To ensure the approved data integrity management requirements are translated into effective operational activities, controls, and services rather than remaining documented intentions.
Apply preventive controls such as least privilege, change control, integrity checks, hashing, checksums, transaction controls, and protected backups according to data criticality.
| FRAMEWORK CODE | FRAMEWORK NAME & DETAILS | FAMILY / CATEGORY | VERSION | ACTION |
|---|---|---|---|---|
| DORA | Digital Operational Resilience Act The EU Digital Operational Resilience Act establis... Clause: Article 9(2) – ICT security policies, procedures, protocols and tools for resilience and data security Article 9(3) – ICT solutions/processes for secure data transfer and prevention of loss, unauthorised access and data compromise |
EU
Regulation
|
vCurrent | View → |
| DPDP | Digital Personal Data Protection Act The Digital Personal Data Protection Act, 2023 est... Clause: 8(5) – Reasonable security safeguards to prevent personal data breach |
India
Law
|
v2023 | View → |
| GDPR | General Data Protection Regulation (GDPR) The General Data Protection Regulation is a bindin... Clause: Article 5(1)(d) – Accuracy; Article 5(1)(f) – Integrity and confidentiality; Article 32(1) – Security of processing |
EU
Regulation
|
vCurrent | View → |
| HIPAA | Health Insurance Portability and Accountability Act HIPAA is a U.S. federal law supported by implement... Clause: § 164.312(e) Standard: Integrity |
US
Law
|
vCurrent | View → |
| IRDAI | IRDAI Information & Cyber Security Guidelines IRDAI information and cyber-security requirements... Clause: §2.1-3.3 – Data Classification Process |
India
Guideline
|
vLatest | View → |
| ISO27701 | ISO/IEC 27701 ISO/IEC 27701 provides requirements and guidance f... Clause: A.7.4.3; A.7.4.3 – Accuracy and quality |
ISO
Privacy Standard
|
v2019 | View → |
| NIS2 | NIS2 Directive The NIS2 Directive establishes EU-wide cybersecuri... Clause: Article 21(1) – Cybersecurity risk-management measures – general obligation |
EU
Directive
|
vCurrent | View → |
| NIST-CSF | NIST Cybersecurity Framework (CSF) The NIST Cybersecurity Framework provides high-lev... Clause: PR.DS – Data Security | PR.DS-01 – The confidentiality, integrity, and availability of data-at-rest are protected |
NIST
Framework
|
v2 | View → |
| NIST80053 | NIST SP 800-53 NIST SP 800-53 Rev. 5 presents control families, i... Clause: 3.19 – SYSTEM AND INFORMATION INTEGRITY; SI-7 – SOFTWARE, FIRMWARE, AND INFORMATION INTEGRITY, Firmware, And Information Integrity, SI-10 – INFORMATION INPUT VALIDATION |
NIST
Control Catalog
|
vRev. 5 | View → |
| NPCI-ISR | NPCI Information Security Requirements NPCI information-security requirements define cont... Clause: Security Measures / Controls; Data Security – Protection |
India
Standard
|
vLatest | View → |
| PCI-DSS | PCI DSS PCI DSS is an industry security standard maintaine... Clause: 3.5.1 – PAN is rendered unreadable anywhere it is stored |
PCI
Standard
|
v4 | View → |
| RBI-CSF | RBI Cyber Security Framework / Master Directions RBI cyber-security requirements and directions set... Clause: 1) Inventory Management of Business IT Assets – 1.1 Asset inventory incl. business/customer data, applications, infrastructure, facilities, key personnel and criticality; 1) Inventory Management of Business IT Assets – 1.2 Data/information classification by sensitivity; 1) Inventory Management of Business IT Assets – 1.3 Protection of data/information across storage, transmission, processing and access, inside/outside the bank |
India
Regulation
|
vLatest | View → |
| SEBI-CSCRF | SEBI Cyber Security & Cyber Resilience Framework SEBI’s Cybersecurity and Cyber Resilience Framewor... Clause: 3.3 PR.DS: Data Security |
India
Regulation
|
vLatest | View → |
| SOC2 | SOC 2 Trust Services Criteria SOC 2 is an independent examination and reporting... Clause: P7.1 – Privacy: Quality – The entity collects and maintains accurate, up-to-date, complete, and relevant personal information to meet the entity’s objectives related to privacy. PI1.1 – Processing Integrity – The entity obtains or generates, uses, and communicates relevant, quality information regarding the objectives related to processing, including definitions of data processed and product and service specifications, to support the use of products and services. CC1.1 – Control Environment – COSO Principle 1: The entity demonstrates a commitment to integrity and ethical values. |
AICPA
Audit Framework
|
vLatest | View → |