{ "apiVersion": "v1", "catalogueVersion": "7.3", "clauses": [ { "assuranceBreakdown": { "contributing": 15, "full": 0, "partial": 4, "unknown": 0 }, "clause": "5.3", "clauseId": "api-rp-1164@3rd edition#5.3", "coverageState": "covered-partial", "coveringUcCount": 19, "coveringUcs": [ "14.2.14", "14.9.14", "15.3.1", "15.3.37", "5.1.14", "22.18.1", "22.18.2", "22.18.3", "22.18.4", "22.18.5", "22.18.6", "22.18.7", "22.18.8", "22.18.9", "22.18.10", "22.18.11", "22.18.12", "22.18.13", "22.18.14" ], "endpoint": "/api/v1/compliance/clauses/api-rp-1164__3rd%20edition__5.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "api-rp-1164", "regulationShortName": "API RP 1164", "tier": 2, "topAssurance": "partial", "topic": "Access control", "version": "3rd edition" }, { "assuranceBreakdown": { "contributing": 22, "full": 0, "partial": 2, "unknown": 0 }, "clause": "6.2.1", "clauseId": "api-rp-1164@3rd edition#6.2.1", "coverageState": "covered-partial", "coveringUcCount": 24, "coveringUcs": [ "14.2.9", "14.6.6", "14.2.4", "22.18.15", "22.18.16", "22.18.17", "22.18.18", "22.18.19", "22.18.20", "22.18.21", "22.18.22", "22.18.23", "22.18.24", "22.18.25", "22.18.26", "22.18.27", "22.18.28", "22.18.29", "22.18.30", "22.18.31", "22.18.32", "22.18.33", "22.18.34", "22.18.35" ], "endpoint": "/api/v1/compliance/clauses/api-rp-1164__3rd%20edition__6.2.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "api-rp-1164", "regulationShortName": "API RP 1164", "tier": 2, "topAssurance": "partial", "topic": "Logging and monitoring", "version": "3rd edition" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 9, "unknown": 0 }, "clause": "Art.23", "clauseId": "appi@2022 amendments#Art.23", "coverageState": "covered-partial", "coveringUcCount": 9, "coveringUcs": [ "22.29.19", "22.29.20", "22.29.21", "22.29.22", "22.29.23", "22.29.24", "22.35.2", "22.35.3", "22.41.1" ], "endpoint": "/api/v1/compliance/clauses/appi__2022%20amendments__Art.23.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "appi", "regulationShortName": "APPI", "tier": 2, "topAssurance": "partial", "topic": "Security control action", "version": "2022 amendments" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 7, "unknown": 0 }, "clause": "Art.26", "clauseId": "appi@2022 amendments#Art.26", "coverageState": "covered-partial", "coveringUcCount": 7, "coveringUcs": [ "22.29.7", "22.29.8", "22.29.10", "22.29.11", "22.39.1", "22.39.2", "22.39.3" ], "endpoint": "/api/v1/compliance/clauses/appi__2022%20amendments__Art.26.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "appi", "regulationShortName": "APPI", "tier": 2, "topAssurance": "partial", "topic": "Leakage reporting", "version": "2022 amendments" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 1, "unknown": 0 }, "clause": "15", "clauseId": "apra-cps-234@current#15", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.30.21", "1.2.9", "1.3.4" ], "endpoint": "/api/v1/compliance/clauses/apra-cps-234__current__15.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "apra-cps-234", "regulationShortName": "APRA CPS 234", "tier": 2, "topAssurance": "partial", "topic": "Policy framework", "version": "current" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 11, "unknown": 0 }, "clause": "23", "clauseId": "apra-cps-234@current#23", "coverageState": "covered-partial", "coveringUcCount": 12, "coveringUcs": [ "6.3.23", "16.1.20", "16.3.6", "22.30.19", "22.30.20", "22.30.23", "22.30.24", "22.30.25", "22.31.14", "22.31.15", "22.31.17", "6.3.1" ], "endpoint": "/api/v1/compliance/clauses/apra-cps-234__current__23.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "apra-cps-234", "regulationShortName": "APRA CPS 234", "tier": 2, "topAssurance": "partial", "topic": "Incident management", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "36", "clauseId": "apra-cps-234@current#36", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "16.1.20", "16.3.6", "22.30.22", "22.31.16" ], "endpoint": "/api/v1/compliance/clauses/apra-cps-234__current__36.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "apra-cps-234", "regulationShortName": "APRA CPS 234", "tier": 2, "topAssurance": "partial", "topic": "Notification of incidents", "version": "current" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 2, "unknown": 0 }, "clause": "E8.01", "clauseId": "asd-e8@Nov 2023#E8.01", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "12.3.10", "22.31.6", "1.2.91" ], "endpoint": "/api/v1/compliance/clauses/asd-e8__Nov%202023__E8.01.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "asd-e8", "regulationShortName": "ASD E8", "tier": 2, "topAssurance": "partial", "topic": "Application control", "version": "Nov 2023" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "E8.02", "clauseId": "asd-e8@Nov 2023#E8.02", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.31.8" ], "endpoint": "/api/v1/compliance/clauses/asd-e8__Nov%202023__E8.02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "asd-e8", "regulationShortName": "asd-e8", "tier": null, "topAssurance": "partial", "topic": null, "version": "Nov 2023" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "E8.03", "clauseId": "asd-e8@Nov 2023#E8.03", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.31.7", "22.31.13" ], "endpoint": "/api/v1/compliance/clauses/asd-e8__Nov%202023__E8.03.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "asd-e8", "regulationShortName": "ASD E8", "tier": 2, "topAssurance": "partial", "topic": "Configure MS Office macro settings", "version": "Nov 2023" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "E8.05", "clauseId": "asd-e8@Nov 2023#E8.05", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "1.1.76", "9.1.3", "9.4.1", "22.31.9" ], "endpoint": "/api/v1/compliance/clauses/asd-e8__Nov%202023__E8.05.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "asd-e8", "regulationShortName": "ASD E8", "tier": 2, "topAssurance": "partial", "topic": "Restrict administrative privileges", "version": "Nov 2023" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "E8.06", "clauseId": "asd-e8@Nov 2023#E8.06", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "1.2.9", "1.3.4", "12.3.2", "22.31.10" ], "endpoint": "/api/v1/compliance/clauses/asd-e8__Nov%202023__E8.06.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "asd-e8", "regulationShortName": "ASD E8", "tier": 2, "topAssurance": "partial", "topic": "Patch operating systems", "version": "Nov 2023" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "E8.07", "clauseId": "asd-e8@Nov 2023#E8.07", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.31.11" ], "endpoint": "/api/v1/compliance/clauses/asd-e8__Nov%202023__E8.07.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "asd-e8", "regulationShortName": "asd-e8", "tier": null, "topAssurance": "partial", "topic": null, "version": "Nov 2023" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 4, "unknown": 0 }, "clause": "E8.08", "clauseId": "asd-e8@Nov 2023#E8.08", "coverageState": "covered-full", "coveringUcCount": 5, "coveringUcs": [ "6.3.1", "5.1.24", "6.3.13", "6.3.23", "22.31.12" ], "endpoint": "/api/v1/compliance/clauses/asd-e8__Nov%202023__E8.08.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "asd-e8", "regulationShortName": "ASD E8", "tier": 2, "topAssurance": "full", "topic": "Regular backups", "version": "Nov 2023" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 3, "unknown": 0 }, "clause": "APP 1", "clauseId": "au-privacy-act@current#APP 1", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.31.3", "22.31.4", "22.31.5" ], "endpoint": "/api/v1/compliance/clauses/au-privacy-act__current__APP%201.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "au-privacy-act", "regulationShortName": "AU Privacy Act", "tier": 2, "topAssurance": "partial", "topic": "Open and transparent management of personal info", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "APP 11", "clauseId": "au-privacy-act@current#APP 11", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.1" ], "endpoint": "/api/v1/compliance/clauses/au-privacy-act__current__APP%2011.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "au-privacy-act", "regulationShortName": "AU Privacy Act", "tier": 2, "topAssurance": "partial", "topic": "Security of personal information", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 11, "unknown": 0 }, "clause": "§26WK", "clauseId": "au-privacy-act@current#§26WK", "coverageState": "covered-partial", "coveringUcCount": 11, "coveringUcs": [ "22.29.7", "22.29.8", "22.29.9", "22.29.10", "22.29.11", "22.29.12", "22.31.1", "22.31.2", "22.31.3", "22.31.4", "22.31.5" ], "endpoint": "/api/v1/compliance/clauses/au-privacy-act__current__%C2%A726WK.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "au-privacy-act", "regulationShortName": "AU Privacy Act", "tier": 2, "topAssurance": "partial", "topic": "NDB — notifiable data breach", "version": "current" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 6, "unknown": 0 }, "clause": "§5", "clauseId": "bait-kait@Aug 2021#§5", "coverageState": "covered-partial", "coveringUcCount": 9, "coveringUcs": [ "9.1.3", "9.5.15", "22.28.16", "22.28.18", "22.28.19", "22.28.20", "4.1.4", "9.4.1", "13.1.39" ], "endpoint": "/api/v1/compliance/clauses/bait-kait__Aug%202021__%C2%A75.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "bait-kait", "regulationShortName": "BAIT/KAIT", "tier": 2, "topAssurance": "partial", "topic": "Identity & access management", "version": "Aug 2021" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 3, "unknown": 0 }, "clause": "§9", "clauseId": "bait-kait@Aug 2021#§9", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "12.2.17", "16.4.1", "22.28.17", "5.1.24" ], "endpoint": "/api/v1/compliance/clauses/bait-kait__Aug%202021__%C2%A79.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "bait-kait", "regulationShortName": "BAIT/KAIT", "tier": 2, "topAssurance": "partial", "topic": "ICT operations management", "version": "Aug 2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "OPR25.1", "clauseId": "basel-iii@BCBS 2021#OPR25.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.24" ], "endpoint": "/api/v1/compliance/clauses/basel-iii__BCBS%202021__OPR25.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "basel-iii", "regulationShortName": "Basel III", "tier": 2, "topAssurance": "partial", "topic": "Operational risk management", "version": "BCBS 2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "OPR25.8", "clauseId": "basel-iii@BCBS 2021#OPR25.8", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.25" ], "endpoint": "/api/v1/compliance/clauses/basel-iii__BCBS%202021__OPR25.8.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "basel-iii", "regulationShortName": "Basel III", "tier": 2, "topAssurance": "partial", "topic": "Business continuity and resilience", "version": "BCBS 2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 5, "unknown": 0 }, "clause": "§8a", "clauseId": "bsi-kritisv@2021 (as amended)#§8a", "coverageState": "covered-partial", "coveringUcCount": 5, "coveringUcs": [ "22.28.6", "22.28.7", "22.28.8", "22.28.9", "22.28.10" ], "endpoint": "/api/v1/compliance/clauses/bsi-kritisv__2021%20%28as%20amended%29__%C2%A78a.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "bsi-kritisv", "regulationShortName": "BSI-KritisV", "tier": 2, "topAssurance": "partial", "topic": "Security in IT systems", "version": "2021 (as amended)" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.100", "clauseId": "ccpa@CPRA (as amended)#§1798.100", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "10.11.62" ], "endpoint": "/api/v1/compliance/clauses/ccpa__CPRA%20%28as%20amended%29__%C2%A71798.100.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "ccpa", "regulationShortName": "CCPA/CPRA", "tier": 2, "topAssurance": "contributing", "topic": "Consumer right to know", "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§1798.100(b)", "clauseId": "ccpa@CPRA (as amended)#§1798.100(b)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.37.4" ], "endpoint": "/api/v1/compliance/clauses/ccpa__CPRA%20%28as%20amended%29__%C2%A71798.100%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa", "regulationShortName": "ccpa", "tier": null, "topAssurance": "partial", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "§1798.100(c)", "clauseId": "ccpa@CPRA (as amended)#§1798.100(c)", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.49.4" ], "endpoint": "/api/v1/compliance/clauses/ccpa__CPRA%20%28as%20amended%29__%C2%A71798.100%28c%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa", "regulationShortName": "ccpa", "tier": null, "topAssurance": "full", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.105", "clauseId": "ccpa@CPRA (as amended)#§1798.105", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/ccpa__CPRA%20%28as%20amended%29__%C2%A71798.105.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "ccpa", "regulationShortName": "CCPA/CPRA", "tier": 2, "topAssurance": null, "topic": "Consumer right to delete", "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§1798.130(a)", "clauseId": "ccpa@CPRA (as amended)#§1798.130(a)", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.36.4", "22.36.5" ], "endpoint": "/api/v1/compliance/clauses/ccpa__CPRA%20%28as%20amended%29__%C2%A71798.130%28a%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa", "regulationShortName": "ccpa", "tier": null, "topAssurance": "partial", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.135(b)", "clauseId": "ccpa@CPRA (as amended)#§1798.135(b)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.37.5" ], "endpoint": "/api/v1/compliance/clauses/ccpa__CPRA%20%28as%20amended%29__%C2%A71798.135%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa", "regulationShortName": "ccpa", "tier": null, "topAssurance": "contributing", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.150", "clauseId": "ccpa@CPRA (as amended)#§1798.150", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/ccpa__CPRA%20%28as%20amended%29__%C2%A71798.150.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "ccpa", "regulationShortName": "CCPA/CPRA", "tier": 2, "topAssurance": null, "topic": "Private right of action for data breaches", "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 2, "unknown": 0 }, "clause": "§1798.100", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.100", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.36.1", "22.37.2", "22.49.1", "22.4.1" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.100.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "full", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 3, "full": 1, "partial": 1, "unknown": 0 }, "clause": "§1798.105", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.105", "coverageState": "covered-full", "coveringUcCount": 5, "coveringUcs": [ "22.36.2", "22.49.5", "22.4.1", "22.4.24", "22.4.25" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.105.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "full", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.106", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.106", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.4.4" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.106.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "contributing", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.115", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.115", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.4.5" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.115.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "contributing", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 8, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.120", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.120", "coverageState": "contributing-only", "coveringUcCount": 8, "coveringUcs": [ "22.4.2", "22.4.6", "22.4.13", "22.4.14", "22.4.17", "22.4.18", "22.4.19", "22.4.23" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.120.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "contributing", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 5, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.121", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.121", "coverageState": "contributing-only", "coveringUcCount": 5, "coveringUcs": [ "22.4.3", "22.4.9", "22.4.10", "22.4.11", "22.4.22" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.121.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "contributing", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.125", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.125", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.4.7", "22.4.20" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.125.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "contributing", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "§1798.135", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.135", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.37.3", "22.4.21" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.135.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "full", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.135(b)", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.135(b)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.4.6" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.135%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "contributing", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.140", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.140", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.4.8" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.140.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "contributing", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.145", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.145", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.4.8" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.145.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "contributing", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§1798.150", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.150", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.39.3" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.150.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "partial", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.185", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.185", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.4.15", "22.4.16" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.185.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "contributing", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§1798.99.80", "clauseId": "ccpa-cpra@CPRA (as amended)#§1798.99.80", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.4.5", "22.4.12" ], "endpoint": "/api/v1/compliance/clauses/ccpa-cpra__CPRA%20%28as%20amended%29__%C2%A71798.99.80.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "ccpa-cpra", "regulationShortName": "ccpa-cpra", "tier": null, "topAssurance": "contributing", "topic": null, "version": "CPRA (as amended)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "5.13.3", "clauseId": "cjis@v5.9.4#5.13.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.2" ], "endpoint": "/api/v1/compliance/clauses/cjis__v5.9.4__5.13.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cjis", "regulationShortName": "CJIS", "tier": 2, "topAssurance": "partial", "topic": "Incident response", "version": "v5.9.4" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "5.4.1", "clauseId": "cjis@v5.9.4#5.4.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "10.12.44" ], "endpoint": "/api/v1/compliance/clauses/cjis__v5.9.4__5.4.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "cjis", "regulationShortName": "cjis", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v5.9.4" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 7, "unknown": 0 }, "clause": "5.5.1", "clauseId": "cjis@v5.9.4#5.5.1", "coverageState": "covered-partial", "coveringUcCount": 9, "coveringUcs": [ "5.1.14", "7.1.21", "9.1.1", "22.32.22", "22.32.23", "22.32.24", "22.32.25", "1.1.108", "4.1.4" ], "endpoint": "/api/v1/compliance/clauses/cjis__v5.9.4__5.5.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cjis", "regulationShortName": "CJIS", "tier": 2, "topAssurance": "partial", "topic": "Access control - identification", "version": "v5.9.4" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "AC.L2-3.1.1", "clauseId": "cmmc@2.0#AC.L2-3.1.1", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.20.1", "22.32.17" ], "endpoint": "/api/v1/compliance/clauses/cmmc__2.0__AC.L2-3.1.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cmmc", "regulationShortName": "CMMC", "tier": 1, "topAssurance": "partial", "topic": "Authorized access to systems", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "AC.L2-3.1.5", "clauseId": "cmmc@2.0#AC.L2-3.1.5", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.20.2", "22.20.14" ], "endpoint": "/api/v1/compliance/clauses/cmmc__2.0__AC.L2-3.1.5.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cmmc", "regulationShortName": "CMMC", "tier": 1, "topAssurance": "partial", "topic": "Least privilege", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "AU.L2-3.3.1", "clauseId": "cmmc@2.0#AU.L2-3.3.1", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.20.3", "10.12.40" ], "endpoint": "/api/v1/compliance/clauses/cmmc__2.0__AU.L2-3.3.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cmmc", "regulationShortName": "CMMC", "tier": 1, "topAssurance": "full", "topic": "Create audit records", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "AU.L2-3.3.2", "clauseId": "cmmc@2.0#AU.L2-3.3.2", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.20.4" ], "endpoint": "/api/v1/compliance/clauses/cmmc__2.0__AU.L2-3.3.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cmmc", "regulationShortName": "CMMC", "tier": 1, "topAssurance": "full", "topic": "Ensure unique user traceability", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 5, "unknown": 0 }, "clause": "AU.L2-3.3.5", "clauseId": "cmmc@2.0#AU.L2-3.3.5", "coverageState": "covered-partial", "coveringUcCount": 6, "coveringUcs": [ "22.20.5", "22.20.16", "22.20.18", "22.20.20", "22.32.18", "22.32.19" ], "endpoint": "/api/v1/compliance/clauses/cmmc__2.0__AU.L2-3.3.5.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cmmc", "regulationShortName": "CMMC", "tier": 1, "topAssurance": "partial", "topic": "Audit reporting and correlation", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 2, "unknown": 0 }, "clause": "CM.L2-3.4.1", "clauseId": "cmmc@2.0#CM.L2-3.4.1", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.20.6", "22.20.10", "22.20.17" ], "endpoint": "/api/v1/compliance/clauses/cmmc__2.0__CM.L2-3.4.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cmmc", "regulationShortName": "CMMC", "tier": 1, "topAssurance": "full", "topic": "Baseline configurations", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 2, "unknown": 0 }, "clause": "IR.L2-3.6.1", "clauseId": "cmmc@2.0#IR.L2-3.6.1", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.20.7", "22.20.19", "22.32.20" ], "endpoint": "/api/v1/compliance/clauses/cmmc__2.0__IR.L2-3.6.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cmmc", "regulationShortName": "CMMC", "tier": 1, "topAssurance": "full", "topic": "Incident handling capability", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "SC.L2-3.13.8", "clauseId": "cmmc@2.0#SC.L2-3.13.8", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.20.8" ], "endpoint": "/api/v1/compliance/clauses/cmmc__2.0__SC.L2-3.13.8.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cmmc", "regulationShortName": "CMMC", "tier": 1, "topAssurance": "full", "topic": "Cryptographic mechanisms for CUI in transit", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 4, "unknown": 0 }, "clause": "SI.L2-3.14.6", "clauseId": "cmmc@2.0#SI.L2-3.14.6", "coverageState": "covered-full", "coveringUcCount": 6, "coveringUcs": [ "22.20.9", "22.20.11", "22.20.12", "22.20.13", "22.20.15", "22.32.21" ], "endpoint": "/api/v1/compliance/clauses/cmmc__2.0__SI.L2-3.14.6.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cmmc", "regulationShortName": "CMMC", "tier": 1, "topAssurance": "full", "topic": "Monitor for attacks", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "APO13.01", "clauseId": "cobit@2019#APO13.01", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.26" ], "endpoint": "/api/v1/compliance/clauses/cobit__2019__APO13.01.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cobit", "regulationShortName": "COBIT", "tier": 2, "topAssurance": "partial", "topic": "Manage security — establish and maintain an ISMS", "version": "2019" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "DSS05.03", "clauseId": "cobit@2019#DSS05.03", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.27" ], "endpoint": "/api/v1/compliance/clauses/cobit__2019__DSS05.03.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "cobit", "regulationShortName": "COBIT", "tier": 2, "topAssurance": "partial", "topic": "Manage security services — manage endpoint security", "version": "2019" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "MEA02.01", "clauseId": "cobit@2019#MEA02.01", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.28" ], "endpoint": "/api/v1/compliance/clauses/cobit__2019__MEA02.01.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "cobit", "regulationShortName": "COBIT", "tier": 2, "topAssurance": "partial", "topic": "Monitor internal controls", "version": "2019" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§312.3", "clauseId": "coppa@16 CFR 312#§312.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.29" ], "endpoint": "/api/v1/compliance/clauses/coppa__16%20CFR%20312__%C2%A7312.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "coppa", "regulationShortName": "COPPA", "tier": 2, "topAssurance": "partial", "topic": "Verifiable parental consent obligations", "version": "16 CFR 312" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§312.8", "clauseId": "coppa@16 CFR 312#§312.8", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.30" ], "endpoint": "/api/v1/compliance/clauses/coppa__16%20CFR%20312__%C2%A7312.8.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "coppa", "regulationShortName": "COPPA", "tier": 2, "topAssurance": "partial", "topic": "Data security and confidentiality", "version": "16 CFR 312" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Principle1", "clauseId": "coso@2013 ICFR#Principle1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.31" ], "endpoint": "/api/v1/compliance/clauses/coso__2013%20ICFR__Principle1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "coso", "regulationShortName": "COSO", "tier": 2, "topAssurance": "partial", "topic": "Commitment to integrity and ethical values", "version": "2013 ICFR" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Principle11", "clauseId": "coso@2013 ICFR#Principle11", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.33" ], "endpoint": "/api/v1/compliance/clauses/coso__2013%20ICFR__Principle11.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "coso", "regulationShortName": "COSO", "tier": 2, "topAssurance": "partial", "topic": "Selects and develops general controls over technology", "version": "2013 ICFR" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Principle16", "clauseId": "coso@2013 ICFR#Principle16", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.34" ], "endpoint": "/api/v1/compliance/clauses/coso__2013%20ICFR__Principle16.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "coso", "regulationShortName": "COSO", "tier": 2, "topAssurance": "partial", "topic": "Ongoing and/or separate evaluations", "version": "2013 ICFR" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Principle5", "clauseId": "coso@2013 ICFR#Principle5", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.32" ], "endpoint": "/api/v1/compliance/clauses/coso__2013%20ICFR__Principle5.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "coso", "regulationShortName": "COSO", "tier": 2, "topAssurance": "partial", "topic": "Enforces accountability", "version": "2013 ICFR" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "CE.BF.1", "clauseId": "cyber-essentials@Montpellier (2025)#CE.BF.1", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "5.2.2", "17.1.8", "17.3.3", "22.27.28" ], "endpoint": "/api/v1/compliance/clauses/cyber-essentials__Montpellier%20%282025%29__CE.BF.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "cyber-essentials", "regulationShortName": "cyber-essentials", "tier": null, "topAssurance": "partial", "topic": null, "version": "Montpellier (2025)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 7, "unknown": 0 }, "clause": "CE.SAU.1", "clauseId": "cyber-essentials@Montpellier (2025)#CE.SAU.1", "coverageState": "covered-partial", "coveringUcCount": 7, "coveringUcs": [ "1.1.108", "4.1.5", "9.1.1", "9.3.1", "17.2.2", "22.27.29", "22.27.30" ], "endpoint": "/api/v1/compliance/clauses/cyber-essentials__Montpellier%20%282025%29__CE.SAU.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "cyber-essentials", "regulationShortName": "cyber-essentials", "tier": null, "topAssurance": "partial", "topic": null, "version": "Montpellier (2025)" }, { "assuranceBreakdown": { "contributing": 2, "full": 1, "partial": 0, "unknown": 0 }, "clause": "Art.10", "clauseId": "dora@Regulation (EU) 2022/2554#Art.10", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.8.33", "22.3.1", "22.3.7" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.10.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "full", "topic": "Detection", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.11", "clauseId": "dora@Regulation (EU) 2022/2554#Art.11", "coverageState": "contributing-only", "coveringUcCount": 3, "coveringUcs": [ "22.3.1", "22.3.5", "22.3.8" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.11.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "contributing", "topic": "Response and recovery", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 3, "full": 3, "partial": 1, "unknown": 0 }, "clause": "Art.12", "clauseId": "dora@Regulation (EU) 2022/2554#Art.12", "coverageState": "covered-full", "coveringUcCount": 7, "coveringUcs": [ "22.35.3", "22.45.1", "22.45.3", "22.45.4", "22.3.1", "22.3.5", "22.3.9" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.12.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "full", "topic": "Backup policies and recovery methods", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.13", "clauseId": "dora@Regulation (EU) 2022/2554#Art.13", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.3.1", "22.3.10" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.13.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.14", "clauseId": "dora@Regulation (EU) 2022/2554#Art.14", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.3.1", "22.3.20" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.14.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.15", "clauseId": "dora@Regulation (EU) 2022/2554#Art.15", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.1" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.15.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.16", "clauseId": "dora@Regulation (EU) 2022/2554#Art.16", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.1" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.16.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 3, "full": 1, "partial": 4, "unknown": 0 }, "clause": "Art.17", "clauseId": "dora@Regulation (EU) 2022/2554#Art.17", "coverageState": "covered-full", "coveringUcCount": 8, "coveringUcs": [ "22.3.44", "22.6.51", "22.6.52", "22.8.34", "22.8.35", "22.3.2", "22.3.23", "22.3.31" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.17.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "full", "topic": "ICT-related incident management process", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.18", "clauseId": "dora@Regulation (EU) 2022/2554#Art.18", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.3.2", "22.3.11" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.18.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "contributing", "topic": "Classification of ICT-related incidents", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 3, "full": 1, "partial": 1, "unknown": 0 }, "clause": "Art.19", "clauseId": "dora@Regulation (EU) 2022/2554#Art.19", "coverageState": "covered-full", "coveringUcCount": 5, "coveringUcs": [ "22.39.1", "22.39.4", "22.3.2", "22.3.12", "22.3.38" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.19.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "full", "topic": "Reporting of major ICT-related incidents", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.20", "clauseId": "dora@Regulation (EU) 2022/2554#Art.20", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.2" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.20.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.21", "clauseId": "dora@Regulation (EU) 2022/2554#Art.21", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.2" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.21.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.22", "clauseId": "dora@Regulation (EU) 2022/2554#Art.22", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.2" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.22.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.23", "clauseId": "dora@Regulation (EU) 2022/2554#Art.23", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.2" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.23.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 5, "full": 2, "partial": 2, "unknown": 0 }, "clause": "Art.24", "clauseId": "dora@Regulation (EU) 2022/2554#Art.24", "coverageState": "covered-full", "coveringUcCount": 9, "coveringUcs": [ "22.3.45", "22.45.5", "22.11.105", "22.46.4", "22.3.3", "22.3.25", "22.3.27", "22.3.28", "22.3.39" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.24.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "full", "topic": "Digital operational-resilience testing", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.25", "clauseId": "dora@Regulation (EU) 2022/2554#Art.25", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.3.3", "22.3.16" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.25.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.26", "clauseId": "dora@Regulation (EU) 2022/2554#Art.26", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.3.3", "22.3.17" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.26.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "contributing", "topic": "Threat-led penetration testing", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.27", "clauseId": "dora@Regulation (EU) 2022/2554#Art.27", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.3" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.27.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 2, "full": 3, "partial": 4, "unknown": 0 }, "clause": "Art.28", "clauseId": "dora@Regulation (EU) 2022/2554#Art.28", "coverageState": "covered-full", "coveringUcCount": 9, "coveringUcs": [ "22.44.1", "22.44.2", "22.44.4", "22.8.37", "22.38.3", "22.38.5", "22.44.3", "22.3.4", "22.3.40" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.28.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "full", "topic": "ICT third-party risk", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.28(3)", "clauseId": "dora@Regulation (EU) 2022/2554#Art.28(3)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.13" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.28%283%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.28(8)", "clauseId": "dora@Regulation (EU) 2022/2554#Art.28(8)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.18" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.28%288%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.29", "clauseId": "dora@Regulation (EU) 2022/2554#Art.29", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.30", "clauseId": "dora@Regulation (EU) 2022/2554#Art.30", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.3.4", "22.3.14" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.30.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.31", "clauseId": "dora@Regulation (EU) 2022/2554#Art.31", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.31.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.32", "clauseId": "dora@Regulation (EU) 2022/2554#Art.32", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.32.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.33", "clauseId": "dora@Regulation (EU) 2022/2554#Art.33", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.33.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.34", "clauseId": "dora@Regulation (EU) 2022/2554#Art.34", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.34.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.35", "clauseId": "dora@Regulation (EU) 2022/2554#Art.35", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.35.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.36", "clauseId": "dora@Regulation (EU) 2022/2554#Art.36", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.36.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.37", "clauseId": "dora@Regulation (EU) 2022/2554#Art.37", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.37.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.38", "clauseId": "dora@Regulation (EU) 2022/2554#Art.38", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.38.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.39", "clauseId": "dora@Regulation (EU) 2022/2554#Art.39", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.39.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.40", "clauseId": "dora@Regulation (EU) 2022/2554#Art.40", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.40.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.41", "clauseId": "dora@Regulation (EU) 2022/2554#Art.41", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.41.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.42", "clauseId": "dora@Regulation (EU) 2022/2554#Art.42", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.42.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.43", "clauseId": "dora@Regulation (EU) 2022/2554#Art.43", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.43.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.44", "clauseId": "dora@Regulation (EU) 2022/2554#Art.44", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.4" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.44.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 14, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.5", "clauseId": "dora@Regulation (EU) 2022/2554#Art.5", "coverageState": "contributing-only", "coveringUcCount": 14, "coveringUcs": [ "22.3.1", "22.3.19", "22.3.21", "22.3.22", "22.3.24", "22.3.26", "22.3.29", "22.3.30", "22.3.32", "22.3.33", "22.3.34", "22.3.35", "22.3.36", "22.3.37" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.5.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "contributing", "topic": "ICT risk-management governance", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 3, "partial": 0, "unknown": 0 }, "clause": "Art.6", "clauseId": "dora@Regulation (EU) 2022/2554#Art.6", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.3.41", "22.6.46", "22.11.106", "22.3.1" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.6.