64% of Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018) you already have
AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) already covers about 64% of Austria Data Protection Act (Datenschutzgesetz, DSG, amended 2018), leaving
5 of 14 controls as genuinely new work.
Already covered 6
Likely covered 3
New work 5
What is genuinely new work
Nothing in AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) reaches these. This is the list to scope.
AT-DSG-1Section 1 - Fundamental right to data protection
AT-DSG-3Section 4(4) - Age of consent for children
AT-DSG-4Section 6 - Data secrecy (Datengeheimnis)
AT-DSG-5Section 9 - Media and journalistic exemption
AT-DSG-9Section 24 - Complaint procedures
Show the 9 you already have
AT-DSG-10Section 29 - Liability and right to compensation / civil jurisdiction
AT-DSG-12Section 62 - Administrative penalties
AT-DSG-2Section 2 - Scope and application
AT-DSG-6Sections 12-13 - Image processing (video surveillance/CCTV)
AT-DSG-7Section 18 - Establishment of the Data Protection Authority
AT-DSG-8Section 22 - Functions and powers of the DPA
AT-DSG-11Sections 42-45 - Data subject rights (law enforcement)
AT-DSG-13Section 36 - Scope of law enforcement processing
AT-DSG-14Section 38 - Lawfulness of law enforcement processing
How this is calculated
Already covered means a mapping runs from a control in AWWA Cybersecurity Guidance for the Water Sector (American Water Works Association) to that control. Likely
covered means no direct mapping exists but both frameworks map to the same control in a third
standard. New work means neither. We keep those separate rather than adding them into one
friendlier number, because blending them would present a two-hop inference as a verified
fact.
Coverage is not symmetric.
Run it the other way and you will get a
different number; both are correct.
From 332,959 cross-framework control
mappings across 723 frameworks, 531 of them verified against
their source documents. It does not tell you that you are compliant: a mapped control means
the two standards ask for the same thing, not that you have done it.
Try another pair ยท
Today's edition