: A Virtual Human + AI Symposium featuring global case studies What Unified Compliance University has to offer this season The most important Authority Documents: New, Upcoming, and Trending Let’s wrap up the year with clarity and momentum! Wishing you a wonderful holiday season and a prosperous New Year! https://hubs.la/Q02_DHWL0

Unified Compliance’s recently mapped bi-monthly Authority Documents have been added to the Common Control’s Hub for compliance professionals. https://hubs.la/Q02_bDWz0 Available are: ADs 3964, 3967, 3999, 4000, 4010, 4011, 4013, 4014, and 4018. Each AD topic can be reviewed below: 3964: Directive 2006/43/EC of the European Parliament and of the Council of 17 May 2006 on statutory audits of annual accounts and consolidated accounts, amending Council Directives 78/660/EEC and 83/349/EEC and repealing Council Directive 84/253/EEC https://hubs.la/Q02_bLXd0 3967: Cloud Computing Compliance Criteria Catalogue – C5:2020 https://hubs.la/Q02_bJxK0 3999: Essential Eight Maturity Model, Maturity Level Three https://hubs.la/Q02_bLZ40 4000: Essential Eight Maturity Model, Maturity Level Two https://hubs.la/Q02_bymv0 4010: COMMISSION DELEGATED REGULATION (EU) …/... of 24.10.2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards on harmonization of conditions enabling the conduct of the oversight activities (Draft) https://hubs.la/Q02_bx710 4011: COMMISSION DELEGATED REGULATION (EU) …/... of 23.10.2024 supplementing Regulation (EU) 2022/2554 of the European Parliament and of the Council with regard to regulatory technical standards specifying the content and time limits for the initial notification of, and intermediate and final report on, major ICTrelated incidents, and the content of the voluntary notification for significant cyber threats (Draft) https://hubs.la/Q02_bFt20 4013: JC 2024 34, Final Report Joint Guidelines on the estimation of aggregated annual costs and losses caused by major ICT-related incidents under Regulation (EU) 2022/2554 https://hubs.la/Q02_bFt30 4014: JC 2024 54, Final Report Draft regulatory technical standard on the harmonization of conditions enabling the conduct of the oversight activities under Article 41(1)(c) of Regulation (EU) 2022/2554 https://hubs.la/Q02_bKxm0 4018: Essential Eight Maturity Model, Maturity Level One https://hubs.la/Q02_bBx10

Review the Most used and sought-after Authority Documents (ADs) posted in November. These ADs from Unified Compliance have harmonized citations and mandates, ensuring efficient deduplication and simplifying compliance. Check them out! https://hubs.la/Q02-tdbX0

Make it easier to focus on cybersecurity! Streamline your compliance efforts now! As an ISC2 member, you can make compliance tasks and regulatory demands almost effortless. We advise auditing once and attesting multiple times. You can eliminate duplicate efforts by asserting compliance across numerous Authority Documents using the Common Controls Hub®. The Unified Compliance Framework is now available at a 20% discount to all ISC2 members. Check it out, watch it work, and learn to relax about compliance and upcoming audits. Don't wait, get your discount now! https://hubs.la/Q02GRZmx0 #CISSP #cybersecurity #riskmanagement

Security Operations for Olibr in a remote location (salary not disclosed) Looking for a strong understanding on Unified Compliance Framework and Cyber Drills. https://hubs.la/Q02YsmN60

Resilience and compliance go hand-in-hand in today’s cyber risk landscape. Unified Compliance and MetricStream’s upcoming webinar with compliance expert Dorian Cougias dives into essential strategies to future-proof your organization. Learn how to stay compliant with frameworks like DORA, NIST, and ISO 27001 while building a resilient foundation to manage evolving risks. This session is perfect for compliance pros looking to: • Simplify multi-framework compliance • Boost resilience and operational continuity • Stay agile amidst changing regulations Mark your calendar: November 14, 2024 at 8:00 AM PT | 11:00 AM ET | 4:00 PM UK Get you compliance update https://hubs.la/Q02XzSwQ0

Join MetricStream and Unified Compliance for a special webinar where we’ll tackle the twin pillars of regulatory compliance and resilience in the face of changing cyber threats on November 14, 2024, at 8:00 AM PT | 11:00 AM ET | 4:00 PM UK Featuring insights from Dorian Cougias of the Unified Compliance Framework (UCF), this session will equip you with strategies to streamline compliance and strengthen resilience. What’s on the agenda? • Building resilience into your compliance program • Harmonizing frameworks like DORA, NIST, and ISO 27001 • Managing cyber risks in a dynamic regulatory landscape Don’t miss out https://hubs.la/Q02XzYfS0

Unified Compliance's November Newsletter is ready for you! Our latest issue is packed with insights for compliance professionals. From visualizing compliance with PlantUML in NextGen, to simplifying ISO 27001 processes, and Adopting a Controls-Based Approach for Cyber Compliance, this month’s topics are designed to keep you informed and prepared. Highlights Include: • PlantUML in NextGen: Make compliance processes visual and accessible. • Early Adoption of Unified Compliance: Say goodbye to manual errors and save costs. • Partner Spotlight: GlideFast Consulting discusses streamlining GRC with ServiceNow. •Upcoming Webinar: Adopting a Controls – Based Approach for Cyber Compliance and Resilience: from DORA to NIST and Beyond with MetricStream and UC • Latest Authority Documents: New, trending, and upcoming resources. Don’t miss out on these valuable insights! https://hubs.la/Q02Xdfd40

The most selected Authority Documents from the Common Controls Hub for October are here! We’ve also included details on how many groups and initiatives each document has been linked to. See which ADs Compliance professionals are using! https://hubs.la/Q02X774Z0

Regulations are boring. Find more fun A common language tool that helps IT teams communicate As an ISC2 member, when audits are done right, compliance pros and auditors can understand each other easily. The Unified Compliance Framework’s Common Controls Hub® makes a legally defensible compliance audit easier than ever before by eliminating redundancies across multiple requirements and asserting compliance across numerous Authority Documents. It's all done so quickly; it feels magical. ISC2 members get a 20% discount on this invaluable tool. Get started and enjoy the benefits today! https://hubs.la/Q02GRYr10 #CISSP #cybersecurity #riskmanagement