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "full", "topic": "ICT risk-management framework", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 2, "partial": 0, "unknown": 0 }, "clause": "Art.7", "clauseId": "dora@Regulation (EU) 2022/2554#Art.7", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.3.42", "22.8.32", "22.3.1" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.7.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "full", "topic": "ICT systems, protocols and tools", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 1, "unknown": 0 }, "clause": "Art.8", "clauseId": "dora@Regulation (EU) 2022/2554#Art.8", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.3.43", "22.11.103", "22.3.1" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.8.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "full", "topic": "Identification", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 2, "partial": 0, "unknown": 0 }, "clause": "Art.9", "clauseId": "dora@Regulation (EU) 2022/2554#Art.9", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.11.97", "22.41.3", "22.3.1" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.9.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "dora", "regulationShortName": "DORA", "tier": 1, "topAssurance": "full", "topic": "Protection and prevention", "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.9(4)(c)", "clauseId": "dora@Regulation (EU) 2022/2554#Art.9(4)(c)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.15" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.9%284%29%28c%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.9(4)(e)", "clauseId": "dora@Regulation (EU) 2022/2554#Art.9(4)(e)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.3.6" ], "endpoint": "/api/v1/compliance/clauses/dora__Regulation%20%28EU%29%202022%2F2554__Art.9%284%29%28e%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "dora", "regulationShortName": "dora", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Regulation (EU) 2022/2554" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 15, "unknown": 0 }, "clause": "Art.24", "clauseId": "eidas@Regulation (EU) 2024/1183#Art.24", "coverageState": "covered-partial", "coveringUcCount": 15, "coveringUcs": [ "22.24.1", "22.24.2", "22.24.3", "22.24.4", "22.24.5", "22.24.6", "22.24.7", "22.24.8", "22.24.9", "22.24.10", "22.24.11", "22.24.12", "22.24.13", "22.24.14", "22.24.15" ], "endpoint": "/api/v1/compliance/clauses/eidas__Regulation%20%28EU%29%202024%2F1183__Art.24.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "eidas", "regulationShortName": "eIDAS", "tier": 2, "topAssurance": "partial", "topic": "Requirements for qualified trust service providers", "version": "Regulation (EU) 2024/1183" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.12", "clauseId": "eu-ai-act@Regulation (EU) 2024/1689#Art.12", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "1.1.65" ], "endpoint": "/api/v1/compliance/clauses/eu-ai-act__Regulation%20%28EU%29%202024%2F1689__Art.12.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "eu-ai-act", "regulationShortName": "EU AI Act", "tier": 2, "topAssurance": "partial", "topic": "Record-keeping (logging)", "version": "Regulation (EU) 2024/1689" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 18, "unknown": 0 }, "clause": "Art.13", "clauseId": "eu-ai-act@Regulation (EU) 2024/1689#Art.13", "coverageState": "covered-partial", "coveringUcCount": 18, "coveringUcs": [ "22.21.5", "22.21.6", "22.21.7", "22.21.8", "22.21.9", "22.21.10", "22.21.13", "22.21.14", "22.21.16", "22.21.17", "22.21.18", "22.21.19", "22.21.20", "22.21.21", "22.21.22", "22.21.23", "22.21.24", "22.21.25" ], "endpoint": "/api/v1/compliance/clauses/eu-ai-act__Regulation%20%28EU%29%202024%2F1689__Art.13.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "eu-ai-act", "regulationShortName": "EU AI Act", "tier": 2, "topAssurance": "partial", "topic": "Transparency and information", "version": "Regulation (EU) 2024/1689" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 3, "unknown": 0 }, "clause": "Art.14", "clauseId": "eu-ai-act@Regulation (EU) 2024/1689#Art.14", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.21.11", "22.21.12", "22.21.15" ], "endpoint": "/api/v1/compliance/clauses/eu-ai-act__Regulation%20%28EU%29%202024%2F1689__Art.14.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "eu-ai-act", "regulationShortName": "EU AI Act", "tier": 2, "topAssurance": "partial", "topic": "Human oversight", "version": "Regulation (EU) 2024/1689" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.15", "clauseId": "eu-ai-act@Regulation (EU) 2024/1689#Art.15", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.21.4" ], "endpoint": "/api/v1/compliance/clauses/eu-ai-act__Regulation%20%28EU%29%202024%2F1689__Art.15.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "eu-ai-act", "regulationShortName": "EU AI Act", "tier": 2, "topAssurance": "partial", "topic": "Accuracy, robustness, cybersecurity", "version": "Regulation (EU) 2024/1689" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.19", "clauseId": "eu-ai-act@Regulation (EU) 2024/1689#Art.19", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.21.2", "22.21.3", "1.2.51" ], "endpoint": "/api/v1/compliance/clauses/eu-ai-act__Regulation%20%28EU%29%202024%2F1689__Art.19.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "eu-ai-act", "regulationShortName": "EU AI Act", "tier": 2, "topAssurance": "partial", "topic": "Automatically generated logs", "version": "Regulation (EU) 2024/1689" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.26", "clauseId": "eu-ai-act@Regulation (EU) 2024/1689#Art.26", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.21.1" ], "endpoint": "/api/v1/compliance/clauses/eu-ai-act__Regulation%20%28EU%29%202024%2F1689__Art.26.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "eu-ai-act", "regulationShortName": "EU AI Act", "tier": 2, "topAssurance": "partial", "topic": "High-risk AI obligations for deployers", "version": "Regulation (EU) 2024/1689" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 10, "unknown": 0 }, "clause": "Art.18", "clauseId": "eu-aml@6AMLD / AMLR 2024#Art.18", "coverageState": "covered-partial", "coveringUcCount": 10, "coveringUcs": [ "22.25.7", "22.25.13", "22.25.14", "22.25.15", "22.25.16", "22.25.17", "22.25.24", "22.25.25", "22.25.26", "22.25.33" ], "endpoint": "/api/v1/compliance/clauses/eu-aml__6AMLD%20%2F%20AMLR%202024__Art.18.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "eu-aml", "regulationShortName": "EU AML", "tier": 2, "topAssurance": "partial", "topic": "Customer due diligence", "version": "6AMLD / AMLR 2024" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 25, "unknown": 0 }, "clause": "Art.9", "clauseId": "eu-aml@6AMLD / AMLR 2024#Art.9", "coverageState": "covered-partial", "coveringUcCount": 25, "coveringUcs": [ "22.25.1", "22.25.2", "22.25.3", "22.25.4", "22.25.5", "22.25.6", "22.25.8", "22.25.9", "22.25.10", "22.25.11", "22.25.12", "22.25.18", "22.25.19", "22.25.20", "22.25.21", "22.25.22", "22.25.23", "22.25.27", "22.25.28", "22.25.29", "22.25.30", "22.25.31", "22.25.32", "22.25.34", "22.25.35" ], "endpoint": "/api/v1/compliance/clauses/eu-aml__6AMLD%20%2F%20AMLR%202024__Art.9.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "eu-aml", "regulationShortName": "EU AML", "tier": 2, "topAssurance": "partial", "topic": "Internal policies and controls", "version": "6AMLD / AMLR 2024" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 4, "unknown": 0 }, "clause": "Art.13", "clauseId": "eu-cra@Regulation (EU) 2024/2847#Art.13", "coverageState": "covered-full", "coveringUcCount": 5, "coveringUcs": [ "22.44.5", "12.1.4", "12.3.2", "12.3.10", "22.43.5" ], "endpoint": "/api/v1/compliance/clauses/eu-cra__Regulation%20%28EU%29%202024%2F2847__Art.13.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "eu-cra", "regulationShortName": "EU CRA", "tier": 2, "topAssurance": "full", "topic": "Obligations of manufacturers", "version": "Regulation (EU) 2024/2847" }, { "assuranceBreakdown": { "contributing": 20, "full": 1, "partial": 0, "unknown": 0 }, "clause": "Art.14", "clauseId": "eu-cra@Regulation (EU) 2024/2847#Art.14", "coverageState": "covered-full", "coveringUcCount": 21, "coveringUcs": [ "12.3.2", "22.23.1", "22.23.2", "22.23.3", "22.23.4", "22.23.5", "22.23.6", "22.23.7", "22.23.8", "22.23.9", "22.23.10", "22.23.11", "22.23.12", "22.23.13", "22.23.14", "22.23.15", "22.23.16", "22.23.17", "22.23.18", "22.23.19", "22.23.20" ], "endpoint": "/api/v1/compliance/clauses/eu-cra__Regulation%20%28EU%29%202024%2F2847__Art.14.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "eu-cra", "regulationShortName": "EU CRA", "tier": 2, "topAssurance": "full", "topic": "Reporting of actively exploited vulnerabilities", "version": "Regulation (EU) 2024/2847" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "COCON 2", "clauseId": "fca-sm-cr@current#COCON 2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.27.26" ], "endpoint": "/api/v1/compliance/clauses/fca-sm-cr__current__COCON%202.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "fca-sm-cr", "regulationShortName": "fca-sm-cr", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 3, "unknown": 0 }, "clause": "SMR 1", "clauseId": "fca-sm-cr@current#SMR 1", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.27.24", "22.27.25", "22.27.27" ], "endpoint": "/api/v1/compliance/clauses/fca-sm-cr__current__SMR%201.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "fca-sm-cr", "regulationShortName": "fca-sm-cr", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SYSC 3.2", "clauseId": "fca-sm-cr@current#SYSC 3.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.3" ], "endpoint": "/api/v1/compliance/clauses/fca-sm-cr__current__SYSC%203.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "fca-sm-cr", "regulationShortName": "fca-sm-cr", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SYSC 4.1", "clauseId": "fca-sm-cr@current#SYSC 4.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.15" ], "endpoint": "/api/v1/compliance/clauses/fca-sm-cr__current__SYSC%204.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "fca-sm-cr", "regulationShortName": "fca-sm-cr", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "COCON 2", "clauseId": "fca-smcr@current#COCON 2", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/fca-smcr__current__COCON%202.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fca-smcr", "regulationShortName": "FCA SM&CR", "tier": 2, "topAssurance": null, "topic": "Individual Conduct Rules (including acting with integrity/due care)", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SMR 1", "clauseId": "fca-smcr@current#SMR 1", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/fca-smcr__current__SMR%201.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fca-smcr", "regulationShortName": "FCA SM&CR", "tier": 2, "topAssurance": null, "topic": "Senior Management Functions, Statements of Responsibilities", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SYSC 3.2", "clauseId": "fca-smcr@current#SYSC 3.2", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/fca-smcr__current__SYSC%203.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fca-smcr", "regulationShortName": "FCA SM&CR", "tier": 2, "topAssurance": null, "topic": "Internal controls, systems and audit arrangements", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SYSC 4.1", "clauseId": "fca-smcr@current#SYSC 4.1", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/fca-smcr__current__SYSC%204.1.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "fca-smcr", "regulationShortName": "FCA SM&CR", "tier": 2, "topAssurance": null, "topic": "General organisational requirements", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 6, "unknown": 0 }, "clause": "§1.1", "clauseId": "fca-ss1-21@2021#§1.1", "coverageState": "covered-partial", "coveringUcCount": 6, "coveringUcs": [ "22.27.11", "22.27.13", "22.27.15", "22.27.16", "22.27.17", "22.27.18" ], "endpoint": "/api/v1/compliance/clauses/fca-ss1-21__2021__%C2%A71.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fca-ss1-21", "regulationShortName": "FCA SS1/21", "tier": 2, "topAssurance": "partial", "topic": "Identify important business services", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "§2.1", "clauseId": "fca-ss1-21@2021#§2.1", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "6.3.13", "22.27.12" ], "endpoint": "/api/v1/compliance/clauses/fca-ss1-21__2021__%C2%A72.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fca-ss1-21", "regulationShortName": "FCA SS1/21", "tier": 2, "topAssurance": "partial", "topic": "Set impact tolerances", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "§3.1", "clauseId": "fca-ss1-21@2021#§3.1", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "6.3.13", "22.27.14" ], "endpoint": "/api/v1/compliance/clauses/fca-ss1-21__2021__%C2%A73.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fca-ss1-21", "regulationShortName": "FCA SS1/21", "tier": 2, "topAssurance": "partial", "topic": "Scenario testing", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§11.10(d)", "clauseId": "fda-part-11@current#§11.10(d)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "7.1.21" ], "endpoint": "/api/v1/compliance/clauses/fda-part-11__current__%C2%A711.10%28d%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fda-part-11", "regulationShortName": "FDA Part 11", "tier": 2, "topAssurance": "partial", "topic": "System access limited to authorized individuals", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 2, "partial": 23, "unknown": 0 }, "clause": "§11.10(e)", "clauseId": "fda-part-11@current#§11.10(e)", "coverageState": "covered-full", "coveringUcCount": 25, "coveringUcs": [ "1.2.33", "7.1.40", "1.1.65", "1.2.51", "7.1.13", "22.17.1", "22.17.2", "22.17.3", "22.17.4", "22.17.5", "22.17.11", "22.17.12", "22.17.13", "22.17.14", "22.17.15", "22.17.16", "22.17.17", "22.17.18", "22.17.19", "22.17.20", "22.17.21", "22.17.22", "22.17.23", "22.17.24", "22.17.25" ], "endpoint": "/api/v1/compliance/clauses/fda-part-11__current__%C2%A711.10%28e%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fda-part-11", "regulationShortName": "FDA Part 11", "tier": 2, "topAssurance": "full", "topic": "Audit trails", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 5, "unknown": 0 }, "clause": "§11.200", "clauseId": "fda-part-11@current#§11.200", "coverageState": "covered-partial", "coveringUcCount": 5, "coveringUcs": [ "22.17.6", "22.17.7", "22.17.8", "22.17.9", "22.17.10" ], "endpoint": "/api/v1/compliance/clauses/fda-part-11__current__%C2%A711.200.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fda-part-11", "regulationShortName": "FDA Part 11", "tier": 2, "topAssurance": "partial", "topic": "Electronic signatures", "version": "current" }, { "assuranceBreakdown": { "contributing": 3, "full": 1, "partial": 4, "unknown": 0 }, "clause": "AC-2", "clauseId": "fedramp@Rev.5 Baselines#AC-2", "coverageState": "covered-full", "coveringUcCount": 8, "coveringUcs": [ "9.5.15", "4.1.4", "7.1.21", "9.1.3", "13.1.39", "5.2.2", "9.4.1", "17.1.8" ], "endpoint": "/api/v1/compliance/clauses/fedramp__Rev.5%20Baselines__AC-2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fedramp", "regulationShortName": "FedRAMP", "tier": 2, "topAssurance": "full", "topic": "Account management", "version": "Rev.5 Baselines" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 2, "unknown": 0 }, "clause": "AU-6", "clauseId": "fedramp@Rev.5 Baselines#AU-6", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "4.1.1", "13.1.35", "13.1.37" ], "endpoint": "/api/v1/compliance/clauses/fedramp__Rev.5%20Baselines__AU-6.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fedramp", "regulationShortName": "FedRAMP", "tier": 2, "topAssurance": "partial", "topic": "Audit review, analysis, reporting", "version": "Rev.5 Baselines" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CA-7", "clauseId": "fedramp@Rev.5 Baselines#CA-7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "10.12.39" ], "endpoint": "/api/v1/compliance/clauses/fedramp__Rev.5%20Baselines__CA-7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "fedramp", "regulationShortName": "fedramp", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev.5 Baselines" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "SI-4", "clauseId": "fedramp@Rev.5 Baselines#SI-4", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "1.1.65", "1.1.76", "1.2.51", "4.1.1" ], "endpoint": "/api/v1/compliance/clauses/fedramp__Rev.5%20Baselines__SI-4.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fedramp", "regulationShortName": "FedRAMP", "tier": 2, "topAssurance": "partial", "topic": "System monitoring", "version": "Rev.5 Baselines" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Order887", "clauseId": "ferc-cip@current#Order887", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.44" ], "endpoint": "/api/v1/compliance/clauses/ferc-cip__current__Order887.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "ferc-cip", "regulationShortName": "FERC CIP", "tier": 3, "topAssurance": "partial", "topic": "Internal network security monitoring for bulk electric systems", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Order893", "clauseId": "ferc-cip@current#Order893", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.45" ], "endpoint": "/api/v1/compliance/clauses/ferc-cip__current__Order893.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "ferc-cip", "regulationShortName": "FERC CIP", "tier": 3, "topAssurance": "partial", "topic": "Supply chain risk management for BES systems", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§99.31", "clauseId": "ferpa@20 USC §1232g#§99.31", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.35" ], "endpoint": "/api/v1/compliance/clauses/ferpa__20%20USC%20%C2%A71232g__%C2%A799.31.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "ferpa", "regulationShortName": "FERPA", "tier": 2, "topAssurance": "partial", "topic": "Conditions for disclosure without consent", "version": "20 USC §1232g" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§99.33", "clauseId": "ferpa@20 USC §1232g#§99.33", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.36" ], "endpoint": "/api/v1/compliance/clauses/ferpa__20%20USC%20%C2%A71232g__%C2%A799.33.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "ferpa", "regulationShortName": "FERPA", "tier": 2, "topAssurance": "partial", "topic": "Redisclosure and record-keeping", "version": "20 USC §1232g" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§3554", "clauseId": "fisma@2014#§3554", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "10.12.43" ], "endpoint": "/api/v1/compliance/clauses/fisma__2014__%C2%A73554.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "fisma", "regulationShortName": "fisma", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2014" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 14, "unknown": 0 }, "clause": "§3554(b)(1)", "clauseId": "fisma@2014#§3554(b)(1)", "coverageState": "covered-partial", "coveringUcCount": 14, "coveringUcs": [ "22.19.6", "22.19.7", "22.19.8", "22.19.9", "22.19.10", "22.19.11", "22.19.12", "22.19.13", "22.19.14", "22.19.15", "22.32.10", "22.32.11", "22.32.14", "22.32.15" ], "endpoint": "/api/v1/compliance/clauses/fisma__2014__%C2%A73554%28b%29%281%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fisma", "regulationShortName": "FISMA", "tier": 2, "topAssurance": "partial", "topic": "Information security program", "version": "2014" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 19, "unknown": 0 }, "clause": "§3554(b)(5)", "clauseId": "fisma@2014#§3554(b)(5)", "coverageState": "covered-partial", "coveringUcCount": 19, "coveringUcs": [ "22.19.1", "22.19.2", "22.19.3", "22.19.4", "22.19.5", "22.19.16", "22.19.17", "22.19.18", "22.19.19", "22.19.20", "22.19.21", "22.19.22", "22.19.23", "22.19.24", "22.19.25", "22.32.9", "22.32.12", "22.32.13", "22.32.16" ], "endpoint": "/api/v1/compliance/clauses/fisma__2014__%C2%A73554%28b%29%285%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "fisma", "regulationShortName": "FISMA", "tier": 2, "topAssurance": "partial", "topic": "Security controls and monitoring", "version": "2014" }, { "assuranceBreakdown": { "contributing": 2, "full": 1, "partial": 0, "unknown": 0 }, "clause": "Art.12", "clauseId": "gdpr@2016/679#Art.12", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.36.1", "22.1.19", "22.1.50" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.12.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "full", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.12(2)", "clauseId": "gdpr@2016/679#Art.12(2)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.36.5" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.12%282%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.12(6)", "clauseId": "gdpr@2016/679#Art.12(6)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.36.4" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.12%286%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.13", "clauseId": "gdpr@2016/679#Art.13", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.50" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.13.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.14", "clauseId": "gdpr@2016/679#Art.14", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.50" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.14.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "Art.15", "clauseId": "gdpr@2016/679#Art.15", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.36.1", "22.1.2" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.15.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "full", "topic": "Right of access", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.16", "clauseId": "gdpr@2016/679#Art.16", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.2" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.16.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "contributing", "topic": "Right to rectification", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 2, "full": 2, "partial": 0, "unknown": 0 }, "clause": "Art.17", "clauseId": "gdpr@2016/679#Art.17", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.36.2", "22.49.5", "22.1.2", "22.1.11" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.17.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "full", "topic": "Right to erasure", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.17(2)", "clauseId": "gdpr@2016/679#Art.17(2)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.36.2" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.17%282%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.18", "clauseId": "gdpr@2016/679#Art.18", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.1.16", "22.1.2" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.18.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "partial", "topic": "Right to restrict processing", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.19", "clauseId": "gdpr@2016/679#Art.19", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.2" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.19.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "Art.20", "clauseId": "gdpr@2016/679#Art.20", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.36.3", "22.1.2" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.20.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "full", "topic": "Right to data portability", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.21", "clauseId": "gdpr@2016/679#Art.21", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.1.46", "22.1.2" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.21.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "partial", "topic": "Right to object", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.22", "clauseId": "gdpr@2016/679#Art.22", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.1.2", "22.1.18" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.22.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "contributing", "topic": "Automated decision making", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.25", "clauseId": "gdpr@2016/679#Art.25", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.9" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.25.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "contributing", "topic": "Data protection by design and by default", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.25(1)", "clauseId": "gdpr@2016/679#Art.25(1)", "coverageState": "contributing-only", "coveringUcCount": 3, "coveringUcs": [ "22.1.46", "22.1.48", "22.1.50" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.25%281%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.25(2)", "clauseId": "gdpr@2016/679#Art.25(2)", "coverageState": "contributing-only", "coveringUcCount": 3, "coveringUcs": [ "22.1.45", "22.1.47", "22.1.49" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.25%282%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "Art.28", "clauseId": "gdpr@2016/679#Art.28", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.44.2", "22.1.15" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.28.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "full", "topic": "Processor obligations", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.28(2)", "clauseId": "gdpr@2016/679#Art.28(2)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.28" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.28%282%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.28(3)", "clauseId": "gdpr@2016/679#Art.28(3)", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.1.27", "22.1.30" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.28%283%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.28(3)(f)", "clauseId": "gdpr@2016/679#Art.28(3)(f)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.29" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.28%283%29%28f%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.28(3)(h)", "clauseId": "gdpr@2016/679#Art.28(3)(h)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.31" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.28%283%29%28h%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.28(4)", "clauseId": "gdpr@2016/679#Art.28(4)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.28" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.28%284%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.30", "clauseId": "gdpr@2016/679#Art.30", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.1.8", "22.1.43" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.30.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "contributing", "topic": "Records of processing", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 5, "full": 3, "partial": 0, "unknown": 0 }, "clause": "Art.32", "clauseId": "gdpr@2016/679#Art.32", "coverageState": "covered-full", "coveringUcCount": 8, "coveringUcs": [ "22.35.2", "22.35.3", "22.41.1", "10.3.89", "10.11.62", "22.1.7", "22.1.10", "22.1.41" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.32.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "full", "topic": "Security of processing", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.32(1)(a)", "clauseId": "gdpr@2016/679#Art.32(1)(a)", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.1.21", "22.1.23" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.32%281%29%28a%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.32(1)(b)", "clauseId": "gdpr@2016/679#Art.32(1)(b)", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.35.1", "22.35.4", "22.1.22" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.32%281%29%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.32(1)(b)(c)", "clauseId": "gdpr@2016/679#Art.32(1)(b)(c)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.26" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.32%281%29%28b%29%28c%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.32(1)(c)", "clauseId": "gdpr@2016/679#Art.32(1)(c)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.25" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.32%281%29%28c%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.32(1)(d)", "clauseId": "gdpr@2016/679#Art.32(1)(d)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.24" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.32%281%29%28d%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.32(4)", "clauseId": "gdpr@2016/679#Art.32(4)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.46.5" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.32%284%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 3, "full": 2, "partial": 0, "unknown": 0 }, "clause": "Art.33", "clauseId": "gdpr@2016/679#Art.33", "coverageState": "covered-full", "coveringUcCount": 5, "coveringUcs": [ "22.39.1", "22.39.2", "22.1.3", "22.1.29", "22.9.4" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.33.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "full", "topic": "Breach notification to supervisory authority", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.33(1)", "clauseId": "gdpr@2016/679#Art.33(1)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.39.5" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.33%281%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.33(3)", "clauseId": "gdpr@2016/679#Art.33(3)", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.39.4", "22.1.12" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.33%283%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "Art.34", "clauseId": "gdpr@2016/679#Art.34", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.39.3", "22.1.13" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.34.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "full", "topic": "Breach communication to data subjects", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.35", "clauseId": "gdpr@2016/679#Art.35", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.14" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.35.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "contributing", "topic": "DPIA", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.35(7)", "clauseId": "gdpr@2016/679#Art.35(7)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.32" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.35%287%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.35(7)(b)", "clauseId": "gdpr@2016/679#Art.35(7)(b)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.33" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.35%287%29%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.35(7)(d)", "clauseId": "gdpr@2016/679#Art.35(7)(d)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.35" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.35%287%29%28d%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.36", "clauseId": "gdpr@2016/679#Art.36", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.34" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.36.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 4, "full": 3, "partial": 0, "unknown": 0 }, "clause": "Art.44", "clauseId": "gdpr@2016/679#Art.44", "coverageState": "covered-full", "coveringUcCount": 7, "coveringUcs": [ "22.38.1", "22.38.3", "22.38.5", "22.1.6", "22.1.36", "22.1.38", "22.1.44" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.44.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "full", "topic": "International transfers — general principle", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 5, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.45", "clauseId": "gdpr@2016/679#Art.45", "coverageState": "covered-partial", "coveringUcCount": 7, "coveringUcs": [ "22.38.2", "22.38.5", "22.1.6", "22.1.36", "22.1.38", "22.1.39", "22.1.44" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.45.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "partial", "topic": "Transfers via adequacy decision", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 4, "full": 2, "partial": 1, "unknown": 0 }, "clause": "Art.46", "clauseId": "gdpr@2016/679#Art.46", "coverageState": "covered-full", "coveringUcCount": 7, "coveringUcs": [ "22.38.2", "22.38.4", "22.38.1", "22.1.6", "22.1.36", "22.1.38", "22.1.44" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.46.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "full", "topic": "Transfers subject to safeguards", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.46(2)(c)", "clauseId": "gdpr@2016/679#Art.46(2)(c)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.37" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.46%282%29%28c%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 4, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.47", "clauseId": "gdpr@2016/679#Art.47", "coverageState": "contributing-only", "coveringUcCount": 4, "coveringUcs": [ "22.1.6", "22.1.38", "22.1.40", "22.1.44" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.47.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.48", "clauseId": "gdpr@2016/679#Art.48", "coverageState": "contributing-only", "coveringUcCount": 3, "coveringUcs": [ "22.1.6", "22.1.38", "22.1.44" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.48.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.49", "clauseId": "gdpr@2016/679#Art.49", "coverageState": "contributing-only", "coveringUcCount": 3, "coveringUcs": [ "22.1.6", "22.1.38", "22.1.44" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.49.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 2, "partial": 0, "unknown": 0 }, "clause": "Art.5", "clauseId": "gdpr@2016/679#Art.5", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.49.1", "22.49.2", "22.1.1" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.5.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "full", "topic": "Principles of processing", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.5(1)(b)", "clauseId": "gdpr@2016/679#Art.5(1)(b)", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.37.4", "22.1.48" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.5%281%29%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.5(1)(c)", "clauseId": "gdpr@2016/679#Art.5(1)(c)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.47" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.5%281%29%28c%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 2, "full": 1, "partial": 0, "unknown": 0 }, "clause": "Art.5(1)(e)", "clauseId": "gdpr@2016/679#Art.5(1)(e)", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.49.4", "22.1.4", "22.1.49" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.5%281%29%28e%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "full", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.5(1)(f)", "clauseId": "gdpr@2016/679#Art.5(1)(f)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.10" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.5%281%29%28f%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 4, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.5(2)", "clauseId": "gdpr@2016/679#Art.5(2)", "coverageState": "contributing-only", "coveringUcCount": 4, "coveringUcs": [ "22.1.17", "22.1.41", "22.1.42", "22.1.43" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.5%282%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 5, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.6", "clauseId": "gdpr@2016/679#Art.6", "coverageState": "covered-partial", "coveringUcCount": 6, "coveringUcs": [ "22.37.1", "10.4.75", "10.4.79", "10.7.154", "11.3.11", "22.1.1" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.6.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "partial", "topic": "Lawful basis", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.6(1)(f)", "clauseId": "gdpr@2016/679#Art.6(1)(f)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.20" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.6%281%29%28f%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 12, "full": 1, "partial": 3, "unknown": 0 }, "clause": "Art.7", "clauseId": "gdpr@2016/679#Art.7", "coverageState": "covered-full", "coveringUcCount": 16, "coveringUcs": [ "22.37.2", "22.1.5", "22.8.39", "22.37.1", "9.3.12", "10.4.24", "10.4.39", "10.4.45", "10.4.111", "10.4.114", "10.4.115", "10.7.137", "10.7.166", "10.7.167", "10.7.168", "22.1.46" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.7.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "gdpr", "regulationShortName": "GDPR", "tier": 1, "topAssurance": "full", "topic": "Conditions for consent", "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.7(1)", "clauseId": "gdpr@2016/679#Art.7(1)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.37.5" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.7%281%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.7(3)", "clauseId": "gdpr@2016/679#Art.7(3)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.16" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.7%283%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.72", "clauseId": "gdpr@2016/679#Art.72", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.1.3" ], "endpoint": "/api/v1/compliance/clauses/gdpr__2016%2F679__Art.72.