Law / Frameworks / CIS Controls / 15
CIS Controls, 1515.4
Contracts that spell out security duties for the provider. Our summary; Center for Internet Security's text is not ours to print.
We read each law below as bearing on this Safeguard. That does not mean the Safeguard, done well, meets the law: what each law asks is on its own page. Law library as of .
The kinds of duty that reach it: breach notice, contract terms.
- 1
- law
- 1
- place
- 0
- with court rulings behind them
- 0
- not yet in force
The same ground elsewhere linked through the kinds of duty both controls are mapped from
- NIST AI RMFGOVERN 4.3 Organizational practices are in place to enable AI testing, identification of...
- NIST AI RMFGOVERN 6.1 Policies and procedures are in place that address AI risks associated with third-party...
- NIST AI 600-1GAI-RISK-04 Data Privacy
- NIST AI 600-1GAI-RISK-09 Information Security
- MIT mitigations3.3 Access Management
- MIT mitigations3.6 Incident Response & Recovery
- NIST Privacy FrameworkID.DE-P2 Data processing ecosystem parties (e.g., service providers, customers, partners,...
- NIST Privacy FrameworkID.DE-P3 Contracts with data processing ecosystem parties are used to implement appropriate...
- NIST CSF 2.0GV.SC-02 Cybersecurity roles and responsibilities for suppliers, customers, and partners are...
- NIST CSF 2.0GV.SC-05 Requirements to address cybersecurity risks in supply chains are established,...
- FINOS AIGFAIR-PREV-007 Legal and Contractual Frameworks for AI Systems
- FINOS AIGFAIR-DET-001 AI Data Leakage Prevention and Detection
Vulnerability and incident reporting
1 law, 1 place| Place | Law | How it reaches this Safeguard |
|---|---|---|
 Gambia |
Information and Communications Act, 2009, security of information and communications services (subscriber risk notification) |
Through its breach notice duty. What it requires |
CIS Critical Security Controls® (CIS Controls®) v8.1 © Center for Internet Security, Inc. Safeguard numbers are used under a CIS Controls Supporter License; the one-line descriptions beside them are our own, not CIS text. Every Safeguard of the framework.