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "gdpr", "regulationShortName": "gdpr", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2016/679" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§314.4(b)", "clauseId": "glba@16 CFR 314 (2023 amendments)#§314.4(b)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.37" ], "endpoint": "/api/v1/compliance/clauses/glba__16%20CFR%20314%20%282023%20amendments%29__%C2%A7314.4%28b%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "glba", "regulationShortName": "GLBA", "tier": 2, "topAssurance": "partial", "topic": "Risk assessment", "version": "16 CFR 314 (2023 amendments)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§314.4(c)(1)", "clauseId": "glba@16 CFR 314 (2023 amendments)#§314.4(c)(1)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.38" ], "endpoint": "/api/v1/compliance/clauses/glba__16%20CFR%20314%20%282023%20amendments%29__%C2%A7314.4%28c%29%281%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "glba", "regulationShortName": "GLBA", "tier": 2, "topAssurance": "partial", "topic": "Access controls", "version": "16 CFR 314 (2023 amendments)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§314.4(d)(2)", "clauseId": "glba@16 CFR 314 (2023 amendments)#§314.4(d)(2)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.39" ], "endpoint": "/api/v1/compliance/clauses/glba__16%20CFR%20314%20%282023%20amendments%29__%C2%A7314.4%28d%29%282%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "glba", "regulationShortName": "GLBA", "tier": 2, "topAssurance": "partial", "topic": "Continuous monitoring", "version": "16 CFR 314 (2023 amendments)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§164.308(a)(5)", "clauseId": "hipaa@2013-final#§164.308(a)(5)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.46.5" ], "endpoint": "/api/v1/compliance/clauses/hipaa__2013-final__%C2%A7164.308%28a%29%285%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa", "regulationShortName": "hipaa", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§164.308(a)(5)(ii)(A)", "clauseId": "hipaa@2013-final#§164.308(a)(5)(ii)(A)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.46.3" ], "endpoint": "/api/v1/compliance/clauses/hipaa__2013-final__%C2%A7164.308%28a%29%285%29%28ii%29%28A%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa", "regulationShortName": "hipaa", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§164.310(d)(2)(i)", "clauseId": "hipaa@2013-final#§164.310(d)(2)(i)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.49.5" ], "endpoint": "/api/v1/compliance/clauses/hipaa__2013-final__%C2%A7164.310%28d%29%282%29%28i%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa", "regulationShortName": "hipaa", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 1, "unknown": 0 }, "clause": "§164.312(b)", "clauseId": "hipaa@2013-final#§164.312(b)", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.35.1", "22.35.5", "10.12.16" ], "endpoint": "/api/v1/compliance/clauses/hipaa__2013-final__%C2%A7164.312%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa", "regulationShortName": "hipaa", "tier": null, "topAssurance": "full", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "§164.312(c)(1)", "clauseId": "hipaa@2013-final#§164.312(c)(1)", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.35.4" ], "endpoint": "/api/v1/compliance/clauses/hipaa__2013-final__%C2%A7164.312%28c%29%281%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa", "regulationShortName": "hipaa", "tier": null, "topAssurance": "full", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.312(e)", "clauseId": "hipaa@2013-final#§164.312(e)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "10.12.17" ], "endpoint": "/api/v1/compliance/clauses/hipaa__2013-final__%C2%A7164.312%28e%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa", "regulationShortName": "hipaa", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 1, "unknown": 0 }, "clause": "§164.312(e)(1)", "clauseId": "hipaa@2013-final#§164.312(e)(1)", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.41.4", "22.45.4" ], "endpoint": "/api/v1/compliance/clauses/hipaa__2013-final__%C2%A7164.312%28e%29%281%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa", "regulationShortName": "hipaa", "tier": null, "topAssurance": "full", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§164.316(b)(2)", "clauseId": "hipaa@2013-final#§164.316(b)(2)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.49.4" ], "endpoint": "/api/v1/compliance/clauses/hipaa__2013-final__%C2%A7164.316%28b%29%282%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa", "regulationShortName": "hipaa", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 3, "unknown": 0 }, "clause": "§164.502(a)", "clauseId": "hipaa-privacy@current#§164.502(a)", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "7.1.21", "11.1.5", "11.1.6", "15.3.37" ], "endpoint": "/api/v1/compliance/clauses/hipaa-privacy__current__%C2%A7164.502%28a%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hipaa-privacy", "regulationShortName": "HIPAA Privacy", "tier": 2, "topAssurance": "partial", "topic": "Uses and disclosures of PHI — general rules", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§164.504(e)", "clauseId": "hipaa-privacy@current#§164.504(e)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.4" ], "endpoint": "/api/v1/compliance/clauses/hipaa-privacy__current__%C2%A7164.504%28e%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hipaa-privacy", "regulationShortName": "HIPAA Privacy", "tier": 2, "topAssurance": "partial", "topic": "Business Associate contracts", "version": "current" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.514(a)", "clauseId": "hipaa-privacy@current#§164.514(a)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "11.1.5" ], "endpoint": "/api/v1/compliance/clauses/hipaa-privacy__current__%C2%A7164.514%28a%29.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "hipaa-privacy", "regulationShortName": "HIPAA Privacy", "tier": 2, "topAssurance": "contributing", "topic": "De-identification of PHI", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§164.528", "clauseId": "hipaa-privacy@current#§164.528", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.16" ], "endpoint": "/api/v1/compliance/clauses/hipaa-privacy__current__%C2%A7164.528.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "hipaa-privacy", "regulationShortName": "HIPAA Privacy", "tier": 2, "topAssurance": "partial", "topic": "Accounting of disclosures", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "§164.308(a)(1)", "clauseId": "hipaa-security@2013-final#§164.308(a)(1)", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "22.10.1", "22.10.2", "22.10.22", "22.10.55" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28a%29%281%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "partial", "topic": "Security management process", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.308(a)(1)(ii)(A)", "clauseId": "hipaa-security@2013-final#§164.308(a)(1)(ii)(A)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.49" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28a%29%281%29%28ii%29%28A%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.308(a)(1)(ii)(B)", "clauseId": "hipaa-security@2013-final#§164.308(a)(1)(ii)(B)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.10" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28a%29%281%29%28ii%29%28B%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.308(a)(1)(ii)(C)", "clauseId": "hipaa-security@2013-final#§164.308(a)(1)(ii)(C)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.12" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28a%29%281%29%28ii%29%28C%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.308(a)(1)(ii)(D)", "clauseId": "hipaa-security@2013-final#§164.308(a)(1)(ii)(D)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.3" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28a%29%281%29%28ii%29%28D%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§164.308(a)(3)", "clauseId": "hipaa-security@2013-final#§164.308(a)(3)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.10.4" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28a%29%283%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "partial", "topic": "Workforce security", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.308(a)(3)(ii)(C)", "clauseId": "hipaa-security@2013-final#§164.308(a)(3)(ii)(C)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.5" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28a%29%283%29%28ii%29%28C%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.308(a)(4)", "clauseId": "hipaa-security@2013-final#§164.308(a)(4)", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28a%29%284%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": null, "topic": "Information access management", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "§164.308(a)(5)", "clauseId": "hipaa-security@2013-final#§164.308(a)(5)", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.46.1", "22.10.6" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28a%29%285%29.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "full", "topic": "Security awareness and training", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 2, "unknown": 0 }, "clause": "§164.308(a)(6)", "clauseId": "hipaa-security@2013-final#§164.308(a)(6)", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.10.56", "22.39.1", "22.10.7" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28a%29%286%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "partial", "topic": "Security incident procedures", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 1, "unknown": 0 }, "clause": "§164.308(a)(7)", "clauseId": "hipaa-security@2013-final#§164.308(a)(7)", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.45.2", "22.10.8" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28a%29%287%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "full", "topic": "Contingency plan", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§164.308(a)(8)", "clauseId": "hipaa-security@2013-final#§164.308(a)(8)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.10.9" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28a%29%288%29.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "partial", "topic": "Evaluation", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.308(b)", "clauseId": "hipaa-security@2013-final#§164.308(b)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.51" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.308(b)(1)", "clauseId": "hipaa-security@2013-final#§164.308(b)(1)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.11" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28b%29%281%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.308(b)(3)", "clauseId": "hipaa-security@2013-final#§164.308(b)(3)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.52" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.308%28b%29%283%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§164.310(a)(1)", "clauseId": "hipaa-security@2013-final#§164.310(a)(1)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.10.31" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.310%28a%29%281%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "partial", "topic": "Facility access controls", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.310(b)", "clauseId": "hipaa-security@2013-final#§164.310(b)", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.10.28", "22.10.32" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.310%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.310(c)", "clauseId": "hipaa-security@2013-final#§164.310(c)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.32" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.310%28c%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 2, "unknown": 0 }, "clause": "§164.310(d)(1)", "clauseId": "hipaa-security@2013-final#§164.310(d)(1)", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.49.2", "22.10.29", "22.49.1" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.310%28d%29%281%29.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "full", "topic": "Device and media controls", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.310(d)(2)", "clauseId": "hipaa-security@2013-final#§164.310(d)(2)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.30" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.310%28d%29%282%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.312(a)(1)", "clauseId": "hipaa-security@2013-final#§164.312(a)(1)", "coverageState": "contributing-only", "coveringUcCount": 3, "coveringUcs": [ "22.10.21", "22.10.24", "22.10.25" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.312%28a%29%281%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "contributing", "topic": "Access control", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.312(a)(2)(i)", "clauseId": "hipaa-security@2013-final#§164.312(a)(2)(i)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.13" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.312%28a%29%282%29%28i%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.312(a)(2)(ii)", "clauseId": "hipaa-security@2013-final#§164.312(a)(2)(ii)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.14" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.312%28a%29%282%29%28ii%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.312(a)(2)(iii)", "clauseId": "hipaa-security@2013-final#§164.312(a)(2)(iii)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.15" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.312%28a%29%282%29%28iii%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "§164.312(a)(2)(iv)", "clauseId": "hipaa-security@2013-final#§164.312(a)(2)(iv)", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.41.1", "22.10.16" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.312%28a%29%282%29%28iv%29.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "full", "topic": "Encryption and decryption", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.312(b)", "clauseId": "hipaa-security@2013-final#§164.312(b)", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.10.17", "22.10.36" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.312%28b%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "contributing", "topic": "Audit controls", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 2, "full": 1, "partial": 0, "unknown": 0 }, "clause": "§164.312(c)(1)", "clauseId": "hipaa-security@2013-final#§164.312(c)(1)", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.35.2", "22.10.18", "22.10.27" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.312%28c%29%281%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "full", "topic": "Integrity", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.312(d)", "clauseId": "hipaa-security@2013-final#§164.312(d)", "coverageState": "contributing-only", "coveringUcCount": 3, "coveringUcs": [ "22.10.19", "22.10.23", "22.10.42" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.312%28d%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "contributing", "topic": "Person or entity authentication", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 3, "full": 1, "partial": 0, "unknown": 0 }, "clause": "§164.312(e)(1)", "clauseId": "hipaa-security@2013-final#§164.312(e)(1)", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.41.2", "22.10.20", "22.10.22", "22.10.26" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.312%28e%29%281%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hipaa-security", "regulationShortName": "HIPAA Security", "tier": 1, "topAssurance": "full", "topic": "Transmission security", "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.402", "clauseId": "hipaa-security@2013-final#§164.402", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.10.44", "22.10.48" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.402.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 2, "full": 1, "partial": 0, "unknown": 0 }, "clause": "§164.404", "clauseId": "hipaa-security@2013-final#§164.404", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.39.3", "22.10.43", "22.10.44" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.404.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "full", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.404(b)", "clauseId": "hipaa-security@2013-final#§164.404(b)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.45" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.404%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.406(c)", "clauseId": "hipaa-security@2013-final#§164.406(c)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.47" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.406%28c%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.408", "clauseId": "hipaa-security@2013-final#§164.408", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.10.46", "22.10.50" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.408.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.502(a)", "clauseId": "hipaa-security@2013-final#§164.502(a)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.39" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.502%28a%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.502(a)(1)", "clauseId": "hipaa-security@2013-final#§164.502(a)(1)", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.10.35", "22.10.40" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.502%28a%29%281%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.502(a)(2)(ii)", "clauseId": "hipaa-security@2013-final#§164.502(a)(2)(ii)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.34" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.502%28a%29%282%29%28ii%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 4, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.502(b)", "clauseId": "hipaa-security@2013-final#§164.502(b)", "coverageState": "contributing-only", "coveringUcCount": 4, "coveringUcs": [ "22.10.33", "22.10.36", "22.10.37", "22.10.54" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.502%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 4, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.502(e)", "clauseId": "hipaa-security@2013-final#§164.502(e)", "coverageState": "contributing-only", "coveringUcCount": 4, "coveringUcs": [ "22.10.51", "22.10.52", "22.10.53", "22.10.55" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.502%28e%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.502(f)", "clauseId": "hipaa-security@2013-final#§164.502(f)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.38" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.502%28f%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.512(i)", "clauseId": "hipaa-security@2013-final#§164.512(i)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.40" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.512%28i%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.514(d)", "clauseId": "hipaa-security@2013-final#§164.514(d)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.33" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.514%28d%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.514(e)", "clauseId": "hipaa-security@2013-final#§164.514(e)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.54" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.514%28e%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.528", "clauseId": "hipaa-security@2013-final#§164.528", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.41" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.528.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§164.530(c)", "clauseId": "hipaa-security@2013-final#§164.530(c)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.10.42" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security__2013-final__%C2%A7164.530%28c%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security", "regulationShortName": "hipaa-security", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "§164.308(a)(4)", "clauseId": "hipaa-security-rule@2013-final#§164.308(a)(4)", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.10.21" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security-rule__2013-final__%C2%A7164.308%28a%29%284%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security-rule", "regulationShortName": "hipaa-security-rule", "tier": null, "topAssurance": "full", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "§164.308(a)(5)", "clauseId": "hipaa-security-rule@2013-final#§164.308(a)(5)", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.6.53" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security-rule__2013-final__%C2%A7164.308%28a%29%285%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security-rule", "regulationShortName": "hipaa-security-rule", "tier": null, "topAssurance": "full", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 0, "full": 2, "partial": 0, "unknown": 0 }, "clause": "§164.312(e)(1)", "clauseId": "hipaa-security-rule@2013-final#§164.312(e)(1)", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.8.31", "22.8.38" ], "endpoint": "/api/v1/compliance/clauses/hipaa-security-rule__2013-final__%C2%A7164.312%28e%29%281%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "hipaa-security-rule", "regulationShortName": "hipaa-security-rule", "tier": null, "topAssurance": "full", "topic": null, "version": "2013-final" }, { "assuranceBreakdown": { "contributing": 2, "full": 1, "partial": 6, "unknown": 0 }, "clause": "01.b", "clauseId": "hitrust@v11#01.b", "coverageState": "covered-full", "coveringUcCount": 9, "coveringUcs": [ "9.1.3", "4.1.4", "7.1.21", "9.1.1", "9.4.1", "9.5.15", "13.1.39", "1.1.108", "9.3.1" ], "endpoint": "/api/v1/compliance/clauses/hitrust__v11__01.b.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hitrust", "regulationShortName": "HITRUST", "tier": 2, "topAssurance": "full", "topic": "User access management", "version": "v11" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 6, "unknown": 0 }, "clause": "09.aa", "clauseId": "hitrust@v11#09.aa", "coverageState": "covered-partial", "coveringUcCount": 8, "coveringUcs": [ "1.1.65", "1.2.33", "7.1.40", "13.1.35", "13.1.36", "13.1.37", "1.2.51", "12.1.4" ], "endpoint": "/api/v1/compliance/clauses/hitrust__v11__09.aa.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hitrust", "regulationShortName": "HITRUST", "tier": 2, "topAssurance": "partial", "topic": "Audit logging", "version": "v11" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 5, "unknown": 0 }, "clause": "§3", "clauseId": "hkma-tm-g-2@current#§3", "coverageState": "covered-partial", "coveringUcCount": 5, "coveringUcs": [ "22.30.8", "22.30.9", "22.30.10", "22.30.11", "22.30.12" ], "endpoint": "/api/v1/compliance/clauses/hkma-tm-g-2__current__%C2%A73.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "hkma-tm-g-2", "regulationShortName": "HKMA TM-G-2", "tier": 2, "topAssurance": "partial", "topic": "Governance of technology risk", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "4.2.2", "clauseId": "iec-62443@2013-ongoing#4.2.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.1" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__4.2.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "4.2.3", "clauseId": "iec-62443@2013-ongoing#4.2.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.2" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__4.2.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "4.3.2.6", "clauseId": "iec-62443@2013-ongoing#4.3.2.6", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.3" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__4.3.2.6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "4.3.3.3", "clauseId": "iec-62443@2013-ongoing#4.3.3.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.9" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__4.3.3.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "4.3.3.4", "clauseId": "iec-62443@2013-ongoing#4.3.3.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.4" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__4.3.3.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "4.3.4.3", "clauseId": "iec-62443@2013-ongoing#4.3.4.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.6" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__4.3.4.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "4.3.4.4", "clauseId": "iec-62443@2013-ongoing#4.3.4.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.8" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__4.3.4.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "4.3.4.5", "clauseId": "iec-62443@2013-ongoing#4.3.4.5", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.5" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__4.3.4.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "4.4.3", "clauseId": "iec-62443@2013-ongoing#4.4.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.7" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__4.4.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "4.4.3.2", "clauseId": "iec-62443@2013-ongoing#4.4.3.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.10" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__4.4.3.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CR 1.1", "clauseId": "iec-62443@2013-ongoing#CR 1.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.36" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__CR%201.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CR 2.1", "clauseId": "iec-62443@2013-ongoing#CR 2.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.37" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__CR%202.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CR 2.8", "clauseId": "iec-62443@2013-ongoing#CR 2.8", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.38" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__CR%202.8.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CR 3.4", "clauseId": "iec-62443@2013-ongoing#CR 3.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.39" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__CR%203.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CR 4.1", "clauseId": "iec-62443@2013-ongoing#CR 4.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.40" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__CR%204.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CR 5.1", "clauseId": "iec-62443@2013-ongoing#CR 5.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.41" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__CR%205.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CR 6.1", "clauseId": "iec-62443@2013-ongoing#CR 6.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.42" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__CR%206.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CR 6.2", "clauseId": "iec-62443@2013-ongoing#CR 6.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.43" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__CR%206.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CR 7.1", "clauseId": "iec-62443@2013-ongoing#CR 7.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.44" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__CR%207.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CR 7.2", "clauseId": "iec-62443@2013-ongoing#CR 7.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.45" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__CR%207.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 2, "full": 1, "partial": 6, "unknown": 0 }, "clause": "FR 6.2", "clauseId": "iec-62443@2013-ongoing#FR 6.2", "coverageState": "covered-full", "coveringUcCount": 9, "coveringUcs": [ "14.9.22", "14.2.4", "14.2.9", "14.6.6", "17.3.3", "22.15.48", "22.15.50", "14.9.14", "17.1.8" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__FR%206.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iec-62443", "regulationShortName": "IEC 62443", "tier": 2, "topAssurance": "full", "topic": "Continuous monitoring", "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "SR 1.1", "clauseId": "iec-62443@2013-ongoing#SR 1.1", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "22.15.11", "22.15.51", "22.15.53", "22.15.55" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%201.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iec-62443", "regulationShortName": "IEC 62443", "tier": 2, "topAssurance": "partial", "topic": "Human user identification and authentication", "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 1.13", "clauseId": "iec-62443@2013-ongoing#SR 1.13", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.17" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%201.13.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 1.2", "clauseId": "iec-62443@2013-ongoing#SR 1.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.12" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%201.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 1.3", "clauseId": "iec-62443@2013-ongoing#SR 1.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.13" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%201.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 1.5", "clauseId": "iec-62443@2013-ongoing#SR 1.5", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.14" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%201.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 1.7", "clauseId": "iec-62443@2013-ongoing#SR 1.7", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.15" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%201.7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 1.9", "clauseId": "iec-62443@2013-ongoing#SR 1.9", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.16" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%201.9.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 2.1", "clauseId": "iec-62443@2013-ongoing#SR 2.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.18" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%202.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 2.10", "clauseId": "iec-62443@2013-ongoing#SR 2.10", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.24" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%202.10.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 2.11", "clauseId": "iec-62443@2013-ongoing#SR 2.11", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.25" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%202.11.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 2.12", "clauseId": "iec-62443@2013-ongoing#SR 2.12", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.26" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%202.12.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 2.4", "clauseId": "iec-62443@2013-ongoing#SR 2.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.19" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%202.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 2.5", "clauseId": "iec-62443@2013-ongoing#SR 2.5", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.20" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%202.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 2.6", "clauseId": "iec-62443@2013-ongoing#SR 2.6", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.21" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%202.6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "SR 2.8", "clauseId": "iec-62443@2013-ongoing#SR 2.8", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.15.22", "22.15.52" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%202.8.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iec-62443", "regulationShortName": "IEC 62443", "tier": 2, "topAssurance": "partial", "topic": "Auditable events", "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 2.9", "clauseId": "iec-62443@2013-ongoing#SR 2.9", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.23" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%202.9.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "iec-62443", "regulationShortName": "IEC 62443", "tier": 2, "topAssurance": "partial", "topic": "Audit storage capacity", "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 3.1", "clauseId": "iec-62443@2013-ongoing#SR 3.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.27" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%203.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 3.3", "clauseId": "iec-62443@2013-ongoing#SR 3.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.28" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%203.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 3.4", "clauseId": "iec-62443@2013-ongoing#SR 3.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.29" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%203.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 3.5", "clauseId": "iec-62443@2013-ongoing#SR 3.5", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.30" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%203.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 4.1", "clauseId": "iec-62443@2013-ongoing#SR 4.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.31" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%204.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 4.3", "clauseId": "iec-62443@2013-ongoing#SR 4.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.32" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%204.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 5, "unknown": 0 }, "clause": "SR 5.1", "clauseId": "iec-62443@2013-ongoing#SR 5.1", "coverageState": "covered-partial", "coveringUcCount": 5, "coveringUcs": [ "22.15.33", "22.15.46", "22.15.47", "22.15.49", "22.15.54" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%205.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 5.2", "clauseId": "iec-62443@2013-ongoing#SR 5.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.34" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%205.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR 5.4", "clauseId": "iec-62443@2013-ongoing#SR 5.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.15.35" ], "endpoint": "/api/v1/compliance/clauses/iec-62443__2013-ongoing__SR%205.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iec-62443", "regulationShortName": "iec-62443", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013-ongoing" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.12.4.1", "clauseId": "iso-27001@2013#A.12.4.1", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2013__A.12.4.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Event logging (2013)", "version": "2013" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.12.4.2", "clauseId": "iso-27001@2013#A.12.4.2", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2013__A.12.4.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Protection of log information (2013)", "version": "2013" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.12.4.3", "clauseId": "iso-27001@2013#A.12.4.3", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2013__A.12.4.3.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Administrator and operator logs (2013)", "version": "2013" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.16.1.2", "clauseId": "iso-27001@2013#A.16.1.2", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2013__A.16.1.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Reporting information security events (2013)", "version": "2013" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.9.2.5", "clauseId": "iso-27001@2013#A.9.2.5", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2013__A.9.2.5.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Review of user access rights (2013)", "version": "2013" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "6.1", "clauseId": "iso-27001@2022#6.1", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__6.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Risk assessment", "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "6.2", "clauseId": "iso-27001@2022#6.2", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__6.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Information-security objectives", "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "7.2", "clauseId": "iso-27001@2022#7.2", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__7.2.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Competence", "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "7.5", "clauseId": "iso-27001@2022#7.5", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__7.5.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Documented information", "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "8.1", "clauseId": "iso-27001@2022#8.1", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__8.1.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Operational planning", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "8.2", "clauseId": "iso-27001@2022#8.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.9.7" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__8.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "contributing", "topic": "Information-security risk assessment", "version": "2022" }, { "assuranceBreakdown": { "contributing": 4, "full": 0, "partial": 0, "unknown": 0 }, "clause": "9.1", "clauseId": "iso-27001@2022#9.1", "coverageState": "contributing-only", "coveringUcCount": 4, "coveringUcs": [ "22.9.6", "22.9.7", "22.9.9", "22.9.10" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__9.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "contributing", "topic": "Monitoring, measurement, analysis, evaluation", "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "9.2", "clauseId": "iso-27001@2022#9.2", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__9.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Internal audit", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.10.1.2", "clauseId": "iso-27001@2022#A.10.1.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.5" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.10.1.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.12.4", "clauseId": "iso-27001@2022#A.12.4", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.2" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.12.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.13.1.1", "clauseId": "iso-27001@2022#A.13.1.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.6" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.13.1.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.15.1.2", "clauseId": "iso-27001@2022#A.15.1.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.7" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.15.1.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.5.1", "clauseId": "iso-27001@2022#A.5.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.9" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.5.15", "clauseId": "iso-27001@2022#A.5.15", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.40.2" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.15.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "full", "topic": "Access control", "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.5.18", "clauseId": "iso-27001@2022#A.5.18", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.40.3" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.18.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "full", "topic": "Access rights review", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.5.2", "clauseId": "iso-27001@2022#A.5.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.10" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.5.23", "clauseId": "iso-27001@2022#A.5.23", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.13" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.23.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "contributing", "topic": "Information security in cloud services (2022 new)", "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.5.24", "clauseId": "iso-27001@2022#A.5.24", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.24.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Incident management planning", "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.5.25", "clauseId": "iso-27001@2022#A.5.25", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.25.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": null, "topic": "Assessment and decision on events", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.5.29", "clauseId": "iso-27001@2022#A.5.29", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.14" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.5.3", "clauseId": "iso-27001@2022#A.5.3", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.48.1", "22.6.8" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.5.30", "clauseId": "iso-27001@2022#A.5.30", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.15" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.30.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.5.33", "clauseId": "iso-27001@2022#A.5.33", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.49.3" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.33.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.5.35", "clauseId": "iso-27001@2022#A.5.35", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.47.3" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.35.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 5, "full": 1, "partial": 1, "unknown": 0 }, "clause": "A.5.36", "clauseId": "iso-27001@2022#A.5.36", "coverageState": "covered-full", "coveringUcCount": 7, "coveringUcs": [ "22.47.1", "22.47.5", "22.6.16", "22.9.1", "22.9.2", "22.9.3", "22.9.5" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.36.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.5.7", "clauseId": "iso-27001@2022#A.5.7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.11" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.7.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "contributing", "topic": "Threat intelligence (2022 new)", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.5.8", "clauseId": "iso-27001@2022#A.5.8", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.12" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.5.8.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.6.1", "clauseId": "iso-27001@2022#A.6.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.17" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.6.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.6.3", "clauseId": "iso-27001@2022#A.6.3", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.46.5", "22.6.18" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.6.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.6.4", "clauseId": "iso-27001@2022#A.6.4", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.19" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.6.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.6.7", "clauseId": "iso-27001@2022#A.6.7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.20" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.6.7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.7.1", "clauseId": "iso-27001@2022#A.7.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.21" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.7.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.7.10", "clauseId": "iso-27001@2022#A.7.10", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.23" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.7.10.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.7.14", "clauseId": "iso-27001@2022#A.7.14", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.24" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.7.14.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.7.4", "clauseId": "iso-27001@2022#A.7.4", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.22" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.7.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.1", "clauseId": "iso-27001@2022#A.8.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.25" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.10", "clauseId": "iso-27001@2022#A.8.10", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.33" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.10.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.11", "clauseId": "iso-27001@2022#A.8.11", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.34" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.11.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.12", "clauseId": "iso-27001@2022#A.8.12", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.35" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.12.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "contributing", "topic": "Data leakage prevention", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.13", "clauseId": "iso-27001@2022#A.8.13", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.36" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.13.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.14", "clauseId": "iso-27001@2022#A.8.14", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.37" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.14.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.15", "clauseId": "iso-27001@2022#A.8.15", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.38" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.15.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "contributing", "topic": "Logging", "version": "2022" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.16", "clauseId": "iso-27001@2022#A.8.16", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.6.1", "22.6.39" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.16.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "contributing", "topic": "Monitoring activities", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.17", "clauseId": "iso-27001@2022#A.8.17", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.40" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.17.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "contributing", "topic": "Clock synchronisation", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.2", "clauseId": "iso-27001@2022#A.8.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.26" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "contributing", "topic": "Privileged access rights", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.2.3", "clauseId": "iso-27001@2022#A.8.2.3", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.4" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.2.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.20", "clauseId": "iso-27001@2022#A.8.20", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.41" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.20.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.21", "clauseId": "iso-27001@2022#A.8.21", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.42" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.21.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.22", "clauseId": "iso-27001@2022#A.8.22", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.43" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.22.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.23", "clauseId": "iso-27001@2022#A.8.23", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.42" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.23.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "contributing", "topic": "Web filtering (2022 new)", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.24", "clauseId": "iso-27001@2022#A.8.24", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.44" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.24.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.25", "clauseId": "iso-27001@2022#A.8.25", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.45" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.25.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "contributing", "topic": "Secure development life cycle", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.26", "clauseId": "iso-27001@2022#A.8.26", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.45" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.26.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.28", "clauseId": "iso-27001@2022#A.8.28", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.45" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.28.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "contributing", "topic": "Secure coding (2022 new)", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.3", "clauseId": "iso-27001@2022#A.8.3", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.27" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.8.30", "clauseId": "iso-27001@2022#A.8.30", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.48.3" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.30.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.5", "clauseId": "iso-27001@2022#A.8.5", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.28" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.6", "clauseId": "iso-27001@2022#A.8.6", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.29" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.8.7", "clauseId": "iso-27001@2022#A.8.7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.30" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 2, "partial": 1, "unknown": 0 }, "clause": "A.8.8", "clauseId": "iso-27001@2022#A.8.8", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.43.1", "22.43.4", "5.13.38", "22.6.31" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.8.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.8.9", "clauseId": "iso-27001@2022#A.8.9", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.42.5", "22.6.32" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.8.9.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "iso-27001", "regulationShortName": "ISO 27001", "tier": 1, "topAssurance": "full", "topic": "Configuration management (2022 new)", "version": "2022" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A.9.2.5", "clauseId": "iso-27001@2022#A.9.2.5", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.3" ], "endpoint": "/api/v1/compliance/clauses/iso-27001__2022__A.9.2.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-27001", "regulationShortName": "iso-27001", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.12.4.1", "clauseId": "iso-iec-27001@2013#A.12.4.1", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.6.2" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2013__A.12.4.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2013" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.12.4.2", "clauseId": "iso-iec-27001@2013#A.12.4.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.38" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2013__A.12.4.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.12.4.3", "clauseId": "iso-iec-27001@2013#A.12.4.3", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.6.26" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2013__A.12.4.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2013" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.16.1.2", "clauseId": "iso-iec-27001@2013#A.16.1.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.6.39" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2013__A.16.1.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2013" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.9.2.5", "clauseId": "iso-iec-27001@2013#A.9.2.5", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.6.3" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2013__A.9.2.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2013" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 1, "unknown": 0 }, "clause": "6.1", "clauseId": "iso-iec-27001@2022#6.1", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.6.46", "22.6.48" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__6.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "6.2", "clauseId": "iso-iec-27001@2022#6.2", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.6.47" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__6.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "6.3", "clauseId": "iso-iec-27001@2022#6.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.8.36" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__6.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "7.2", "clauseId": "iso-iec-27001@2022#7.2", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.6.53" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__7.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "7.5", "clauseId": "iso-iec-27001@2022#7.5", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.6.54" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__7.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 1, "unknown": 0 }, "clause": "8.1", "clauseId": "iso-iec-27001@2022#8.1", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.6.55", "22.8.33" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__8.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 1, "unknown": 0 }, "clause": "8.2", "clauseId": "iso-iec-27001@2022#8.2", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.6.48", "22.11.106" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__8.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 1, "unknown": 0 }, "clause": "9.1", "clauseId": "iso-iec-27001@2022#9.1", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.6.49", "22.6.47" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__9.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "9.2", "clauseId": "iso-iec-27001@2022#9.2", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.6.50" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__9.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.5.1", "clauseId": "iso-iec-27001@2022#A.5.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.3.41" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.5.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.5.16", "clauseId": "iso-iec-27001@2022#A.5.16", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.98" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.5.16.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 2, "partial": 0, "unknown": 0 }, "clause": "A.5.18", "clauseId": "iso-iec-27001@2022#A.5.18", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.12.36", "22.12.37" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.5.18.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.5.19", "clauseId": "iso-iec-27001@2022#A.5.19", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.8.37" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.5.19.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 2, "partial": 1, "unknown": 0 }, "clause": "A.5.24", "clauseId": "iso-iec-27001@2022#A.5.24", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.3.44", "22.6.51", "22.11.105" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.5.24.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 1, "unknown": 0 }, "clause": "A.5.25", "clauseId": "iso-iec-27001@2022#A.5.25", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.6.52", "22.8.34" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.5.25.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.5.26", "clauseId": "iso-iec-27001@2022#A.5.26", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.8.35" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.5.26.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.5.28", "clauseId": "iso-iec-27001@2022#A.5.28", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.11.101" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.5.28.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.5.29", "clauseId": "iso-iec-27001@2022#A.5.29", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.3.45" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.5.29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.5.3", "clauseId": "iso-iec-27001@2022#A.5.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.12.39" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.5.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.5.33", "clauseId": "iso-iec-27001@2022#A.5.33", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.102" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.5.33.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.5.9", "clauseId": "iso-iec-27001@2022#A.5.9", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.3.42" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.5.9.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 2, "partial": 0, "unknown": 0 }, "clause": "A.8.12", "clauseId": "iso-iec-27001@2022#A.8.12", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.8.38", "22.11.93" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.12.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.8.15", "clauseId": "iso-iec-27001@2022#A.8.15", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.99" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.15.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.8.16", "clauseId": "iso-iec-27001@2022#A.8.16", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.104" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.16.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.8.17", "clauseId": "iso-iec-27001@2022#A.8.17", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.100" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.17.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.8.22", "clauseId": "iso-iec-27001@2022#A.8.22", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.11.91" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.22.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.8.23", "clauseId": "iso-iec-27001@2022#A.8.23", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.8.32" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.23.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.8.24", "clauseId": "iso-iec-27001@2022#A.8.24", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.8.31" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.24.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.8.25", "clauseId": "iso-iec-27001@2022#A.8.25", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.95" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.25.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "A.8.30", "clauseId": "iso-iec-27001@2022#A.8.30", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.12.40" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.30.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "partial", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.8.32", "clauseId": "iso-iec-27001@2022#A.8.32", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.12.38" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.32.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 2, "partial": 0, "unknown": 0 }, "clause": "A.8.5", "clauseId": "iso-iec-27001@2022#A.8.5", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.11.96", "22.11.97" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.8.7", "clauseId": "iso-iec-27001@2022#A.8.7", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.94" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 2, "partial": 0, "unknown": 0 }, "clause": "A.8.8", "clauseId": "iso-iec-27001@2022#A.8.8", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.3.43", "22.11.103" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.8.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "A.8.9", "clauseId": "iso-iec-27001@2022#A.8.9", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.92" ], "endpoint": "/api/v1/compliance/clauses/iso-iec-27001__2022__A.8.9.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "iso-iec-27001", "regulationShortName": "iso-iec-27001", "tier": null, "topAssurance": "full", "topic": null, "version": "2022" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 9, "unknown": 0 }, "clause": "OPS.1.1.2", "clauseId": "it-grundschutz@2023 Edition#OPS.1.1.2", "coverageState": "covered-partial", "coveringUcCount": 11, "coveringUcs": [ "5.1.7", "6.3.1", "12.2.17", "16.4.1", "22.28.11", "22.28.12", "22.28.13", "22.28.14", "22.28.15", "1.2.91", "13.1.36" ], "endpoint": "/api/v1/compliance/clauses/it-grundschutz__2023%20Edition__OPS.1.1.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "it-grundschutz", "regulationShortName": "IT-Grundschutz", "tier": 2, "topAssurance": "partial", "topic": "Ordered ICT operation", "version": "2023 Edition" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 1, "unknown": 0 }, "clause": "ORP.4", "clauseId": "it-grundschutz@2023 Edition#ORP.4", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "9.5.15", "9.1.3" ], "endpoint": "/api/v1/compliance/clauses/it-grundschutz__2023%20Edition__ORP.4.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "it-grundschutz", "regulationShortName": "IT-Grundschutz", "tier": 2, "topAssurance": "full", "topic": "Identity & access", "version": "2023 Edition" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§8a", "clauseId": "it-sig-2@2021#§8a", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/it-sig-2__2021__%C2%A78a.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "it-sig-2", "regulationShortName": "IT-SiG 2.0", "tier": 2, "topAssurance": null, "topic": "Security measures for KRITIS operators", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§8b", "clauseId": "it-sig-2@2021#§8b", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/it-sig-2__2021__%C2%A78b.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "it-sig-2", "regulationShortName": "IT-SiG 2.0", "tier": 2, "topAssurance": null, "topic": "National IT situation centre notification", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 3, "unknown": 0 }, "clause": "§8a", "clauseId": "it-sig-2-0@2021#§8a", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.28.2", "22.28.3", "22.28.5" ], "endpoint": "/api/v1/compliance/clauses/it-sig-2-0__2021__%C2%A78a.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "it-sig-2-0", "regulationShortName": "it-sig-2-0", "tier": null, "topAssurance": "partial", "topic": null, "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "§8b", "clauseId": "it-sig-2-0@2021#§8b", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.28.1", "22.28.4" ], "endpoint": "/api/v1/compliance/clauses/it-sig-2-0__2021__%C2%A78b.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "it-sig-2-0", "regulationShortName": "it-sig-2-0", "tier": null, "topAssurance": "partial", "topic": null, "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 10, "unknown": 0 }, "clause": "Art.46", "clauseId": "lgpd@Lei nº 13.709/2018#Art.46", "coverageState": "covered-partial", "coveringUcCount": 10, "coveringUcs": [ "22.32.1", "22.32.2", "22.32.4", "22.32.5", "22.32.6", "22.32.7", "22.32.8", "22.35.2", "22.35.3", "22.41.1" ], "endpoint": "/api/v1/compliance/clauses/lgpd__Lei%20n%C2%BA%2013.709%2F2018__Art.46.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "lgpd", "regulationShortName": "LGPD", "tier": 2, "topAssurance": "partial", "topic": "Security measures", "version": "Lei nº 13.709/2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "Art.48", "clauseId": "lgpd@Lei nº 13.709/2018#Art.48", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "22.32.3", "22.39.1", "22.39.2", "22.39.3" ], "endpoint": "/api/v1/compliance/clauses/lgpd__Lei%20n%C2%BA%2013.709%2F2018__Art.48.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "lgpd", "regulationShortName": "LGPD", "tier": 2, "topAssurance": "partial", "topic": "Breach notification", "version": "Lei nº 13.709/2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.6", "clauseId": "lgpd@Lei nº 13.709/2018#Art.6", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.37.4" ], "endpoint": "/api/v1/compliance/clauses/lgpd__Lei%20n%C2%BA%2013.709%2F2018__Art.6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "lgpd", "regulationShortName": "lgpd", "tier": null, "topAssurance": "partial", "topic": null, "version": "Lei nº 13.709/2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§11.1.1", "clauseId": "mas-trm@2021#§11.1.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.5" ], "endpoint": "/api/v1/compliance/clauses/mas-trm__2021__%C2%A711.1.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "mas-trm", "regulationShortName": "MAS TRM", "tier": 2, "topAssurance": "partial", "topic": "System resilience", "version": "2021" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 6, "unknown": 0 }, "clause": "§4.1.1", "clauseId": "mas-trm@2021#§4.1.1", "coverageState": "covered-partial", "coveringUcCount": 9, "coveringUcs": [ "22.30.1", "22.30.2", "22.30.3", "22.30.4", "22.30.5", "22.30.7", "5.1.7", "12.2.17", "16.4.1" ], "endpoint": "/api/v1/compliance/clauses/mas-trm__2021__%C2%A74.1.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "mas-trm", "regulationShortName": "MAS TRM", "tier": 2, "topAssurance": "partial", "topic": "Technology risk governance", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "§8.1.1", "clauseId": "mas-trm@2021#§8.1.1", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "16.1.20", "22.30.6" ], "endpoint": "/api/v1/compliance/clauses/mas-trm__2021__%C2%A78.1.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "mas-trm", "regulationShortName": "MAS TRM", "tier": 2, "topAssurance": "partial", "topic": "IT operations — incident mgmt", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.16", "clauseId": "mifid-ii@Directive 2014/65/EU#Art.16", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.5.5" ], "endpoint": "/api/v1/compliance/clauses/mifid-ii__Directive%202014%2F65%2FEU__Art.16.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "mifid-ii", "regulationShortName": "mifid-ii", "tier": null, "topAssurance": "partial", "topic": null, "version": "Directive 2014/65/EU" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.16(7)", "clauseId": "mifid-ii@Directive 2014/65/EU#Art.16(7)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.5.2" ], "endpoint": "/api/v1/compliance/clauses/mifid-ii__Directive%202014%2F65%2FEU__Art.16%287%29.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "mifid-ii", "regulationShortName": "MiFID II", "tier": 2, "topAssurance": "partial", "topic": "Record keeping of communications", "version": "Directive 2014/65/EU" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 10, "unknown": 0 }, "clause": "Art.17", "clauseId": "mifid-ii@Directive 2014/65/EU#Art.17", "coverageState": "covered-partial", "coveringUcCount": 10, "coveringUcs": [ "22.5.8", "22.5.9", "22.5.10", "22.5.11", "22.5.15", "22.5.16", "22.5.17", "22.5.18", "22.5.19", "22.5.20" ], "endpoint": "/api/v1/compliance/clauses/mifid-ii__Directive%202014%2F65%2FEU__Art.17.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "mifid-ii", "regulationShortName": "MiFID II", "tier": 2, "topAssurance": "partial", "topic": "Algorithmic trading controls", "version": "Directive 2014/65/EU" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 5, "unknown": 0 }, "clause": "Art.25", "clauseId": "mifid-ii@Directive 2014/65/EU#Art.25", "coverageState": "covered-partial", "coveringUcCount": 5, "coveringUcs": [ "22.5.6", "22.5.7", "22.5.12", "22.5.13", "22.5.14" ], "endpoint": "/api/v1/compliance/clauses/mifid-ii__Directive%202014%2F65%2FEU__Art.25.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "mifid-ii", "regulationShortName": "mifid-ii", "tier": null, "topAssurance": "partial", "topic": null, "version": "Directive 2014/65/EU" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "Art.26", "clauseId": "mifid-ii@Directive 2014/65/EU#Art.26", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "22.5.1", "22.5.4", "22.5.24", "22.5.25" ], "endpoint": "/api/v1/compliance/clauses/mifid-ii__Directive%202014%2F65%2FEU__Art.26.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "mifid-ii", "regulationShortName": "mifid-ii", "tier": null, "topAssurance": "partial", "topic": null, "version": "Directive 2014/65/EU" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "Art.27", "clauseId": "mifid-ii@Directive 2014/65/EU#Art.27", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "22.5.3", "22.5.21", "22.5.22", "22.5.23" ], "endpoint": "/api/v1/compliance/clauses/mifid-ii__Directive%202014%2F65%2FEU__Art.27.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "mifid-ii", "regulationShortName": "mifid-ii", "tier": null, "topAssurance": "partial", "topic": null, "version": "Directive 2014/65/EU" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.9", "clauseId": "mifid-ii@Directive 2014/65/EU#Art.9", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.5.5" ], "endpoint": "/api/v1/compliance/clauses/mifid-ii__Directive%202014%2F65%2FEU__Art.9.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "mifid-ii", "regulationShortName": "mifid-ii", "tier": null, "topAssurance": "partial", "topic": null, "version": "Directive 2014/65/EU" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-002-5.1a R1", "clauseId": "nerc-cip@current#CIP-002-5.1a R1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "14.2.11" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-002-5.1a%20R1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nerc-cip", "regulationShortName": "NERC CIP", "tier": 2, "topAssurance": "partial", "topic": "BES cyber system identification", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-002-6 R1 Part 1.1", "clauseId": "nerc-cip@current#CIP-002-6 R1 Part 1.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.1" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-002-6%20R1%20Part%201.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-002-6 R1 Part 1.2", "clauseId": "nerc-cip@current#CIP-002-6 R1 Part 1.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.3" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-002-6%20R1%20Part%201.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-002-6 R2", "clauseId": "nerc-cip@current#CIP-002-6 R2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.2" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-002-6%20R2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-002-6 R4", "clauseId": "nerc-cip@current#CIP-002-6 R4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.4" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-002-6%20R4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-003-8 R1 Part 1.2", "clauseId": "nerc-cip@current#CIP-003-8 R1 Part 1.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.5" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-003-8%20R1%20Part%201.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-003-8 R2", "clauseId": "nerc-cip@current#CIP-003-8 R2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.6" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-003-8%20R2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-003-8 R3", "clauseId": "nerc-cip@current#CIP-003-8 R3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.7" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-003-8%20R3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-003-8 R4", "clauseId": "nerc-cip@current#CIP-003-8 R4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.8" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-003-8%20R4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-004-6 R1 Part 1.1", "clauseId": "nerc-cip@current#CIP-004-6 R1 Part 1.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.9" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-004-6%20R1%20Part%201.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-004-6 R2", "clauseId": "nerc-cip@current#CIP-004-6 R2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.10" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-004-6%20R2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-004-6 R3", "clauseId": "nerc-cip@current#CIP-004-6 R3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.11" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-004-6%20R3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-004-6 R4 Part 4.2", "clauseId": "nerc-cip@current#CIP-004-6 R4 Part 4.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.12" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-004-6%20R4%20Part%204.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-004-6 R5", "clauseId": "nerc-cip@current#CIP-004-6 R5", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.13" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-004-6%20R5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-004-6 R6", "clauseId": "nerc-cip@current#CIP-004-6 R6", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.14" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-004-6%20R6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-005-6 R1 Part 1.3", "clauseId": "nerc-cip@current#CIP-005-6 R1 Part 1.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.15" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-005-6%20R1%20Part%201.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-005-6 R1 Part 1.4", "clauseId": "nerc-cip@current#CIP-005-6 R1 Part 1.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.20" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-005-6%20R1%20Part%201.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-005-6 R2 Part 2.1", "clauseId": "nerc-cip@current#CIP-005-6 R2 Part 2.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.16" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-005-6%20R2%20Part%202.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-005-6 R2 Part 2.3", "clauseId": "nerc-cip@current#CIP-005-6 R2 Part 2.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.17" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-005-6%20R2%20Part%202.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-005-6 R2 Part 2.4", "clauseId": "nerc-cip@current#CIP-005-6 R2 Part 2.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.22" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-005-6%20R2%20Part%202.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-005-6 R3", "clauseId": "nerc-cip@current#CIP-005-6 R3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.18" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-005-6%20R3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-005-6 R3 Part 3.2", "clauseId": "nerc-cip@current#CIP-005-6 R3 Part 3.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.21" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-005-6%20R3%20Part%203.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-005-6 R4 Part 4.2", "clauseId": "nerc-cip@current#CIP-005-6 R4 Part 4.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.19" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-005-6%20R4%20Part%204.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 2, "full": 1, "partial": 3, "unknown": 0 }, "clause": "CIP-005-7 R1", "clauseId": "nerc-cip@current#CIP-005-7 R1", "coverageState": "covered-full", "coveringUcCount": 6, "coveringUcs": [ "14.2.4", "14.2.14", "14.9.22", "17.3.3", "10.14.16", "15.3.1" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-005-7%20R1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nerc-cip", "regulationShortName": "NERC CIP", "tier": 2, "topAssurance": "full", "topic": "Electronic security perimeter", "version": "current" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CIP-006-6 R1", "clauseId": "nerc-cip@current#CIP-006-6 R1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "10.14.17" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-006-6%20R1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "contributing", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-006-6 R1 Part 1.2", "clauseId": "nerc-cip@current#CIP-006-6 R1 Part 1.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.23" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-006-6%20R1%20Part%201.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-006-6 R2", "clauseId": "nerc-cip@current#CIP-006-6 R2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.24" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-006-6%20R2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-006-6 R3 Part 3.1", "clauseId": "nerc-cip@current#CIP-006-6 R3 Part 3.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.25" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-006-6%20R3%20Part%203.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-006-6 R3 Part 3.2", "clauseId": "nerc-cip@current#CIP-006-6 R3 Part 3.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.27" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-006-6%20R3%20Part%203.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-006-6 R4", "clauseId": "nerc-cip@current#CIP-006-6 R4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.26" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-006-6%20R4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-007-6 R1 Part 1.2", "clauseId": "nerc-cip@current#CIP-007-6 R1 Part 1.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.28" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-007-6%20R1%20Part%201.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CIP-007-6 R2", "clauseId": "nerc-cip@current#CIP-007-6 R2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "10.14.18" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-007-6%20R2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "contributing", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-007-6 R2 Part 2.1", "clauseId": "nerc-cip@current#CIP-007-6 R2 Part 2.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.29" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-007-6%20R2%20Part%202.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-007-6 R2 Part 2.3", "clauseId": "nerc-cip@current#CIP-007-6 R2 Part 2.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.30" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-007-6%20R2%20Part%202.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-007-6 R3 Part 3.1", "clauseId": "nerc-cip@current#CIP-007-6 R3 Part 3.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.31" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-007-6%20R3%20Part%203.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 3, "unknown": 0 }, "clause": "CIP-007-6 R4", "clauseId": "nerc-cip@current#CIP-007-6 R4", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "14.2.11", "14.2.14", "14.9.14" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-007-6%20R4.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nerc-cip", "regulationShortName": "NERC CIP", "tier": 2, "topAssurance": "partial", "topic": "Security event monitoring", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-007-6 R4 Part 4.1", "clauseId": "nerc-cip@current#CIP-007-6 R4 Part 4.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.32" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-007-6%20R4%20Part%204.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-007-6 R4 Part 4.2", "clauseId": "nerc-cip@current#CIP-007-6 R4 Part 4.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.33" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-007-6%20R4%20Part%204.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-007-6 R5 Part 5.1", "clauseId": "nerc-cip@current#CIP-007-6 R5 Part 5.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.34" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-007-6%20R5%20Part%205.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-007-6 R5 Part 5.2", "clauseId": "nerc-cip@current#CIP-007-6 R5 Part 5.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.35" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-007-6%20R5%20Part%205.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-007-6 R5 Part 5.3", "clauseId": "nerc-cip@current#CIP-007-6 R5 Part 5.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.36" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-007-6%20R5%20Part%205.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-007-6 R5 Part 5.4", "clauseId": "nerc-cip@current#CIP-007-6 R5 Part 5.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.37" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-007-6%20R5%20Part%205.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-008-6 R1", "clauseId": "nerc-cip@current#CIP-008-6 R1", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.50.6", "10.14.19" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-008-6%20R1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nerc-cip", "regulationShortName": "NERC CIP", "tier": 2, "topAssurance": "partial", "topic": "Incident response", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-008-6 R1 Part 1.1", "clauseId": "nerc-cip@current#CIP-008-6 R1 Part 1.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.38" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-008-6%20R1%20Part%201.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-008-6 R2 Part 2.1", "clauseId": "nerc-cip@current#CIP-008-6 R2 Part 2.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.39" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-008-6%20R2%20Part%202.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-008-6 R3 Part 3.2", "clauseId": "nerc-cip@current#CIP-008-6 R3 Part 3.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.40" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-008-6%20R3%20Part%203.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-008-6 R4 Part 4.1", "clauseId": "nerc-cip@current#CIP-008-6 R4 Part 4.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.41" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-008-6%20R4%20Part%204.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-008-6 R5 Part 5.1", "clauseId": "nerc-cip@current#CIP-008-6 R5 Part 5.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.42" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-008-6%20R5%20Part%205.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-008-6 R6", "clauseId": "nerc-cip@current#CIP-008-6 R6", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.43" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-008-6%20R6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-009-6 R1 Part 1.1", "clauseId": "nerc-cip@current#CIP-009-6 R1 Part 1.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.44" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-009-6%20R1%20Part%201.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-009-6 R2 Part 2.2", "clauseId": "nerc-cip@current#CIP-009-6 R2 Part 2.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.45" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-009-6%20R2%20Part%202.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-009-6 R3 Part 3.1", "clauseId": "nerc-cip@current#CIP-009-6 R3 Part 3.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.46" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-009-6%20R3%20Part%203.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-009-6 R4 Part 4.1", "clauseId": "nerc-cip@current#CIP-009-6 R4 Part 4.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.47" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-009-6%20R4%20Part%204.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-009-6 R5 Part 5.1", "clauseId": "nerc-cip@current#CIP-009-6 R5 Part 5.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.48" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-009-6%20R5%20Part%205.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 3, "full": 2, "partial": 3, "unknown": 0 }, "clause": "CIP-010-4 R1", "clauseId": "nerc-cip@current#CIP-010-4 R1", "coverageState": "covered-full", "coveringUcCount": 8, "coveringUcs": [ "5.1.7", "14.2.9", "13.1.36", "14.6.6", "16.4.1", "1.2.9", "5.1.24", "7.1.13" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-010-4%20R1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nerc-cip", "regulationShortName": "NERC CIP", "tier": 2, "topAssurance": "full", "topic": "Configuration change management", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-010-4 R1 Part 1.1", "clauseId": "nerc-cip@current#CIP-010-4 R1 Part 1.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.49" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-010-4%20R1%20Part%201.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-010-4 R1 Part 1.3", "clauseId": "nerc-cip@current#CIP-010-4 R1 Part 1.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.56" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-010-4%20R1%20Part%201.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-010-4 R2 Part 2.1", "clauseId": "nerc-cip@current#CIP-010-4 R2 Part 2.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.50" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-010-4%20R2%20Part%202.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-010-4 R3 Part 3.1", "clauseId": "nerc-cip@current#CIP-010-4 R3 Part 3.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.51" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-010-4%20R3%20Part%203.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-010-4 R4 Part 4.1", "clauseId": "nerc-cip@current#CIP-010-4 R4 Part 4.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.52" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-010-4%20R4%20Part%204.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-010-4 R5 Part 5.1", "clauseId": "nerc-cip@current#CIP-010-4 R5 Part 5.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.53" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-010-4%20R5%20Part%205.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-010-4 R5 Part 5.3", "clauseId": "nerc-cip@current#CIP-010-4 R5 Part 5.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.55" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-010-4%20R5%20Part%205.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-010-4 R6 Part 6.1", "clauseId": "nerc-cip@current#CIP-010-4 R6 Part 6.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.54" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-010-4%20R6%20Part%206.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-011-3 R1 Part 1.1", "clauseId": "nerc-cip@current#CIP-011-3 R1 Part 1.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.57" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-011-3%20R1%20Part%201.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-011-3 R2 Part 2.1", "clauseId": "nerc-cip@current#CIP-011-3 R2 Part 2.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.58" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-011-3%20R2%20Part%202.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-011-3 R3 Part 3.1", "clauseId": "nerc-cip@current#CIP-011-3 R3 Part 3.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.59" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-011-3%20R3%20Part%203.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-011-3 R4 Part 4.1", "clauseId": "nerc-cip@current#CIP-011-3 R4 Part 4.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.60" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-011-3%20R4%20Part%204.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-012-1 R1 Part 1.1", "clauseId": "nerc-cip@current#CIP-012-1 R1 Part 1.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.61" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-012-1%20R1%20Part%201.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-012-1 R2 Part 2.1", "clauseId": "nerc-cip@current#CIP-012-1 R2 Part 2.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.62" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-012-1%20R2%20Part%202.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-012-1 R3 Part 3.1", "clauseId": "nerc-cip@current#CIP-012-1 R3 Part 3.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.63" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-012-1%20R3%20Part%203.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-013-1 R1 Part 1.1", "clauseId": "nerc-cip@current#CIP-013-1 R1 Part 1.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.64" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-013-1%20R1%20Part%201.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-013-1 R2 Part 2.1", "clauseId": "nerc-cip@current#CIP-013-1 R2 Part 2.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.65" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-013-1%20R2%20Part%202.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-013-1 R3 Part 3.1", "clauseId": "nerc-cip@current#CIP-013-1 R3 Part 3.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.66" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-013-1%20R3%20Part%203.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-013-1 R4 Part 4.1", "clauseId": "nerc-cip@current#CIP-013-1 R4 Part 4.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.67" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-013-1%20R4%20Part%204.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-014-3 R1 Part 1.1", "clauseId": "nerc-cip@current#CIP-014-3 R1 Part 1.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.68" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-014-3%20R1%20Part%201.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-014-3 R2 Part 2.1", "clauseId": "nerc-cip@current#CIP-014-3 R2 Part 2.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.69" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-014-3%20R2%20Part%202.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CIP-014-3 R3 Part 3.1", "clauseId": "nerc-cip@current#CIP-014-3 R3 Part 3.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.13.70" ], "endpoint": "/api/v1/compliance/clauses/nerc-cip__current__CIP-014-3%20R3%20Part%203.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nerc-cip", "regulationShortName": "nerc-cip", "tier": null, "topAssurance": "partial", "topic": null, "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "T3.2", "clauseId": "nesa-ias@v2 (2020)#T3.2", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.33.2", "22.33.4" ], "endpoint": "/api/v1/compliance/clauses/nesa-ias__v2%20%282020%29__T3.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nesa-ias", "regulationShortName": "nesa-ias", "tier": null, "topAssurance": "partial", "topic": null, "version": "v2 (2020)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "T3.5", "clauseId": "nesa-ias@v2 (2020)#T3.5", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.17" ], "endpoint": "/api/v1/compliance/clauses/nesa-ias__v2%20%282020%29__T3.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nesa-ias", "regulationShortName": "nesa-ias", "tier": null, "topAssurance": "partial", "topic": null, "version": "v2 (2020)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "T4.3", "clauseId": "nesa-ias@v2 (2020)#T4.3", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.33.1", "22.33.5" ], "endpoint": "/api/v1/compliance/clauses/nesa-ias__v2%20%282020%29__T4.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nesa-ias", "regulationShortName": "nesa-ias", "tier": null, "topAssurance": "partial", "topic": null, "version": "v2 (2020)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "T6.3", "clauseId": "nesa-ias@v2 (2020)#T6.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.33.3" ], "endpoint": "/api/v1/compliance/clauses/nesa-ias__v2%20%282020%29__T6.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nesa-ias", "regulationShortName": "nesa-ias", "tier": null, "topAssurance": "partial", "topic": null, "version": "v2 (2020)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "T3.2", "clauseId": "nesa-uae-ias@v2 (2020)#T3.2", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/nesa-uae-ias__v2%20%282020%29__T3.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nesa-uae-ias", "regulationShortName": "NESA IAS", "tier": 2, "topAssurance": null, "topic": "Access control management", "version": "v2 (2020)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "T3.5", "clauseId": "nesa-uae-ias@v2 (2020)#T3.5", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/nesa-uae-ias__v2%20%282020%29__T3.5.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "nesa-uae-ias", "regulationShortName": "NESA IAS", "tier": 2, "topAssurance": null, "topic": "Cryptographic controls and key management", "version": "v2 (2020)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "T4.3", "clauseId": "nesa-uae-ias@v2 (2020)#T4.3", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/nesa-uae-ias__v2%20%282020%29__T4.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nesa-uae-ias", "regulationShortName": "NESA IAS", "tier": 2, "topAssurance": null, "topic": "Audit trails, logging and information-system monitoring", "version": "v2 (2020)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "T6.3", "clauseId": "nesa-uae-ias@v2 (2020)#T6.3", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/nesa-uae-ias__v2%20%282020%29__T6.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nesa-uae-ias", "regulationShortName": "NESA IAS", "tier": 2, "topAssurance": null, "topic": "Information security incident management", "version": "v2 (2020)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Annex I", "clauseId": "nis2@Directive (EU) 2022/2555#Annex I", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.47" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Annex%20I.json", "obligationTextPresent": true, "priorityWeight": 0.7, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Annex I", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Annex II", "clauseId": "nis2@Directive (EU) 2022/2555#Annex II", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.47" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Annex%20II.json", "obligationTextPresent": true, "priorityWeight": 0.7, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Annex II", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.12", "clauseId": "nis2@Directive (EU) 2022/2555#Art.12", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.51" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.12.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.12", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.14", "clauseId": "nis2@Directive (EU) 2022/2555#Art.14", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.2.44" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.14.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nis2", "regulationShortName": "nis2", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.2", "clauseId": "nis2@Directive (EU) 2022/2555#Art.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.47" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.2.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.2", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.2(1)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.2(1)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.2.31" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.2%281%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nis2", "regulationShortName": "nis2", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "Art.20", "clauseId": "nis2@Directive (EU) 2022/2555#Art.20", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "22.2.20", "22.2.41", "22.2.42", "22.2.48" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.20.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Governance", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.20(1)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.20(1)", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.2.48", "22.2.57" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.20%281%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.20(1)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.20(2)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.20(2)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.48" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.20%282%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.20(2)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.21(1)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(1)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.48" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%281%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.21(1)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.21(2)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(2)", "coverageState": "contributing-only", "coveringUcCount": 3, "coveringUcs": [ "22.2.21", "22.2.22", "22.2.32" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%282%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "contributing", "topic": "Legacy NIS2 mapping already present in the catalogue", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 6, "unknown": 0 }, "clause": "Art.21(2)(a)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(2)(a)", "coverageState": "covered-partial", "coveringUcCount": 6, "coveringUcs": [ "22.2.6", "22.2.18", "22.2.26", "22.2.36", "22.2.37", "22.2.56" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%282%29%28a%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Risk analysis and information-system security policies", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.21(2)(b)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(2)(b)", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.2.23", "22.46.4" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%282%29%28b%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Incident handling", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 6, "unknown": 0 }, "clause": "Art.21(2)(c)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(2)(c)", "coverageState": "covered-partial", "coveringUcCount": 6, "coveringUcs": [ "22.2.4", "22.2.17", "22.2.24", "22.2.40", "22.2.53", "22.45.5" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%282%29%28c%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Business continuity and crisis management", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 8, "unknown": 0 }, "clause": "Art.21(2)(d)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(2)(d)", "coverageState": "covered-full", "coveringUcCount": 9, "coveringUcs": [ "22.44.1", "22.2.2", "22.2.16", "22.2.25", "22.2.50", "22.3.42", "22.43.5", "22.44.4", "22.44.5" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%282%29%28d%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "full", "topic": "Supply-chain security", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 6, "unknown": 0 }, "clause": "Art.21(2)(e)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(2)(e)", "coverageState": "covered-full", "coveringUcCount": 7, "coveringUcs": [ "22.43.3", "22.2.3", "22.2.15", "22.2.27", "22.2.38", "22.2.51", "22.43.1" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%282%29%28e%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "full", "topic": "Security in acquisition, development and maintenance", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 4, "unknown": 0 }, "clause": "Art.21(2)(f)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(2)(f)", "coverageState": "covered-partial", "coveringUcCount": 5, "coveringUcs": [ "22.2.9", "22.2.39", "22.2.43", "22.2.51", "22.2.57" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%282%29%28f%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Policies and procedures effectiveness", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 3, "unknown": 0 }, "clause": "Art.21(2)(g)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(2)(g)", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.46.1", "22.2.10", "22.2.28", "22.46.2" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%282%29%28g%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "full", "topic": "Cyber-hygiene and training", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 2, "unknown": 0 }, "clause": "Art.21(2)(h)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(2)(h)", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.41.2", "22.2.11", "22.2.29" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%282%29%28h%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "full", "topic": "Cryptography and encryption", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 5, "unknown": 0 }, "clause": "Art.21(2)(i)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(2)(i)", "coverageState": "covered-partial", "coveringUcCount": 5, "coveringUcs": [ "22.2.5", "22.2.13", "22.2.14", "22.2.30", "22.2.52" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%282%29%28i%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Human resources and access control", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.21(2)(j)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(2)(j)", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.2.46", "22.2.52", "22.2.12" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%282%29%28j%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "MFA and secure communications", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.21(3)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(3)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.50" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%283%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.21(3)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.21(4)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(4)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.48" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%284%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.21(4)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.21(5)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.21(5)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.56" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.21%285%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.21(5)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.22", "clauseId": "nis2@Directive (EU) 2022/2555#Art.22", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.50" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.22.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.22", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 3, "full": 3, "partial": 2, "unknown": 0 }, "clause": "Art.23", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23", "coverageState": "covered-full", "coveringUcCount": 8, "coveringUcs": [ "22.3.44", "22.39.1", "22.39.2", "22.2.33", "22.2.49", "22.2.1", "22.2.45", "22.9.4" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "full", "topic": "Reporting obligations", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.23(1)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(1)", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.2.49", "22.39.5" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%281%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Legacy NIS2 mapping already present in the catalogue", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.23(10)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(10)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%2810%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "contributing", "topic": "Art.23(10)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.23(11)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(11)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%2811%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "contributing", "topic": "Art.23(11)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.23(2)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(2)", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.2.7", "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%282%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Legacy NIS2 mapping already present in the catalogue", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.23(3)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(3)", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.2.19", "22.2.34" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%283%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nis2", "regulationShortName": "nis2", "tier": null, "topAssurance": "partial", "topic": null, "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.23(3)(a)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(3)(a)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%283%29%28a%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.23(3)(a)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.23(3)(b)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(3)(b)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%283%29%28b%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.23(3)(b)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.23(4)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(4)", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.2.8", "22.39.4" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%284%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "NIS2 clause already mapped by a catalogue UC; retained for source traceability and no-gap validation.", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.23(4)(a)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(4)(a)", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.2.1", "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%284%29%28a%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.23(4)(a)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.23(4)(b)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(4)(b)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%284%29%28b%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.23(4)(b)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.23(4)(c)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(4)(c)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%284%29%28c%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.23(4)(c)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.23(4)(d)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(4)(d)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%284%29%28d%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.23(4)(d)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.23(4)(e)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(4)(e)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%284%29%28e%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.23(4)(e)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.23(5)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(5)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%285%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "contributing", "topic": "Art.23(5)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.23(6)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(6)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%286%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "contributing", "topic": "Art.23(6)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.23(7)", "clauseId": "nis2@Directive (EU) 2022/2555#Art.23(7)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.2.49" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.23%287%29.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "contributing", "topic": "Art.23(7)", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.24", "clauseId": "nis2@Directive (EU) 2022/2555#Art.24", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.56" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.24.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.24", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.25", "clauseId": "nis2@Directive (EU) 2022/2555#Art.25", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.56" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.25.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.25", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.26", "clauseId": "nis2@Directive (EU) 2022/2555#Art.26", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.47" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.26.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.26", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.27", "clauseId": "nis2@Directive (EU) 2022/2555#Art.27", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.47" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.27.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.27", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.28", "clauseId": "nis2@Directive (EU) 2022/2555#Art.28", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.55" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.28.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.28", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.29", "clauseId": "nis2@Directive (EU) 2022/2555#Art.29", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.55" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.29.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.29", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.3", "clauseId": "nis2@Directive (EU) 2022/2555#Art.3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.47" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.3.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.3", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.30", "clauseId": "nis2@Directive (EU) 2022/2555#Art.30", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.2.55" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.30.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "partial", "topic": "Art.30", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.31", "clauseId": "nis2@Directive (EU) 2022/2555#Art.31", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.2.54" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.31.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "contributing", "topic": "Art.31", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.32", "clauseId": "nis2@Directive (EU) 2022/2555#Art.32", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.2.35", "22.2.54" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.32.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "contributing", "topic": "Legacy NIS2 mapping already present in the catalogue", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.33", "clauseId": "nis2@Directive (EU) 2022/2555#Art.33", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.2.35", "22.2.54" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.33.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "contributing", "topic": "Legacy NIS2 mapping already present in the catalogue", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.34", "clauseId": "nis2@Directive (EU) 2022/2555#Art.34", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.2.54" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.34.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "contributing", "topic": "Art.34", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "Art.35", "clauseId": "nis2@Directive (EU) 2022/2555#Art.35", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.2.54" ], "endpoint": "/api/v1/compliance/clauses/nis2__Directive%20%28EU%29%202022%2F2555__Art.35.json", "obligationTextPresent": true, "priorityWeight": 0.6, "regulationId": "nis2", "regulationShortName": "NIS2", "tier": 1, "topAssurance": "contributing", "topic": "Art.35", "version": "Directive (EU) 2022/2555" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AC-11", "clauseId": "nist-800-53@Rev. 5#AC-11", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.22" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-11.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AC-12", "clauseId": "nist-800-53@Rev. 5#AC-12", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.23" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-12.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AC-17", "clauseId": "nist-800-53@Rev. 5#AC-17", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.24" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-17.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "AC-18", "clauseId": "nist-800-53@Rev. 5#AC-18", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "5.13.61" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-18.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "partial", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 1, "unknown": 0 }, "clause": "AC-2", "clauseId": "nist-800-53@Rev. 5#AC-2", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.40.3", "5.13.49", "22.14.16" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "Account management", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "AC-2(7)", "clauseId": "nist-800-53@Rev. 5#AC-2(7)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "9.1.3" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-2%287%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "partial", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AC-20", "clauseId": "nist-800-53@Rev. 5#AC-20", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.25" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-20.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AC-3", "clauseId": "nist-800-53@Rev. 5#AC-3", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.17" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "contributing", "topic": "Access enforcement", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "AC-5", "clauseId": "nist-800-53@Rev. 5#AC-5", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.40.4", "22.14.18" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 2, "partial": 1, "unknown": 0 }, "clause": "AC-6", "clauseId": "nist-800-53@Rev. 5#AC-6", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.40.1", "22.40.2", "5.13.47", "22.14.19" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-6.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "Least privilege", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "AC-6(9)", "clauseId": "nist-800-53@Rev. 5#AC-6(9)", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.40.5" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-6%289%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "AC-7", "clauseId": "nist-800-53@Rev. 5#AC-7", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "5.13.48", "22.14.20" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "partial", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AC-8", "clauseId": "nist-800-53@Rev. 5#AC-8", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.21" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AC-8.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "AT-3", "clauseId": "nist-800-53@Rev. 5#AT-3", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.46.3" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AT-3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AU-10", "clauseId": "nist-800-53@Rev. 5#AU-10", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.9" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-10.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "AU-11", "clauseId": "nist-800-53@Rev. 5#AU-11", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.11.102", "22.14.10" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-11.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AU-12", "clauseId": "nist-800-53@Rev. 5#AU-12", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.11" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-12.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "contributing", "topic": "Audit record generation", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AU-13", "clauseId": "nist-800-53@Rev. 5#AU-13", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.12" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-13.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AU-14", "clauseId": "nist-800-53@Rev. 5#AU-14", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.13" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-14.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AU-15", "clauseId": "nist-800-53@Rev. 5#AU-15", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.14" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-15.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AU-16", "clauseId": "nist-800-53@Rev. 5#AU-16", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.15" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-16.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 2, "unknown": 0 }, "clause": "AU-2", "clauseId": "nist-800-53@Rev. 5#AU-2", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "5.13.45", "5.13.47", "22.14.1" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "partial", "topic": "Event logging", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "AU-3", "clauseId": "nist-800-53@Rev. 5#AU-3", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "5.13.50", "22.14.2" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "partial", "topic": "Content of audit records", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AU-4", "clauseId": "nist-800-53@Rev. 5#AU-4", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.3" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AU-5", "clauseId": "nist-800-53@Rev. 5#AU-5", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.4" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "AU-6", "clauseId": "nist-800-53@Rev. 5#AU-6", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "5.13.50", "22.14.5" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-6.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "partial", "topic": "Audit review, analysis, and reporting", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "AU-7", "clauseId": "nist-800-53@Rev. 5#AU-7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.6" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "AU-8", "clauseId": "nist-800-53@Rev. 5#AU-8", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.11.100", "22.14.7" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-8.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "Time stamps", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "AU-9", "clauseId": "nist-800-53@Rev. 5#AU-9", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.35.3", "22.14.8" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__AU-9.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "Protection of audit information", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 3, "full": 1, "partial": 0, "unknown": 0 }, "clause": "CA-2", "clauseId": "nist-800-53@Rev. 5#CA-2", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.47.3", "10.12.41", "22.6.50", "22.14.60" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CA-2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CA-3", "clauseId": "nist-800-53@Rev. 5#CA-3", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.61" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CA-3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CA-5", "clauseId": "nist-800-53@Rev. 5#CA-5", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.62" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CA-5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 1, "unknown": 0 }, "clause": "CA-7", "clauseId": "nist-800-53@Rev. 5#CA-7", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.47.5", "22.6.49", "22.14.63" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CA-7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CA-8", "clauseId": "nist-800-53@Rev. 5#CA-8", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.3.45", "22.14.64" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CA-8.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CA-9", "clauseId": "nist-800-53@Rev. 5#CA-9", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.65" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CA-9.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CM-11", "clauseId": "nist-800-53@Rev. 5#CM-11", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.59" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CM-11.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 2, "unknown": 0 }, "clause": "CM-2", "clauseId": "nist-800-53@Rev. 5#CM-2", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.42.2", "5.13.56", "5.13.57", "22.14.52" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CM-2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "Baseline configuration", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 3, "partial": 2, "unknown": 0 }, "clause": "CM-3", "clauseId": "nist-800-53@Rev. 5#CM-3", "coverageState": "covered-full", "coveringUcCount": 6, "coveringUcs": [ "22.42.1", "22.42.3", "22.42.4", "5.13.32", "5.13.46", "22.14.53" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CM-3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CM-4", "clauseId": "nist-800-53@Rev. 5#CM-4", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.54" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CM-4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CM-5", "clauseId": "nist-800-53@Rev. 5#CM-5", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.55" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CM-5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 3, "partial": 5, "unknown": 0 }, "clause": "CM-6", "clauseId": "nist-800-53@Rev. 5#CM-6", "coverageState": "covered-full", "coveringUcCount": 9, "coveringUcs": [ "22.11.92", "22.42.2", "22.42.5", "5.13.28", "5.13.29", "5.13.30", "5.13.31", "5.13.33", "22.14.56" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CM-6.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "Configuration settings", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CM-7", "clauseId": "nist-800-53@Rev. 5#CM-7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.57" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CM-7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CM-8", "clauseId": "nist-800-53@Rev. 5#CM-8", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.58" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CM-8.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CP-10", "clauseId": "nist-800-53@Rev. 5#CP-10", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.80" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CP-10.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CP-2", "clauseId": "nist-800-53@Rev. 5#CP-2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.78" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CP-2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "CP-4", "clauseId": "nist-800-53@Rev. 5#CP-4", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.45.5" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CP-4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 3, "partial": 0, "unknown": 0 }, "clause": "CP-9", "clauseId": "nist-800-53@Rev. 5#CP-9", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.45.1", "22.45.2", "22.45.3", "22.14.79" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CP-9.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "System backup", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CP-9(3)", "clauseId": "nist-800-53@Rev. 5#CP-9(3)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.45.4" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__CP-9%283%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "partial", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IA-11", "clauseId": "nist-800-53@Rev. 5#IA-11", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.32" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IA-11.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IA-12", "clauseId": "nist-800-53@Rev. 5#IA-12", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.33" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IA-12.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 2, "partial": 0, "unknown": 0 }, "clause": "IA-2", "clauseId": "nist-800-53@Rev. 5#IA-2", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.11.96", "22.11.98", "22.14.26" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IA-2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "Identification and authentication (users)", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "IA-2(1)", "clauseId": "nist-800-53@Rev. 5#IA-2(1)", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.97" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IA-2%281%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IA-3", "clauseId": "nist-800-53@Rev. 5#IA-3", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.27" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IA-3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IA-4", "clauseId": "nist-800-53@Rev. 5#IA-4", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.28" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IA-4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IA-5", "clauseId": "nist-800-53@Rev. 5#IA-5", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.29" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IA-5.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "contributing", "topic": "Authenticator management", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IA-6", "clauseId": "nist-800-53@Rev. 5#IA-6", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.30" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IA-6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IA-8", "clauseId": "nist-800-53@Rev. 5#IA-8", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.31" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IA-8.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IR-10", "clauseId": "nist-800-53@Rev. 5#IR-10", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.51" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IR-10.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IR-2", "clauseId": "nist-800-53@Rev. 5#IR-2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.44" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IR-2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "IR-3", "clauseId": "nist-800-53@Rev. 5#IR-3", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.46.4" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IR-3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 1, "unknown": 0 }, "clause": "IR-4", "clauseId": "nist-800-53@Rev. 5#IR-4", "coverageState": "contributing-only", "coveringUcCount": 4, "coveringUcs": [ "5.13.58", "22.6.51", "22.6.52", "22.14.45" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IR-4.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "partial", "topic": "Incident handling", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IR-5", "clauseId": "nist-800-53@Rev. 5#IR-5", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.46" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IR-5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IR-6", "clauseId": "nist-800-53@Rev. 5#IR-6", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.47" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IR-6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IR-7", "clauseId": "nist-800-53@Rev. 5#IR-7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.48" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IR-7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IR-8", "clauseId": "nist-800-53@Rev. 5#IR-8", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.49" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IR-8.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "IR-9", "clauseId": "nist-800-53@Rev. 5#IR-9", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.50" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__IR-9.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "MP-6", "clauseId": "nist-800-53@Rev. 5#MP-6", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.49.5" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__MP-6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "PL-2", "clauseId": "nist-800-53@Rev. 5#PL-2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.54" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__PL-2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "PM-1", "clauseId": "nist-800-53@Rev. 5#PM-1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.47.1" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__PM-1.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "partial", "topic": "Information security program plan", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "PM-6", "clauseId": "nist-800-53@Rev. 5#PM-6", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.6.47" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__PM-6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "PM-9", "clauseId": "nist-800-53@Rev. 5#PM-9", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.3.41", "22.6.46" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__PM-9.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "PS-4", "clauseId": "nist-800-53@Rev. 5#PS-4", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.10.5" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__PS-4.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "Personnel termination", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "PT-3", "clauseId": "nist-800-53@Rev. 5#PT-3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.1.48" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__PT-3.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "partial", "topic": "Personally identifiable information processing purposes", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RA-10", "clauseId": "nist-800-53@Rev. 5#RA-10", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.77" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__RA-10.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "RA-3", "clauseId": "nist-800-53@Rev. 5#RA-3", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.6.48", "22.14.74" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__RA-3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "partial", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 7, "full": 3, "partial": 2, "unknown": 0 }, "clause": "RA-5", "clauseId": "nist-800-53@Rev. 5#RA-5", "coverageState": "covered-full", "coveringUcCount": 12, "coveringUcs": [ "22.11.103", "22.43.1", "22.43.3", "22.3.43", "22.43.2", "5.13.34", "5.13.35", "5.13.36", "5.13.37", "5.13.38", "5.13.39", "22.14.75" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__RA-5.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "Vulnerability scanning", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "RA-5(2)", "clauseId": "nist-800-53@Rev. 5#RA-5(2)", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.43.4" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__RA-5%282%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RA-7", "clauseId": "nist-800-53@Rev. 5#RA-7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.76" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__RA-7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SA-22", "clauseId": "nist-800-53@Rev. 5#SA-22", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "5.13.59" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SA-22.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "partial", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SC-10", "clauseId": "nist-800-53@Rev. 5#SC-10", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.69" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SC-10.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "SC-12", "clauseId": "nist-800-53@Rev. 5#SC-12", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.41.5", "22.14.70" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SC-12.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 2, "partial": 0, "unknown": 0 }, "clause": "SC-13", "clauseId": "nist-800-53@Rev. 5#SC-13", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.41.1", "22.41.3", "22.14.71" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SC-13.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "Cryptographic protection", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SC-23", "clauseId": "nist-800-53@Rev. 5#SC-23", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.72" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SC-23.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SC-28", "clauseId": "nist-800-53@Rev. 5#SC-28", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.73" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SC-28.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SC-4", "clauseId": "nist-800-53@Rev. 5#SC-4", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.66" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SC-4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SC-7", "clauseId": "nist-800-53@Rev. 5#SC-7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.67" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SC-7.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "contributing", "topic": "Boundary protection", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 2, "partial": 0, "unknown": 0 }, "clause": "SC-8", "clauseId": "nist-800-53@Rev. 5#SC-8", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.41.2", "22.41.4", "22.14.68" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SC-8.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "Transmission confidentiality and integrity", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SI-10", "clauseId": "nist-800-53@Rev. 5#SI-10", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.40" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SI-10.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SI-11", "clauseId": "nist-800-53@Rev. 5#SI-11", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.41" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SI-11.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SI-12", "clauseId": "nist-800-53@Rev. 5#SI-12", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.42" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SI-12.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SI-16", "clauseId": "nist-800-53@Rev. 5#SI-16", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.43" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SI-16.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 9, "unknown": 0 }, "clause": "SI-2", "clauseId": "nist-800-53@Rev. 5#SI-2", "coverageState": "covered-partial", "coveringUcCount": 10, "coveringUcs": [ "5.13.34", "5.13.35", "5.13.36", "5.13.37", "5.13.38", "5.13.39", "5.13.56", "5.13.57", "5.13.58", "22.14.34" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SI-2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "partial", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "SI-3", "clauseId": "nist-800-53@Rev. 5#SI-3", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.11.94", "22.14.35" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SI-3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "full", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "SI-4", "clauseId": "nist-800-53@Rev. 5#SI-4", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.8.33", "22.14.36" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SI-4.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "full", "topic": "System monitoring", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SI-5", "clauseId": "nist-800-53@Rev. 5#SI-5", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.37" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SI-5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SI-6", "clauseId": "nist-800-53@Rev. 5#SI-6", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.38" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SI-6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "SI-7", "clauseId": "nist-800-53@Rev. 5#SI-7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.14.39" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SI-7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "contributing", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR-11", "clauseId": "nist-800-53@Rev. 5#SR-11", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.43.5" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SR-11.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "partial", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR-11(1)", "clauseId": "nist-800-53@Rev. 5#SR-11(1)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.44.5" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SR-11%281%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "partial", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR-3", "clauseId": "nist-800-53@Rev. 5#SR-3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.44.1" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SR-3.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "nist-800-53", "regulationShortName": "NIST 800-53", "tier": 1, "topAssurance": "partial", "topic": "Supply chain controls and processes", "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "SR-6", "clauseId": "nist-800-53@Rev. 5#SR-6", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.44.4" ], "endpoint": "/api/v1/compliance/clauses/nist-800-53__Rev.%205__SR-6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-800-53", "regulationShortName": "nist-800-53", "tier": null, "topAssurance": "partial", "topic": null, "version": "Rev. 5" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "DE.AE-3", "clauseId": "nist-csf@1.1#DE.AE-3", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.7.2" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__1.1__DE.AE-3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "full", "topic": "Event data collection and correlation", "version": "1.1" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "ID.AM-1", "clauseId": "nist-csf@1.1#ID.AM-1", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.7.3" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__1.1__ID.AM-1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "full", "topic": "Physical devices inventory", "version": "1.1" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "PR.AC-1", "clauseId": "nist-csf@1.1#PR.AC-1", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.7.4" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__1.1__PR.AC-1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "full", "topic": "Identities and credentials managed", "version": "1.1" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "DE.AE-01", "clauseId": "nist-csf@2.0#DE.AE-01", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.36" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__DE.AE-01.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "DE.AE-02", "clauseId": "nist-csf@2.0#DE.AE-02", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.7.37" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__DE.AE-02.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Anomalies and events analysis", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "DE.AE-03", "clauseId": "nist-csf@2.0#DE.AE-03", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.38" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__DE.AE-03.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "DE.CM-01", "clauseId": "nist-csf@2.0#DE.CM-01", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.7.31" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__DE.CM-01.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Network monitoring", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "DE.CM-02", "clauseId": "nist-csf@2.0#DE.CM-02", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.32" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__DE.CM-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "DE.CM-03", "clauseId": "nist-csf@2.0#DE.CM-03", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.7.33" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__DE.CM-03.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Personnel activity monitoring", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "DE.CM-04", "clauseId": "nist-csf@2.0#DE.CM-04", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.34" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__DE.CM-04.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "DE.CM-05", "clauseId": "nist-csf@2.0#DE.CM-05", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.35" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__DE.CM-05.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "DE.CM-09", "clauseId": "nist-csf@2.0#DE.CM-09", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.7.5" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__DE.CM-09.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "full", "topic": "Environment monitoring", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "DE.CM-7", "clauseId": "nist-csf@2.0#DE.CM-7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.5" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__DE.CM-7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "GV.OC-01", "clauseId": "nist-csf@2.0#GV.OC-01", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.7.8" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__GV.OC-01.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Organisational context", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "GV.OC-02", "clauseId": "nist-csf@2.0#GV.OC-02", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.9" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__GV.OC-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "GV.OV-01", "clauseId": "nist-csf@2.0#GV.OV-01", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.14" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__GV.OV-01.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "GV.OV-02", "clauseId": "nist-csf@2.0#GV.OV-02", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.9.2" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__GV.OV-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "GV.OV-03", "clauseId": "nist-csf@2.0#GV.OV-03", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.9.1" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__GV.OV-03.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "GV.PO-01", "clauseId": "nist-csf@2.0#GV.PO-01", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.12" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__GV.PO-01.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "GV.PO-02", "clauseId": "nist-csf@2.0#GV.PO-02", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.7.13", "22.9.5" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__GV.PO-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "GV.RM-01", "clauseId": "nist-csf@2.0#GV.RM-01", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.7.10" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__GV.RM-01.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Risk management strategy", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "GV.RR-01", "clauseId": "nist-csf@2.0#GV.RR-01", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.7.11" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__GV.RR-01.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Organisational leadership", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "GV.SC-01", "clauseId": "nist-csf@2.0#GV.SC-01", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.15" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__GV.SC-01.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "ID.AM-01", "clauseId": "nist-csf@2.0#ID.AM-01", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.7.16", "22.7.1" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__ID.AM-01.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Asset inventory", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "ID.AM-02", "clauseId": "nist-csf@2.0#ID.AM-02", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.17" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__ID.AM-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "ID.AM-03", "clauseId": "nist-csf@2.0#ID.AM-03", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.18" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__ID.AM-03.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "ID.AM-2", "clauseId": "nist-csf@2.0#ID.AM-2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.3" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__ID.AM-2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "ID.IM-01", "clauseId": "nist-csf@2.0#ID.IM-01", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.21" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__ID.IM-01.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "ID.IM-02", "clauseId": "nist-csf@2.0#ID.IM-02", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.7.22", "22.9.3" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__ID.IM-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "ID.RA-01", "clauseId": "nist-csf@2.0#ID.RA-01", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.7.19" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__ID.RA-01.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Risk assessment", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "ID.RA-02", "clauseId": "nist-csf@2.0#ID.RA-02", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.20" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__ID.RA-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "PR.AA-01", "clauseId": "nist-csf@2.0#PR.AA-01", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.7.23" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__PR.AA-01.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Authentication", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "PR.AA-02", "clauseId": "nist-csf@2.0#PR.AA-02", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.24" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__PR.AA-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "PR.AA-05", "clauseId": "nist-csf@2.0#PR.AA-05", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.7.4" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__PR.AA-05.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "full", "topic": "Access permissions", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "PR.AC-1", "clauseId": "nist-csf@2.0#PR.AC-1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.4" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__PR.AC-1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "PR.AT-01", "clauseId": "nist-csf@2.0#PR.AT-01", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.25" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__PR.AT-01.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "PR.DS-01", "clauseId": "nist-csf@2.0#PR.DS-01", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.7.26" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__PR.DS-01.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Data-at-rest protection", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "PR.DS-02", "clauseId": "nist-csf@2.0#PR.DS-02", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.7.27" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__PR.DS-02.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Data-in-transit protection", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "PR.IR-01", "clauseId": "nist-csf@2.0#PR.IR-01", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.29" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__PR.IR-01.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "PR.IR-02", "clauseId": "nist-csf@2.0#PR.IR-02", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.30" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__PR.IR-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "PR.PS-01", "clauseId": "nist-csf@2.0#PR.PS-01", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.28" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__PR.PS-01.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "PR.PS-04", "clauseId": "nist-csf@2.0#PR.PS-04", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.32" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__PR.PS-04.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "full", "topic": "Log generation", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RC.CO-01", "clauseId": "nist-csf@2.0#RC.CO-01", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.49" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RC.CO-01.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RC.CO-02", "clauseId": "nist-csf@2.0#RC.CO-02", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.50" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RC.CO-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "RC.RP-01", "clauseId": "nist-csf@2.0#RC.RP-01", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.7.46" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RC.RP-01.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Recovery plan execution", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RC.RP-02", "clauseId": "nist-csf@2.0#RC.RP-02", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.47" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RC.RP-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RC.RP-03", "clauseId": "nist-csf@2.0#RC.RP-03", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.48" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RC.RP-03.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RC.RP-1", "clauseId": "nist-csf@2.0#RC.RP-1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.7" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RC.RP-1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RS.AN-01", "clauseId": "nist-csf@2.0#RS.AN-01", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.41" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RS.AN-01.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RS.AN-02", "clauseId": "nist-csf@2.0#RS.AN-02", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.42" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RS.AN-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "RS.AN-03", "clauseId": "nist-csf@2.0#RS.AN-03", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.7.6" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RS.AN-03.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "full", "topic": "Incident analysis", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RS.CO-01", "clauseId": "nist-csf@2.0#RS.CO-01", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.43" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RS.CO-01.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RS.CO-02", "clauseId": "nist-csf@2.0#RS.CO-02", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.44" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RS.CO-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "RS.MA-01", "clauseId": "nist-csf@2.0#RS.MA-01", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.7.39" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RS.MA-01.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nist-csf", "regulationShortName": "NIST CSF", "tier": 1, "topAssurance": "partial", "topic": "Incident management", "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RS.MA-02", "clauseId": "nist-csf@2.0#RS.MA-02", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.40" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RS.MA-02.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RS.MI-01", "clauseId": "nist-csf@2.0#RS.MI-01", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.45" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RS.MI-01.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "RS.RP-1", "clauseId": "nist-csf@2.0#RS.RP-1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.7.6" ], "endpoint": "/api/v1/compliance/clauses/nist-csf__2.0__RS.RP-1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "nist-csf", "regulationShortName": "nist-csf", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 5, "unknown": 0 }, "clause": "§6-1", "clauseId": "no-kbf@2012 as amended#§6-1", "coverageState": "covered-partial", "coveringUcCount": 5, "coveringUcs": [ "22.26.6", "22.26.7", "22.26.8", "22.26.9", "22.26.10" ], "endpoint": "/api/v1/compliance/clauses/no-kbf__2012%20as%20amended__%C2%A76-1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "no-kbf", "regulationShortName": "no-kbf", "tier": null, "topAssurance": "partial", "topic": null, "version": "2012 as amended" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "§6-1", "clauseId": "no-kbf-nve@2012 as amended#§6-1", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/no-kbf-nve__2012%20as%20amended__%C2%A76-1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "no-kbf-nve", "regulationShortName": "NO KBF", "tier": 2, "topAssurance": null, "topic": "Informasjonssikkerhet", "version": "2012 as amended" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§14", "clauseId": "no-personopplysningsloven@2018#§14", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.18" ], "endpoint": "/api/v1/compliance/clauses/no-personopplysningsloven__2018__%C2%A714.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "no-personopplysningsloven", "regulationShortName": "NO Personopplysningsloven", "tier": 2, "topAssurance": "partial", "topic": "Automated individual decision-making restrictions", "version": "2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§2", "clauseId": "no-personopplysningsloven@2018#§2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.19" ], "endpoint": "/api/v1/compliance/clauses/no-personopplysningsloven__2018__%C2%A72.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "no-personopplysningsloven", "regulationShortName": "NO Personopplysningsloven", "tier": 2, "topAssurance": "partial", "topic": "Territorial and material scope", "version": "2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 5, "unknown": 0 }, "clause": "§8", "clauseId": "no-personopplysningsloven@2018#§8", "coverageState": "covered-partial", "coveringUcCount": 5, "coveringUcs": [ "22.26.16", "22.26.17", "22.26.18", "22.26.19", "22.26.20" ], "endpoint": "/api/v1/compliance/clauses/no-personopplysningsloven__2018__%C2%A78.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "no-personopplysningsloven", "regulationShortName": "NO Personopplysningsloven", "tier": 2, "topAssurance": "partial", "topic": "Processing of special categories of personal data", "version": "2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§11", "clauseId": "no-petroleumsforskriften@1997 as amended#§11", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.7" ], "endpoint": "/api/v1/compliance/clauses/no-petroleumsforskriften__1997%20as%20amended__%C2%A711.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "no-petroleumsforskriften", "regulationShortName": "NO Petroleumsforskriften", "tier": 2, "topAssurance": "partial", "topic": "Emergency preparedness and response", "version": "1997 as amended" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 5, "unknown": 0 }, "clause": "§15", "clauseId": "no-petroleumsforskriften@1997 as amended#§15", "coverageState": "covered-partial", "coveringUcCount": 5, "coveringUcs": [ "22.26.11", "22.26.12", "22.26.13", "22.26.14", "22.26.15" ], "endpoint": "/api/v1/compliance/clauses/no-petroleumsforskriften__1997%20as%20amended__%C2%A715.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "no-petroleumsforskriften", "regulationShortName": "NO Petroleumsforskriften", "tier": 2, "topAssurance": "partial", "topic": "Health, safety and environmental (HSE) management requirements", "version": "1997 as amended" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§3", "clauseId": "no-petroleumsforskriften@1997 as amended#§3", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.20" ], "endpoint": "/api/v1/compliance/clauses/no-petroleumsforskriften__1997%20as%20amended__%C2%A73.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "no-petroleumsforskriften", "regulationShortName": "NO Petroleumsforskriften", "tier": 2, "topAssurance": "partial", "topic": "General operator obligations for safety and security", "version": "1997 as amended" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§5-2", "clauseId": "no-sikkerhetsloven@2018#§5-2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.21" ], "endpoint": "/api/v1/compliance/clauses/no-sikkerhetsloven__2018__%C2%A75-2.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "no-sikkerhetsloven", "regulationShortName": "NO Sikkerhetsloven", "tier": 2, "topAssurance": "partial", "topic": "Internal control and annual security review", "version": "2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "§5-3", "clauseId": "no-sikkerhetsloven@2018#§5-3", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "22.26.1", "22.26.2", "22.26.3", "22.26.4" ], "endpoint": "/api/v1/compliance/clauses/no-sikkerhetsloven__2018__%C2%A75-3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "no-sikkerhetsloven", "regulationShortName": "NO Sikkerhetsloven", "tier": 2, "topAssurance": "partial", "topic": "Risk assessment and documentation of security level", "version": "2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§6-1", "clauseId": "no-sikkerhetsloven@2018#§6-1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.8" ], "endpoint": "/api/v1/compliance/clauses/no-sikkerhetsloven__2018__%C2%A76-1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "no-sikkerhetsloven", "regulationShortName": "NO Sikkerhetsloven", "tier": 2, "topAssurance": "partial", "topic": "General preventive security measures", "version": "2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§6-2", "clauseId": "no-sikkerhetsloven@2018#§6-2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.26.5" ], "endpoint": "/api/v1/compliance/clauses/no-sikkerhetsloven__2018__%C2%A76-2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "no-sikkerhetsloven", "regulationShortName": "NO Sikkerhetsloven", "tier": 2, "topAssurance": "partial", "topic": "Protection of classified / security-graded information", "version": "2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§12.4", "clauseId": "nzism@3.7#§12.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.22" ], "endpoint": "/api/v1/compliance/clauses/nzism__3.7__%C2%A712.4.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "nzism", "regulationShortName": "NZISM", "tier": 2, "topAssurance": "partial", "topic": "Information security documentation and policy", "version": "3.7" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§16.1.32", "clauseId": "nzism@3.7#§16.1.32", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.9" ], "endpoint": "/api/v1/compliance/clauses/nzism__3.7__%C2%A716.1.32.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nzism", "regulationShortName": "NZISM", "tier": 2, "topAssurance": "partial", "topic": "User identification, authentication and access management", "version": "3.7" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "§16.6.9", "clauseId": "nzism@3.7#§16.6.9", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.31.18", "22.31.20" ], "endpoint": "/api/v1/compliance/clauses/nzism__3.7__%C2%A716.6.9.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nzism", "regulationShortName": "NZISM", "tier": 2, "topAssurance": "partial", "topic": "Event logging requirements", "version": "3.7" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§17.2.17", "clauseId": "nzism@3.7#§17.2.17", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.31.19" ], "endpoint": "/api/v1/compliance/clauses/nzism__3.7__%C2%A717.2.17.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "nzism", "regulationShortName": "NZISM", "tier": 2, "topAssurance": "partial", "topic": "Information security incident management and response", "version": "3.7" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "10.1", "clauseId": "pci-dss@v3.2.1#10.1", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.67" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v3.2.1__10.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Audit trail linking access to user", "version": "v3.2.1" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "10.2", "clauseId": "pci-dss@v3.2.1#10.2", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.61" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v3.2.1__10.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Audit events required to be logged", "version": "v3.2.1" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "10.5", "clauseId": "pci-dss@v3.2.1#10.5", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.65" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v3.2.1__10.5.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Log integrity", "version": "v3.2.1" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "10.6", "clauseId": "pci-dss@v3.2.1#10.6", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.63" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v3.2.1__10.6.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Log review", "version": "v3.2.1" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "11.4", "clauseId": "pci-dss@v3.2.1#11.4", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.77" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v3.2.1__11.4.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Intrusion detection", "version": "v3.2.1" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "3.4", "clauseId": "pci-dss@v3.2.1#3.4", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.18" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v3.2.1__3.4.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "PAN rendering unreadable", "version": "v3.2.1" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "8.2.3", "clauseId": "pci-dss@v3.2.1#8.2.3", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.48" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v3.2.1__8.2.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Strong password parameters", "version": "v3.2.1" }, { "assuranceBreakdown": { "contributing": 5, "full": 0, "partial": 0, "unknown": 0 }, "clause": "1.1.1", "clauseId": "pci-dss@v4.0#1.1.1", "coverageState": "contributing-only", "coveringUcCount": 5, "coveringUcs": [ "5.13.28", "5.13.29", "5.13.30", "5.13.31", "5.13.33" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__1.1.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "1.2", "clauseId": "pci-dss@v4.0#1.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.42.2" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__1.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "partial", "topic": "Network security controls configuration", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "1.2.1", "clauseId": "pci-dss@v4.0#1.2.1", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.11.2", "22.11.82" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__1.2.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "1.2.3", "clauseId": "pci-dss@v4.0#1.2.3", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.75" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__1.2.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "1.2.6", "clauseId": "pci-dss@v4.0#1.2.6", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.7" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__1.2.6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "1.2.8", "clauseId": "pci-dss@v4.0#1.2.8", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.1" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__1.2.8.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "1.3", "clauseId": "pci-dss@v4.0#1.3", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.91" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__1.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "CDE network boundary", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "1.3.1", "clauseId": "pci-dss@v4.0#1.3.1", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.8.32", "22.11.3" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__1.3.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "partial", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "1.3.2", "clauseId": "pci-dss@v4.0#1.3.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.4" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__1.3.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "1.3.3", "clauseId": "pci-dss@v4.0#1.3.3", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.78" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__1.3.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "1.3.7", "clauseId": "pci-dss@v4.0#1.3.7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.5" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__1.3.7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "10.2", "clauseId": "pci-dss@v4.0#10.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.40.1" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.2.json", "obligationTextPresent": true, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "partial", "topic": "Audit logs captured for all system components", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "10.2.1", "clauseId": "pci-dss@v4.0#10.2.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.35.1" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.2.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "partial", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "10.2.1.2", "clauseId": "pci-dss@v4.0#10.2.1.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.65" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.2.1.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 3, "full": 1, "partial": 0, "unknown": 0 }, "clause": "10.2.2", "clauseId": "pci-dss@v4.0#10.2.2", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.40.5", "22.11.44", "22.11.67", "22.11.71" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.2.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "full", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "10.2.4", "clauseId": "pci-dss@v4.0#10.2.4", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.49" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.2.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "10.3", "clauseId": "pci-dss@v4.0#10.3", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.99" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Audit logs protected from modification", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "10.3.1", "clauseId": "pci-dss@v4.0#10.3.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.61" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.3.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "10.3.2", "clauseId": "pci-dss@v4.0#10.3.2", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.35.5" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.3.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "full", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "10.3.4", "clauseId": "pci-dss@v4.0#10.3.4", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.35.4" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.3.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "full", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "10.4", "clauseId": "pci-dss@v4.0#10.4", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.100" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.4.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Time synchronised", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "10.4.1", "clauseId": "pci-dss@v4.0#10.4.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "10.12.7" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.4.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "10.4.1.1", "clauseId": "pci-dss@v4.0#10.4.1.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.63" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.4.1.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "10.5", "clauseId": "pci-dss@v4.0#10.5", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.35.2" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "full", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "10.5.1", "clauseId": "pci-dss@v4.0#10.5.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.62" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.5.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "10.5.1.2", "clauseId": "pci-dss@v4.0#10.5.1.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.68" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.5.1.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "10.6", "clauseId": "pci-dss@v4.0#10.6", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.101" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.6.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Logs reviewed", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "10.6.1.2", "clauseId": "pci-dss@v4.0#10.6.1.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.64" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.6.1.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "10.6.1.3", "clauseId": "pci-dss@v4.0#10.6.1.3", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.66" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.6.1.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "10.6.2", "clauseId": "pci-dss@v4.0#10.6.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.8.38" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.6.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "partial", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "10.7", "clauseId": "pci-dss@v4.0#10.7", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.102" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__10.7.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Log retention", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "11.2.1", "clauseId": "pci-dss@v4.0#11.2.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "5.13.61" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__11.2.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "partial", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "11.3", "clauseId": "pci-dss@v4.0#11.3", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.103" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__11.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "External and internal vulnerabilities identified", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "11.3.1", "clauseId": "pci-dss@v4.0#11.3.1", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.3.43", "22.11.33" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__11.3.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "partial", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "11.3.1.1", "clauseId": "pci-dss@v4.0#11.3.1.1", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.43.4" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__11.3.1.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "full", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "11.3.1.3", "clauseId": "pci-dss@v4.0#11.3.1.3", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.74" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__11.3.1.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "11.3.2", "clauseId": "pci-dss@v4.0#11.3.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.73" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__11.3.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "11.4", "clauseId": "pci-dss@v4.0#11.4", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.104" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__11.4.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Intrusion detection / prevention", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "11.4.1", "clauseId": "pci-dss@v4.0#11.4.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.69" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__11.4.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "11.4.4", "clauseId": "pci-dss@v4.0#11.4.4", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.77" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__11.4.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "11.4.5", "clauseId": "pci-dss@v4.0#11.4.5", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.76" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__11.4.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "11.5.1", "clauseId": "pci-dss@v4.0#11.5.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.70" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__11.5.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "11.5.1.1", "clauseId": "pci-dss@v4.0#11.5.1.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.81" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__11.5.1.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "12.1.1", "clauseId": "pci-dss@v4.0#12.1.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.60" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.1.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "12.1.2", "clauseId": "pci-dss@v4.0#12.1.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.90" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.1.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "12.10", "clauseId": "pci-dss@v4.0#12.10", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.105" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.10.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Security incident response", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "12.10.1", "clauseId": "pci-dss@v4.0#12.10.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.72" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.10.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "12.10.2", "clauseId": "pci-dss@v4.0#12.10.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.84" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.10.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "12.3", "clauseId": "pci-dss@v4.0#12.3", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.106" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.3.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Targeted risk analysis", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "12.3.2", "clauseId": "pci-dss@v4.0#12.3.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.85" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.3.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "12.5.1", "clauseId": "pci-dss@v4.0#12.5.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.88" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.5.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "12.5.2", "clauseId": "pci-dss@v4.0#12.5.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "10.12.15" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.5.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 2, "unknown": 0 }, "clause": "12.6", "clauseId": "pci-dss@v4.0#12.6", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.46.1", "22.6.53", "22.46.2" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "full", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "12.6.1", "clauseId": "pci-dss@v4.0#12.6.1", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.11.31", "22.11.87" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.6.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "12.6.3", "clauseId": "pci-dss@v4.0#12.6.3", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.46.3", "22.11.83" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.6.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "partial", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "12.8.1", "clauseId": "pci-dss@v4.0#12.8.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.46" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.8.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "12.8.2", "clauseId": "pci-dss@v4.0#12.8.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.86" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__12.8.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "2.1.2", "clauseId": "pci-dss@v4.0#2.1.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.11" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__2.1.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "2.2", "clauseId": "pci-dss@v4.0#2.2", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.92" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__2.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Secure system component configuration", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "2.2.2", "clauseId": "pci-dss@v4.0#2.2.2", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.11.8", "22.11.52" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__2.2.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "2.2.3", "clauseId": "pci-dss@v4.0#2.2.3", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.11.9", "22.11.13" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__2.2.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 4, "full": 0, "partial": 0, "unknown": 0 }, "clause": "2.2.4", "clauseId": "pci-dss@v4.0#2.2.4", "coverageState": "contributing-only", "coveringUcCount": 4, "coveringUcs": [ "22.11.6", "22.11.12", "22.11.26", "22.11.89" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__2.2.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "2.2.5", "clauseId": "pci-dss@v4.0#2.2.5", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.10" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__2.2.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "3.2.1", "clauseId": "pci-dss@v4.0#3.2.1", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.11.19", "22.11.58" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__3.2.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "3.3", "clauseId": "pci-dss@v4.0#3.3", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.93" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__3.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Sensitive authentication data not stored", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "3.3.1", "clauseId": "pci-dss@v4.0#3.3.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.16" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__3.3.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 0, "unknown": 0 }, "clause": "3.4.1", "clauseId": "pci-dss@v4.0#3.4.1", "coverageState": "contributing-only", "coveringUcCount": 3, "coveringUcs": [ "22.11.14", "22.11.18", "22.11.25" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__3.4.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "3.5", "clauseId": "pci-dss@v4.0#3.5", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.41.1" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__3.5.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "PAN protection", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "3.5.1", "clauseId": "pci-dss@v4.0#3.5.1", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.11.17", "22.11.20" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__3.5.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "3.6", "clauseId": "pci-dss@v4.0#3.6", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.41.3" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__3.6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "full", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "3.6.1", "clauseId": "pci-dss@v4.0#3.6.1", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.41.5", "22.11.15" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__3.6.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "full", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "3.6.4", "clauseId": "pci-dss@v4.0#3.6.4", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.21" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__3.6.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "4.2", "clauseId": "pci-dss@v4.0#4.2", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.41.2" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__4.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Strong cryptography for CHD in transit", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 2, "partial": 0, "unknown": 0 }, "clause": "4.2.1", "clauseId": "pci-dss@v4.0#4.2.1", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.8.31", "22.41.4", "22.11.22", "22.11.23" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__4.2.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "full", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "4.2.1.2", "clauseId": "pci-dss@v4.0#4.2.1.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.24" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__4.2.1.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "5.2", "clauseId": "pci-dss@v4.0#5.2", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.94" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__5.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Anti-malware mechanisms", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 0, "unknown": 0 }, "clause": "5.3.1", "clauseId": "pci-dss@v4.0#5.3.1", "coverageState": "contributing-only", "coveringUcCount": 3, "coveringUcs": [ "22.11.27", "22.11.30", "22.11.32" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__5.3.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "5.3.2", "clauseId": "pci-dss@v4.0#5.3.2", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.11.28", "22.11.29" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__5.3.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "6.2", "clauseId": "pci-dss@v4.0#6.2", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.95" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__6.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Bespoke software developed securely", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "6.2.4", "clauseId": "pci-dss@v4.0#6.2.4", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.39" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__6.2.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 1, "unknown": 0 }, "clause": "6.3", "clauseId": "pci-dss@v4.0#6.3", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.43.1", "22.43.2" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__6.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Vulnerabilities identified and addressed", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 1, "unknown": 0 }, "clause": "6.3.1", "clauseId": "pci-dss@v4.0#6.3.1", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "5.13.35", "22.11.36", "22.11.79", "22.11.80" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__6.3.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "partial", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "6.3.2", "clauseId": "pci-dss@v4.0#6.3.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.38" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__6.3.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 1, "partial": 0, "unknown": 0 }, "clause": "6.3.3", "clauseId": "pci-dss@v4.0#6.3.3", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.43.3", "1.4.8", "22.11.34" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__6.3.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "full", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "6.4.2", "clauseId": "pci-dss@v4.0#6.4.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.35" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__6.4.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "6.4.4", "clauseId": "pci-dss@v4.0#6.4.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.12.39" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__6.4.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "partial", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "6.4.6", "clauseId": "pci-dss@v4.0#6.4.6", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.12.38" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__6.4.6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "partial", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "6.5.2", "clauseId": "pci-dss@v4.0#6.5.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.37" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__6.5.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "7.2", "clauseId": "pci-dss@v4.0#7.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.48.1" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__7.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "partial", "topic": "Access granted on least privilege", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "7.2.2", "clauseId": "pci-dss@v4.0#7.2.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.40" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__7.2.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "7.2.5", "clauseId": "pci-dss@v4.0#7.2.5", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.48.5", "22.11.41" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__7.2.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "partial", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "7.2.5.1", "clauseId": "pci-dss@v4.0#7.2.5.1", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.40.4" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__7.2.5.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "full", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "8.2.1", "clauseId": "pci-dss@v4.0#8.2.1", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.11.42", "22.11.43" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__8.2.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "8.2.4", "clauseId": "pci-dss@v4.0#8.2.4", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.12.36", "22.11.50" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__8.2.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "partial", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "8.2.5", "clauseId": "pci-dss@v4.0#8.2.5", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.12.37" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__8.2.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "partial", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "8.2.6", "clauseId": "pci-dss@v4.0#8.2.6", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.51" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__8.2.6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "8.2.8", "clauseId": "pci-dss@v4.0#8.2.8", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.55" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__8.2.8.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "8.3", "clauseId": "pci-dss@v4.0#8.3", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.96" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__8.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Strong authentication", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "8.3.7", "clauseId": "pci-dss@v4.0#8.3.7", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.48" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__8.3.7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "8.4", "clauseId": "pci-dss@v4.0#8.4", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.97" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__8.4.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "MFA", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "8.4.2", "clauseId": "pci-dss@v4.0#8.4.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.47" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__8.4.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "8.5.1", "clauseId": "pci-dss@v4.0#8.5.1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.53" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__8.5.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "8.6", "clauseId": "pci-dss@v4.0#8.6", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.11.98" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__8.6.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pci-dss", "regulationShortName": "PCI DSS", "tier": 1, "topAssurance": "full", "topic": "Application and system accounts", "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 0, "unknown": 0 }, "clause": "8.6.1", "clauseId": "pci-dss@v4.0#8.6.1", "coverageState": "contributing-only", "coveringUcCount": 2, "coveringUcs": [ "22.11.45", "22.11.54" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__8.6.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "9.3.2", "clauseId": "pci-dss@v4.0#9.3.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.59" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__9.3.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "9.4.2", "clauseId": "pci-dss@v4.0#9.4.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.56" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__9.4.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "9.4.4", "clauseId": "pci-dss@v4.0#9.4.4", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.11.57" ], "endpoint": "/api/v1/compliance/clauses/pci-dss__v4.0__9.4.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pci-dss", "regulationShortName": "pci-dss", "tier": null, "topAssurance": "contributing", "topic": null, "version": "v4.0" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 3, "unknown": 0 }, "clause": "Art.14", "clauseId": "pipl@2021#Art.14", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.29.27", "22.29.29", "22.29.30" ], "endpoint": "/api/v1/compliance/clauses/pipl__2021__Art.14.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pipl", "regulationShortName": "pipl", "tier": null, "topAssurance": "partial", "topic": null, "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 6, "unknown": 0 }, "clause": "Art.15", "clauseId": "pipl@2021#Art.15", "coverageState": "covered-partial", "coveringUcCount": 6, "coveringUcs": [ "22.29.7", "22.29.8", "22.29.9", "22.29.11", "22.29.12", "22.29.26" ], "endpoint": "/api/v1/compliance/clauses/pipl__2021__Art.15.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pipl", "regulationShortName": "pipl", "tier": null, "topAssurance": "partial", "topic": null, "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.29", "clauseId": "pipl@2021#Art.29", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.29.25" ], "endpoint": "/api/v1/compliance/clauses/pipl__2021__Art.29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pipl", "regulationShortName": "pipl", "tier": null, "topAssurance": "partial", "topic": null, "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 6, "unknown": 0 }, "clause": "Art.38", "clauseId": "pipl@2021#Art.38", "coverageState": "covered-partial", "coveringUcCount": 6, "coveringUcs": [ "22.29.1", "22.29.2", "22.29.3", "22.29.4", "22.29.5", "22.29.6" ], "endpoint": "/api/v1/compliance/clauses/pipl__2021__Art.38.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pipl", "regulationShortName": "PIPL", "tier": 2, "topAssurance": "partial", "topic": "Cross-border transfer conditions", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.51", "clauseId": "pipl@2021#Art.51", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.10" ], "endpoint": "/api/v1/compliance/clauses/pipl__2021__Art.51.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pipl", "regulationShortName": "PIPL", "tier": 2, "topAssurance": "partial", "topic": "Information security measures", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.6", "clauseId": "pipl@2021#Art.6", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.29.28" ], "endpoint": "/api/v1/compliance/clauses/pipl__2021__Art.6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "pipl", "regulationShortName": "pipl", "tier": null, "topAssurance": "partial", "topic": null, "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "§3.2", "clauseId": "pra-ss2-21@2021#§3.2", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "22.27.19", "22.27.20", "22.27.22", "22.27.23" ], "endpoint": "/api/v1/compliance/clauses/pra-ss2-21__2021__%C2%A73.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pra-ss2-21", "regulationShortName": "PRA SS2/21", "tier": 2, "topAssurance": "partial", "topic": "Proportionality", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 3, "unknown": 0 }, "clause": "§9", "clauseId": "pra-ss2-21@2021#§9", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "6.3.13", "6.3.23", "22.27.21" ], "endpoint": "/api/v1/compliance/clauses/pra-ss2-21__2021__%C2%A79.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "pra-ss2-21", "regulationShortName": "PRA SS2/21", "tier": 2, "topAssurance": "partial", "topic": "Business continuity & exit plans", "version": "2021" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 11, "unknown": 0 }, "clause": "Art.95", "clauseId": "psd2@Directive (EU) 2015/2366#Art.95", "coverageState": "covered-partial", "coveringUcCount": 12, "coveringUcs": [ "22.22.13", "22.22.14", "22.22.15", "22.22.16", "22.22.17", "22.22.19", "22.22.20", "22.22.21", "22.22.22", "22.22.23", "22.22.24", "12.3.2" ], "endpoint": "/api/v1/compliance/clauses/psd2__Directive%20%28EU%29%202015%2F2366__Art.95.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "psd2", "regulationShortName": "PSD2", "tier": 2, "topAssurance": "partial", "topic": "Management of operational and security risks", "version": "Directive (EU) 2015/2366" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 7, "unknown": 0 }, "clause": "Art.96", "clauseId": "psd2@Directive (EU) 2015/2366#Art.96", "coverageState": "covered-partial", "coveringUcCount": 7, "coveringUcs": [ "16.3.6", "22.22.25", "22.22.26", "22.22.27", "22.22.28", "22.22.29", "22.22.30" ], "endpoint": "/api/v1/compliance/clauses/psd2__Directive%20%28EU%29%202015%2F2366__Art.96.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "psd2", "regulationShortName": "PSD2", "tier": 2, "topAssurance": "partial", "topic": "Incident reporting", "version": "Directive (EU) 2015/2366" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 16, "unknown": 0 }, "clause": "Art.97", "clauseId": "psd2@Directive (EU) 2015/2366#Art.97", "coverageState": "covered-partial", "coveringUcCount": 17, "coveringUcs": [ "4.1.5", "9.3.1", "17.2.2", "22.22.1", "22.22.2", "22.22.3", "22.22.4", "22.22.5", "22.22.6", "22.22.7", "22.22.8", "22.22.9", "22.22.10", "22.22.11", "22.22.12", "22.22.18", "9.1.1" ], "endpoint": "/api/v1/compliance/clauses/psd2__Directive%20%28EU%29%202015%2F2366__Art.97.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "psd2", "regulationShortName": "PSD2", "tier": 2, "topAssurance": "partial", "topic": "Strong customer authentication", "version": "Directive (EU) 2015/2366" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "§3.1", "clauseId": "qcb-cyber@2018#§3.1", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "22.33.16", "22.33.18", "22.33.19", "22.33.20" ], "endpoint": "/api/v1/compliance/clauses/qcb-cyber__2018__%C2%A73.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "qcb-cyber", "regulationShortName": "QCB Cyber", "tier": 2, "topAssurance": "partial", "topic": "Cybersecurity governance and strategy", "version": "2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§4.1", "clauseId": "qcb-cyber@2018#§4.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.11" ], "endpoint": "/api/v1/compliance/clauses/qcb-cyber__2018__%C2%A74.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "qcb-cyber", "regulationShortName": "QCB Cyber", "tier": 2, "topAssurance": "partial", "topic": "Cyber risk identification and management", "version": "2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§6.2", "clauseId": "qcb-cyber@2018#§6.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.33.17" ], "endpoint": "/api/v1/compliance/clauses/qcb-cyber__2018__%C2%A76.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "qcb-cyber", "regulationShortName": "QCB Cyber", "tier": 2, "topAssurance": "partial", "topic": "Cyber incident management and response", "version": "2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 6, "unknown": 0 }, "clause": "Annex-A", "clauseId": "rbi-cyber@2016 (as amended)#Annex-A", "coverageState": "covered-partial", "coveringUcCount": 6, "coveringUcs": [ "1.1.76", "22.30.13", "22.30.14", "22.30.15", "22.30.16", "22.30.18" ], "endpoint": "/api/v1/compliance/clauses/rbi-cyber__2016%20%28as%20amended%29__Annex-A.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "rbi-cyber", "regulationShortName": "RBI Cyber", "tier": 2, "topAssurance": "partial", "topic": "Baseline cyber-security controls", "version": "2016 (as amended)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Annex-B", "clauseId": "rbi-cyber@2016 (as amended)#Annex-B", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.30.17" ], "endpoint": "/api/v1/compliance/clauses/rbi-cyber__2016%20%28as%20amended%29__Annex-B.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "rbi-cyber", "regulationShortName": "RBI Cyber", "tier": 2, "topAssurance": "partial", "topic": "Cyber-crisis management plan", "version": "2016 (as amended)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "Art. 19", "clauseId": "sa-pdpl@current#Art. 19", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "22.33.11", "22.33.12", "22.33.13", "22.33.15" ], "endpoint": "/api/v1/compliance/clauses/sa-pdpl__current__Art.%2019.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sa-pdpl", "regulationShortName": "SA PDPL", "tier": 2, "topAssurance": "partial", "topic": "Data security and protection obligations", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art. 20", "clauseId": "sa-pdpl@current#Art. 20", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.33.14" ], "endpoint": "/api/v1/compliance/clauses/sa-pdpl__current__Art.%2020.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sa-pdpl", "regulationShortName": "SA PDPL", "tier": 2, "topAssurance": "partial", "topic": "Personal data breach notification", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art. 29", "clauseId": "sa-pdpl@current#Art. 29", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.23" ], "endpoint": "/api/v1/compliance/clauses/sa-pdpl__current__Art.%2029.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "sa-pdpl", "regulationShortName": "SA PDPL", "tier": 2, "topAssurance": "partial", "topic": "Cross-border personal data transfers", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art. 6", "clauseId": "sa-pdpl@current#Art. 6", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.12" ], "endpoint": "/api/v1/compliance/clauses/sa-pdpl__current__Art.%206.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sa-pdpl", "regulationShortName": "SA PDPL", "tier": 2, "topAssurance": "partial", "topic": "Lawful grounds and consent for processing", "version": "current" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 4, "unknown": 0 }, "clause": "3.1.1", "clauseId": "sama-csf@v1.0 (2017)#3.1.1", "coverageState": "covered-partial", "coveringUcCount": 4, "coveringUcs": [ "22.33.6", "22.33.8", "22.33.9", "22.33.10" ], "endpoint": "/api/v1/compliance/clauses/sama-csf__v1.0%20%282017%29__3.1.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sama-csf", "regulationShortName": "SAMA CSF", "tier": 2, "topAssurance": "partial", "topic": "Cyber security governance", "version": "v1.0 (2017)" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 4, "unknown": 0 }, "clause": "3.3.5", "clauseId": "sama-csf@v1.0 (2017)#3.3.5", "coverageState": "covered-partial", "coveringUcCount": 6, "coveringUcs": [ "1.1.76", "4.1.1", "9.4.1", "22.33.7", "12.1.4", "17.2.2" ], "endpoint": "/api/v1/compliance/clauses/sama-csf__v1.0%20%282017%29__3.3.5.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sama-csf", "regulationShortName": "SAMA CSF", "tier": 2, "topAssurance": "partial", "topic": "Security monitoring", "version": "v1.0 (2017)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 8, "unknown": 0 }, "clause": "§24", "clauseId": "sg-pdpa@2020 amended#§24", "coverageState": "covered-partial", "coveringUcCount": 8, "coveringUcs": [ "11.1.5", "11.1.6", "22.29.13", "22.29.14", "22.29.15", "22.29.16", "22.29.17", "22.29.18" ], "endpoint": "/api/v1/compliance/clauses/sg-pdpa__2020%20amended__%C2%A724.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sg-pdpa", "regulationShortName": "SG PDPA", "tier": 2, "topAssurance": "partial", "topic": "Protection of personal data obligation", "version": "2020 amended" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 6, "unknown": 0 }, "clause": "§26A", "clauseId": "sg-pdpa@2020 amended#§26A", "coverageState": "covered-partial", "coveringUcCount": 6, "coveringUcs": [ "11.1.6", "16.3.6", "22.29.7", "22.29.8", "22.29.9", "22.29.10" ], "endpoint": "/api/v1/compliance/clauses/sg-pdpa__2020%20amended__%C2%A726A.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sg-pdpa", "regulationShortName": "SG PDPA", "tier": 2, "topAssurance": "partial", "topic": "Data breach notification", "version": "2020 amended" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "§26B", "clauseId": "sg-pdpa@2020 amended#§26B", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "11.1.6" ], "endpoint": "/api/v1/compliance/clauses/sg-pdpa__2020%20amended__%C2%A726B.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sg-pdpa", "regulationShortName": "SG PDPA", "tier": 2, "topAssurance": "partial", "topic": "Criteria for notifiability", "version": "2020 amended" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "A1", "clauseId": "soc-2@2017 TSC#A1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.8.2" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__A1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 3, "full": 1, "partial": 1, "unknown": 0 }, "clause": "A1.2", "clauseId": "soc-2@2017 TSC#A1.2", "coverageState": "covered-full", "coveringUcCount": 5, "coveringUcs": [ "22.45.1", "22.35.3", "22.8.22", "22.8.27", "22.8.28" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__A1.2.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "Availability commitments", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "C1", "clauseId": "soc-2@2017 TSC#C1", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.8.3" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__C1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 1, "unknown": 0 }, "clause": "C1.1", "clauseId": "soc-2@2017 TSC#C1.1", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.8.38", "22.11.93", "22.8.29" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__C1.1.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "Confidentiality", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "CC1.1", "clauseId": "soc-2@2017 TSC#CC1.1", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.8.36", "22.8.9" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC1.1.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "Integrity and ethical values", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CC1.2", "clauseId": "soc-2@2017 TSC#CC1.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.8.4" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC1.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "CC1.3", "clauseId": "soc-2@2017 TSC#CC1.3", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.47.3" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC1.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "full", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CC1.4", "clauseId": "soc-2@2017 TSC#CC1.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.6.54" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC1.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "partial", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "CC1.5", "clauseId": "soc-2@2017 TSC#CC1.5", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.47.4" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC1.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "full", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 4, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CC2.1", "clauseId": "soc-2@2017 TSC#CC2.1", "coverageState": "contributing-only", "coveringUcCount": 4, "coveringUcs": [ "22.8.4", "22.8.10", "22.8.11", "22.9.10" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC2.1.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "contributing", "topic": "Internal communication", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 4, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CC3.1", "clauseId": "soc-2@2017 TSC#CC3.1", "coverageState": "covered-partial", "coveringUcCount": 5, "coveringUcs": [ "22.47.2", "22.8.12", "22.8.19", "22.8.23", "22.9.9" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC3.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "partial", "topic": "Risk assessment", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CC3.2", "clauseId": "soc-2@2017 TSC#CC3.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.8.5" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC3.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CC3.3", "clauseId": "soc-2@2017 TSC#CC3.3", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.8.5" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC3.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CC4.1", "clauseId": "soc-2@2017 TSC#CC4.1", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.47.5", "22.6.50" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC4.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "partial", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 2, "full": 1, "partial": 0, "unknown": 0 }, "clause": "CC5.1", "clauseId": "soc-2@2017 TSC#CC5.1", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.47.1", "22.8.15", "22.9.8" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC5.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "Control activities", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 2, "full": 1, "partial": 1, "unknown": 0 }, "clause": "CC6.1", "clauseId": "soc-2@2017 TSC#CC6.1", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.40.1", "22.11.96", "22.8.1", "22.8.16" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC6.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "Logical access controls", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "CC6.2", "clauseId": "soc-2@2017 TSC#CC6.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.12.36" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC6.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "partial", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 0, "full": 3, "partial": 0, "unknown": 0 }, "clause": "CC6.3", "clauseId": "soc-2@2017 TSC#CC6.3", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.12.37", "22.48.3", "22.48.4" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC6.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "full", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 1, "unknown": 0 }, "clause": "CC6.6", "clauseId": "soc-2@2017 TSC#CC6.6", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.8.31", "22.11.91", "22.8.18" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC6.6.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "Encryption in transit", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "CC6.7", "clauseId": "soc-2@2017 TSC#CC6.7", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.8.32" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC6.7.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "System boundaries and data transmission", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 4, "unknown": 0 }, "clause": "CC7.1", "clauseId": "soc-2@2017 TSC#CC7.1", "coverageState": "covered-full", "coveringUcCount": 6, "coveringUcs": [ "22.8.33", "22.6.49", "22.11.101", "22.11.104", "22.12.40", "22.8.1" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC7.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "System operations monitoring", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 8, "full": 0, "partial": 4, "unknown": 0 }, "clause": "CC7.2", "clauseId": "soc-2@2017 TSC#CC7.2", "coverageState": "covered-partial", "coveringUcCount": 12, "coveringUcs": [ "22.11.99", "22.35.1", "22.35.2", "22.35.5", "22.8.13", "22.8.14", "22.8.17", "22.8.20", "22.8.24", "22.8.25", "22.8.30", "22.9.6" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC7.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "partial", "topic": "System monitoring for anomalies", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 0, "full": 2, "partial": 0, "unknown": 0 }, "clause": "CC7.3", "clauseId": "soc-2@2017 TSC#CC7.3", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.6.52", "22.8.34" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC7.3.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "Evaluated events and incidents", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 1, "unknown": 0 }, "clause": "CC7.4", "clauseId": "soc-2@2017 TSC#CC7.4", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.8.35", "22.11.105" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC7.4.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "Incident response", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 3, "full": 5, "partial": 4, "unknown": 0 }, "clause": "CC8.1", "clauseId": "soc-2@2017 TSC#CC8.1", "coverageState": "covered-full", "coveringUcCount": 12, "coveringUcs": [ "22.12.38", "22.12.39", "22.42.1", "22.42.3", "22.42.4", "22.6.55", "22.11.92", "22.11.95", "22.42.5", "22.8.1", "22.8.21", "22.8.26" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC8.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "Change management", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "CC9.1", "clauseId": "soc-2@2017 TSC#CC9.1", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.8.37" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC9.1.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "Risk mitigation activities", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CC9.2", "clauseId": "soc-2@2017 TSC#CC9.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.8.8" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__CC9.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "P1.1", "clauseId": "soc-2@2017 TSC#P1.1", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.8.39" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__P1.1.json", "obligationTextPresent": false, "priorityWeight": 0.4, "regulationId": "soc-2", "regulationShortName": "SOC 2", "tier": 1, "topAssurance": "full", "topic": "Privacy notice", "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "P4.2", "clauseId": "soc-2@2017 TSC#P4.2", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.8.7" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__P4.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "P4.3", "clauseId": "soc-2@2017 TSC#P4.3", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.8.7" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__P4.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "PI1.3", "clauseId": "soc-2@2017 TSC#PI1.3", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.8.6" ], "endpoint": "/api/v1/compliance/clauses/soc-2__2017%20TSC__PI1.3.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "soc-2", "regulationShortName": "soc-2", "tier": null, "topAssurance": "contributing", "topic": null, "version": "2017 TSC" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 0, "unknown": 0 }, "clause": "ITGC.Access.Review", "clauseId": "sox@PCAOB AS 2201#ITGC.Access.Review", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "10.12.8" ], "endpoint": "/api/v1/compliance/clauses/sox__PCAOB%20AS%202201__ITGC.Access.Review.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "sox", "regulationShortName": "sox", "tier": null, "topAssurance": "contributing", "topic": null, "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "ITGC.Access.Review", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Access.Review", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "5.13.48", "5.13.49" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Access.Review.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "sox-itgc", "regulationShortName": "sox-itgc", "tier": null, "topAssurance": "partial", "topic": null, "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 2, "full": 4, "partial": 0, "unknown": 0 }, "clause": "ITGC.AccessMgmt.Privileged", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.AccessMgmt.Privileged", "coverageState": "covered-full", "coveringUcCount": 6, "coveringUcs": [ "7.1.21", "22.40.1", "22.40.2", "22.40.4", "22.12.2", "22.12.28" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.AccessMgmt.Privileged.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sox-itgc", "regulationShortName": "SOX ITGC", "tier": 1, "topAssurance": "full", "topic": "Privileged access", "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 1, "unknown": 0 }, "clause": "ITGC.AccessMgmt.Provisioning", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.AccessMgmt.Provisioning", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.12.36", "9.5.15", "22.12.1" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.AccessMgmt.Provisioning.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sox-itgc", "regulationShortName": "SOX ITGC", "tier": 1, "topAssurance": "full", "topic": "User provisioning", "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "ITGC.AccessMgmt.Review", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.AccessMgmt.Review", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.40.3", "22.12.26" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.AccessMgmt.Review.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "sox-itgc", "regulationShortName": "SOX ITGC", "tier": 1, "topAssurance": "full", "topic": "Periodic access review", "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 1, "unknown": 0 }, "clause": "ITGC.AccessMgmt.SOD", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.AccessMgmt.SOD", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.48.1", "22.48.2", "22.12.3" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.AccessMgmt.SOD.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sox-itgc", "regulationShortName": "SOX ITGC", "tier": 1, "topAssurance": "full", "topic": "Segregation of duties", "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 0, "unknown": 0 }, "clause": "ITGC.AccessMgmt.Termination", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.AccessMgmt.Termination", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.12.37", "22.12.5" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.AccessMgmt.Termination.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sox-itgc", "regulationShortName": "SOX ITGC", "tier": 1, "topAssurance": "full", "topic": "Timely deprovisioning", "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "ITGC.Change.Approval", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Change.Approval", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.42.4" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Change.Approval.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "sox-itgc", "regulationShortName": "sox-itgc", "tier": null, "topAssurance": "full", "topic": null, "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "ITGC.Change.Mgmt", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Change.Mgmt", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "5.13.32" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Change.Mgmt.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "sox-itgc", "regulationShortName": "sox-itgc", "tier": null, "topAssurance": "partial", "topic": null, "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "ITGC.Change.Rollback", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Change.Rollback", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.42.3" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Change.Rollback.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "sox-itgc", "regulationShortName": "sox-itgc", "tier": null, "topAssurance": "partial", "topic": null, "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "ITGC.Change.SoD", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Change.SoD", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.48.3" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Change.SoD.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "sox-itgc", "regulationShortName": "sox-itgc", "tier": null, "topAssurance": "full", "topic": null, "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 2, "full": 2, "partial": 2, "unknown": 0 }, "clause": "ITGC.ChangeMgmt.Approval", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.ChangeMgmt.Approval", "coverageState": "covered-full", "coveringUcCount": 6, "coveringUcs": [ "22.6.55", "22.12.39", "5.13.46", "12.2.17", "22.12.10", "22.12.11" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.ChangeMgmt.Approval.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sox-itgc", "regulationShortName": "SOX ITGC", "tier": 1, "topAssurance": "full", "topic": "Change approved", "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 2, "partial": 1, "unknown": 0 }, "clause": "ITGC.ChangeMgmt.Authorization", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.ChangeMgmt.Authorization", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "16.4.1", "22.42.1", "7.1.13" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.ChangeMgmt.Authorization.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sox-itgc", "regulationShortName": "SOX ITGC", "tier": 1, "topAssurance": "full", "topic": "Change authorised", "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 27, "full": 1, "partial": 1, "unknown": 0 }, "clause": "ITGC.ChangeMgmt.Testing", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.ChangeMgmt.Testing", "coverageState": "covered-full", "coveringUcCount": 29, "coveringUcs": [ "22.12.38", "22.11.95", "22.12.4", "22.12.6", "22.12.7", "22.12.8", "22.12.9", "22.12.12", "22.12.13", "22.12.14", "22.12.15", "22.12.16", "22.12.17", "22.12.18", "22.12.19", "22.12.20", "22.12.21", "22.12.22", "22.12.23", "22.12.24", "22.12.25", "22.12.27", "22.12.29", "22.12.30", "22.12.31", "22.12.32", "22.12.33", "22.12.34", "22.12.35" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.ChangeMgmt.Testing.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sox-itgc", "regulationShortName": "SOX ITGC", "tier": 1, "topAssurance": "full", "topic": "Change tested", "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "ITGC.Crypto.SoD", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Crypto.SoD", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.41.5" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Crypto.SoD.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "sox-itgc", "regulationShortName": "sox-itgc", "tier": null, "topAssurance": "partial", "topic": null, "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "ITGC.Evidence.Integrity", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Evidence.Integrity", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.47.4" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Evidence.Integrity.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "sox-itgc", "regulationShortName": "sox-itgc", "tier": null, "topAssurance": "full", "topic": null, "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "ITGC.Financial.SoD", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Financial.SoD", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.48.4" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Financial.SoD.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "sox-itgc", "regulationShortName": "sox-itgc", "tier": null, "topAssurance": "full", "topic": null, "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 1, "unknown": 0 }, "clause": "ITGC.Logging.Continuity", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Logging.Continuity", "coverageState": "contributing-only", "coveringUcCount": 4, "coveringUcs": [ "7.1.40", "22.9.8", "22.35.1", "22.35.2" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Logging.Continuity.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sox-itgc", "regulationShortName": "SOX ITGC", "tier": 1, "topAssurance": "partial", "topic": "Audit trail completeness", "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 1, "full": 1, "partial": 1, "unknown": 0 }, "clause": "ITGC.Logging.Integrity", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Logging.Integrity", "coverageState": "covered-full", "coveringUcCount": 3, "coveringUcs": [ "22.11.99", "22.11.102", "22.35.4" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Logging.Integrity.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "sox-itgc", "regulationShortName": "sox-itgc", "tier": null, "topAssurance": "full", "topic": null, "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 2, "unknown": 0 }, "clause": "ITGC.Logging.Review", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Logging.Review", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "5.13.45", "22.49.3", "22.47.2" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Logging.Review.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "sox-itgc", "regulationShortName": "SOX ITGC", "tier": 1, "topAssurance": "partial", "topic": "Log review", "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "ITGC.Operations.Backup", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Operations.Backup", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.45.3" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Operations.Backup.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "sox-itgc", "regulationShortName": "SOX ITGC", "tier": 1, "topAssurance": "full", "topic": "Backup and restore", "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "ITGC.Operations.JobSchedule", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Operations.JobSchedule", "coverageState": "covered-full", "coveringUcCount": 1, "coveringUcs": [ "22.12.40" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Operations.JobSchedule.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "sox-itgc", "regulationShortName": "SOX ITGC", "tier": 1, "topAssurance": "full", "topic": "Batch scheduling and monitoring", "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "ITGC.Privileged.JIT", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Privileged.JIT", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.40.5" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Privileged.JIT.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "sox-itgc", "regulationShortName": "sox-itgc", "tier": null, "topAssurance": "full", "topic": null, "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 0, "unknown": 0 }, "clause": "ITGC.Vendor.SoD", "clauseId": "sox-itgc@PCAOB AS 2201#ITGC.Vendor.SoD", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.48.5" ], "endpoint": "/api/v1/compliance/clauses/sox-itgc__PCAOB%20AS%202201__ITGC.Vendor.SoD.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "sox-itgc", "regulationShortName": "sox-itgc", "tier": null, "topAssurance": "full", "topic": null, "version": "PCAOB AS 2201" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 6, "unknown": 0 }, "clause": "1.1", "clauseId": "swift-csp@CSCF v2025#1.1", "coverageState": "covered-partial", "coveringUcCount": 7, "coveringUcs": [ "5.2.2", "22.34.2", "22.34.5", "22.34.6", "22.34.9", "22.34.10", "5.1.7" ], "endpoint": "/api/v1/compliance/clauses/swift-csp__CSCF%20v2025__1.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "swift-csp", "regulationShortName": "SWIFT CSP", "tier": 2, "topAssurance": "partial", "topic": "SWIFT environment protection", "version": "CSCF v2025" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "6.1", "clauseId": "swift-csp@CSCF v2025#6.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.13" ], "endpoint": "/api/v1/compliance/clauses/swift-csp__CSCF%20v2025__6.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "swift-csp", "regulationShortName": "SWIFT CSP", "tier": 2, "topAssurance": "partial", "topic": "Malware protection", "version": "CSCF v2025" }, { "assuranceBreakdown": { "contributing": 2, "full": 0, "partial": 11, "unknown": 0 }, "clause": "6.4", "clauseId": "swift-csp@CSCF v2025#6.4", "coverageState": "covered-partial", "coveringUcCount": 13, "coveringUcs": [ "1.1.65", "7.1.40", "13.1.35", "13.1.36", "22.34.1", "22.34.3", "22.34.4", "22.34.7", "22.34.8", "22.34.11", "22.34.12", "1.2.33", "15.3.2" ], "endpoint": "/api/v1/compliance/clauses/swift-csp__CSCF%20v2025__6.4.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "swift-csp", "regulationShortName": "SWIFT CSP", "tier": 2, "topAssurance": "partial", "topic": "Logging and monitoring", "version": "CSCF v2025" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.24", "clauseId": "swiss-nfadp@2020 revision#Art.24", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.39.1", "22.39.2" ], "endpoint": "/api/v1/compliance/clauses/swiss-nfadp__2020%20revision__Art.24.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "swiss-nfadp", "regulationShortName": "Swiss nFADP", "tier": 2, "topAssurance": "partial", "topic": "Data breach notification", "version": "2020 revision" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.7", "clauseId": "swiss-nfadp@2020 revision#Art.7", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.14" ], "endpoint": "/api/v1/compliance/clauses/swiss-nfadp__2020%20revision__Art.7.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "swiss-nfadp", "regulationShortName": "Swiss nFADP", "tier": 2, "topAssurance": "partial", "topic": "Privacy by design", "version": "2020 revision" }, { "assuranceBreakdown": { "contributing": 3, "full": 0, "partial": 32, "unknown": 0 }, "clause": "III.A", "clauseId": "tsa-sd@SD02C#III.A", "coverageState": "covered-partial", "coveringUcCount": 35, "coveringUcs": [ "14.2.4", "14.2.11", "22.16.1", "22.16.2", "22.16.3", "22.16.4", "22.16.5", "22.16.6", "22.16.7", "22.16.8", "22.16.9", "22.16.10", "22.16.11", "22.16.12", "22.16.13", "22.16.14", "22.16.15", "22.16.16", "22.16.17", "22.16.18", "22.16.19", "22.16.20", "22.16.21", "22.16.22", "22.16.23", "22.16.24", "22.16.25", "22.16.26", "22.16.27", "22.16.28", "22.16.29", "22.16.30", "15.3.1", "15.3.2", "15.3.37" ], "endpoint": "/api/v1/compliance/clauses/tsa-sd__SD02C__III.A.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "tsa-sd", "regulationShortName": "TSA SD", "tier": 2, "topAssurance": "partial", "topic": "Cybersecurity plan", "version": "SD02C" }, { "assuranceBreakdown": { "contributing": 1, "full": 0, "partial": 1, "unknown": 0 }, "clause": "III.D", "clauseId": "tsa-sd@SD02C#III.D", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "14.2.11", "14.9.22" ], "endpoint": "/api/v1/compliance/clauses/tsa-sd__SD02C__III.D.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "tsa-sd", "regulationShortName": "TSA SD", "tier": 2, "topAssurance": "partial", "topic": "Cybersecurity assessment", "version": "SD02C" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CE.BF.1", "clauseId": "uk-cyber-essentials@Montpellier (2025)#CE.BF.1", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/uk-cyber-essentials__Montpellier%20%282025%29__CE.BF.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "uk-cyber-essentials", "regulationShortName": "Cyber Essentials", "tier": 2, "topAssurance": null, "topic": "Boundary firewalls", "version": "Montpellier (2025)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "CE.SAU.1", "clauseId": "uk-cyber-essentials@Montpellier (2025)#CE.SAU.1", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/uk-cyber-essentials__Montpellier%20%282025%29__CE.SAU.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "uk-cyber-essentials", "regulationShortName": "Cyber Essentials", "tier": 2, "topAssurance": null, "topic": "Secure authentication & access", "version": "Montpellier (2025)" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.12", "clauseId": "uk-gdpr@post-Brexit#Art.12", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.36.1" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.12.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.12(6)", "clauseId": "uk-gdpr@post-Brexit#Art.12(6)", "coverageState": "contributing-only", "coveringUcCount": 1, "coveringUcs": [ "22.36.4" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.12%286%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.15", "clauseId": "uk-gdpr@post-Brexit#Art.15", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.36.1" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.15.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.17", "clauseId": "uk-gdpr@post-Brexit#Art.17", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.36.2", "22.49.5" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.17.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.17(2)", "clauseId": "uk-gdpr@post-Brexit#Art.17(2)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.36.2" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.17%282%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.18", "clauseId": "uk-gdpr@post-Brexit#Art.18", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.1.16" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.18.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.20", "clauseId": "uk-gdpr@post-Brexit#Art.20", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.36.3" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.20.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.21", "clauseId": "uk-gdpr@post-Brexit#Art.21", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.1.46" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.21.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.28", "clauseId": "uk-gdpr@post-Brexit#Art.28", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.44.2" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.28.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 3, "unknown": 0 }, "clause": "Art.32", "clauseId": "uk-gdpr@post-Brexit#Art.32", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.35.2", "22.35.3", "22.41.1" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.32.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "uk-gdpr", "regulationShortName": "UK GDPR", "tier": 2, "topAssurance": "partial", "topic": "Security of processing", "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.32(1)(b)", "clauseId": "uk-gdpr@post-Brexit#Art.32(1)(b)", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.35.1", "22.35.4" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.32%281%29%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.32(4)", "clauseId": "uk-gdpr@post-Brexit#Art.32(4)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.46.5" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.32%284%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 2, "partial": 0, "unknown": 0 }, "clause": "Art.33", "clauseId": "uk-gdpr@post-Brexit#Art.33", "coverageState": "covered-full", "coveringUcCount": 2, "coveringUcs": [ "22.39.1", "22.39.2" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.33.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "full", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.33(3)", "clauseId": "uk-gdpr@post-Brexit#Art.33(3)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.39.4" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.33%283%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.34", "clauseId": "uk-gdpr@post-Brexit#Art.34", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.39.3" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.34.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 3, "unknown": 0 }, "clause": "Art.44", "clauseId": "uk-gdpr@post-Brexit#Art.44", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.38.1", "22.38.3", "22.38.5" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.44.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.45", "clauseId": "uk-gdpr@post-Brexit#Art.45", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.38.2", "22.38.5" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.45.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 1, "partial": 3, "unknown": 0 }, "clause": "Art.46", "clauseId": "uk-gdpr@post-Brexit#Art.46", "coverageState": "covered-full", "coveringUcCount": 4, "coveringUcs": [ "22.38.4", "22.38.1", "22.38.2", "22.38.4" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.46.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "full", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 2, "unknown": 0 }, "clause": "Art.5", "clauseId": "uk-gdpr@post-Brexit#Art.5", "coverageState": "covered-partial", "coveringUcCount": 2, "coveringUcs": [ "22.49.1", "22.49.2" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.5(1)(b)", "clauseId": "uk-gdpr@post-Brexit#Art.5(1)(b)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.37.4" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.5%281%29%28b%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.5(1)(e)", "clauseId": "uk-gdpr@post-Brexit#Art.5(1)(e)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.49.4" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.5%281%29%28e%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.6", "clauseId": "uk-gdpr@post-Brexit#Art.6", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.37.1" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.6.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 3, "unknown": 0 }, "clause": "Art.7", "clauseId": "uk-gdpr@post-Brexit#Art.7", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "22.8.39", "22.37.1", "22.37.2" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.7.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "Art.7(1)", "clauseId": "uk-gdpr@post-Brexit#Art.7(1)", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.37.5" ], "endpoint": "/api/v1/compliance/clauses/uk-gdpr__post-Brexit__Art.7%281%29.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "uk-gdpr", "regulationShortName": "uk-gdpr", "tier": null, "topAssurance": "partial", "topic": null, "version": "post-Brexit" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 9, "unknown": 0 }, "clause": "Reg.10", "clauseId": "uk-nis@2018#Reg.10", "coverageState": "covered-partial", "coveringUcCount": 9, "coveringUcs": [ "22.27.1", "22.27.2", "22.27.3", "22.27.5", "22.27.6", "22.27.7", "22.27.8", "22.27.9", "22.27.10" ], "endpoint": "/api/v1/compliance/clauses/uk-nis__2018__Reg.10.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "uk-nis", "regulationShortName": "UK NIS", "tier": 2, "topAssurance": "partial", "topic": "OES security duties", "version": "2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 3, "unknown": 0 }, "clause": "Reg.11", "clauseId": "uk-nis@2018#Reg.11", "coverageState": "covered-partial", "coveringUcCount": 3, "coveringUcs": [ "16.1.20", "16.3.6", "22.27.4" ], "endpoint": "/api/v1/compliance/clauses/uk-nis__2018__Reg.11.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "uk-nis", "regulationShortName": "UK NIS", "tier": 2, "topAssurance": "partial", "topic": "Incident reporting", "version": "2018" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "7.2.2.2", "clauseId": "un-r155@2021#7.2.2.2", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.40" ], "endpoint": "/api/v1/compliance/clauses/un-r155__2021__7.2.2.2.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "un-r155", "regulationShortName": "un-r155", "tier": null, "topAssurance": "partial", "topic": null, "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "7.2.2.5", "clauseId": "un-r155@2021#7.2.2.5", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.41" ], "endpoint": "/api/v1/compliance/clauses/un-r155__2021__7.2.2.5.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "un-r155", "regulationShortName": "un-r155", "tier": null, "topAssurance": "partial", "topic": null, "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "7.1.1", "clauseId": "un-r156@2021#7.1.1", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.42" ], "endpoint": "/api/v1/compliance/clauses/un-r156__2021__7.1.1.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "un-r156", "regulationShortName": "un-r156", "tier": null, "topAssurance": "partial", "topic": null, "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 1, "unknown": 0 }, "clause": "7.1.4", "clauseId": "un-r156@2021#7.1.4", "coverageState": "covered-partial", "coveringUcCount": 1, "coveringUcs": [ "22.50.43" ], "endpoint": "/api/v1/compliance/clauses/un-r156__2021__7.1.4.json", "obligationTextPresent": false, "priorityWeight": null, "regulationId": "un-r156", "regulationShortName": "un-r156", "tier": null, "topAssurance": "partial", "topic": null, "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "7.2.2.2", "clauseId": "unece-r155@2021#7.2.2.2", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/unece-r155__2021__7.2.2.2.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "unece-r155", "regulationShortName": "UN R155", "tier": 2, "topAssurance": null, "topic": "Risk assessment and mitigation for vehicle cybersecurity", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "7.2.2.5", "clauseId": "unece-r155@2021#7.2.2.5", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/unece-r155__2021__7.2.2.5.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "unece-r155", "regulationShortName": "UN R155", "tier": 2, "topAssurance": null, "topic": "Monitoring, detecting, and responding to cyber attacks", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "7.1.1", "clauseId": "unece-r156@2021#7.1.1", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/unece-r156__2021__7.1.1.json", "obligationTextPresent": false, "priorityWeight": 1.0, "regulationId": "unece-r156", "regulationShortName": "UN R156", "tier": 2, "topAssurance": null, "topic": "Software update management system processes", "version": "2021" }, { "assuranceBreakdown": { "contributing": 0, "full": 0, "partial": 0, "unknown": 0 }, "clause": "7.1.4", "clauseId": "unece-r156@2021#7.1.4", "coverageState": "uncovered", "coveringUcCount": 0, "coveringUcs": [], "endpoint": "/api/v1/compliance/clauses/unece-r156__2021__7.1.4.json", "obligationTextPresent": false, "priorityWeight": 0.7, "regulationId": "unece-r156", "regulationShortName": "UN R156", "tier": 2, "topAssurance": null, "topic": "Recording and reporting of software updates", "version": "2021" } ], "clausesByRegulation": { "api-rp-1164": 2, "appi": 2, "apra-cps-234": 3, "asd-e8": 7, "au-privacy-act": 3, "bait-kait": 2, "basel-iii": 2, "bsi-kritisv": 1, "ccpa": 7, "ccpa-cpra": 14, "cjis": 3, "cmmc": 9, "cobit": 3, "coppa": 2, "coso": 4, "cyber-essentials": 2, "dora": 44, "eidas": 1, "eu-ai-act": 6, "eu-aml": 2, "eu-cra": 2, "fca-sm-cr": 4, "fca-smcr": 4, "fca-ss1-21": 3, "fda-part-11": 3, "fedramp": 4, "ferc-cip": 2, "ferpa": 2, "fisma": 3, "gdpr": 59, "glba": 3, "hipaa": 8, "hipaa-privacy": 4, "hipaa-security": 45, "hipaa-security-rule": 3, "hitrust": 2, "hkma-tm-g-2": 1, "iec-62443": 46, "iso-27001": 67, "iso-iec-27001": 40, "it-grundschutz": 2, "it-sig-2": 2, "it-sig-2-0": 2, "lgpd": 3, "mas-trm": 3, "mifid-ii": 7, "nerc-cip": 77, "nesa-ias": 4, "nesa-uae-ias": 4, "nis2": 55, "nist-800-53": 101, "nist-csf": 57, "no-kbf": 1, "no-kbf-nve": 1, "no-personopplysningsloven": 3, "no-petroleumsforskriften": 3, "no-sikkerhetsloven": 4, "nzism": 4, "pci-dss": 114, "pipl": 6, "pra-ss2-21": 2, "psd2": 3, "qcb-cyber": 3, "rbi-cyber": 2, "sa-pdpl": 4, "sama-csf": 2, "sg-pdpa": 3, "soc-2": 31, "sox": 1, "sox-itgc": 23, "swift-csp": 3, "swiss-nfadp": 2, "tsa-sd": 2, "uk-cyber-essentials": 2, "uk-gdpr": 24, "uk-nis": 2, "un-r155": 2, "un-r156": 2, "unece-r155": 2, "unece-r156": 2 }, "coverageStateCounts": { "contributing-only": 363, "covered-full": 196, "covered-partial": 402, "uncovered": 33 }, "generatedAt": "2026-05-04T08:36:21Z", "methodology": { "clauseIdShape": "{regulationId}@{version}#{clause}", "endpointFilename": "urlencoded components joined by '__', with version '/' replaced by '_'", "sources": [ "content/cat-*/UC-*.json", "data/regulations.json" ] }, "tierCoverageStateCounts": { "1": { "contributing-only": 44, "covered-full": 108, "covered-partial": 73, "uncovered": 14 }, "2": { "contributing-only": 3, "covered-full": 10, "covered-partial": 116, "uncovered": 19 }, "3": { "covered-partial": 2 } }, "totalClauses": 994 }