50% of India CERT-In Cyber Security Directions 2022 you already have
PCI PIN Security already covers about 50% of India CERT-In Cyber Security Directions 2022, leaving
4 of 8 controls as genuinely new work.
Already covered 0
Likely covered 4
New work 4
No control in PCI PIN Security
maps directly to one in India CERT-In Cyber Security Directions 2022. Everything counted as covered is covered because both
map to the same third standard, which is what a crosswalk is, but it is an inference rather
than a lookup.
What is genuinely new work
Nothing in PCI PIN Security reaches these. This is the list to scope.
CERTIN-Audit-Drills-Training-AwarenessProgram-CERTInExercises-CISOCERT-In Audit + Cyber Security Drills + Training + Awareness + CERT-In Cyber Exercises + CISO + Information Security Auditor Empanelment
CERTIN-Compliance-Cooperation-CERTInOrders-Penalties-Applicability-Dir14to17-Section44-IT-ActCERT-In Directions 14-17 Compliance and Cooperation - Mandatory Cooperation with CERT-In + Information Requests + Action Directives + Applicability + Penalties for Non-Compliance +
CERTIN-Coord-RBI-SEBI-IRDAI-I4C-DPDPAct-SectoralCERTs-NCIIPC-IndiaStackCERT-In Coordination - RBI + SEBI + IRDAI Cyber Frameworks + DPDP Act 2023 DPBI + I4C Cybercrime + Sectoral CERTs + NCIIPC CII Protection + DPI India Stack + International CSIRTs
CERTIN-Scope-Section70B-IT-Act-2000-Directions-28April2022-Effective-28June2022-MeitY-CERTIn-ApplicabilityCERT-In Directions Scope + Section 70B IT Act 2000 + Directions of 28 April 2022 + Effective 28 June 2022 + MeitY/CERT-In Governance + Applicability to All Entities + 17 Directions
Show the 4 you already have
CERTIN-DC-VPS-VPN-CloudSP-CustomerKYC-SubscriberRecords-5YearRetention-Dir8to10CERT-In Directions 8-10 Service Provider Obligations - Data Centre + Virtual Private Server + VPN Service Provider Customer KYC + Subscriber Records + 5-Year Retention After Cancel
CERTIN-IncidentReporting-6Hour-Mandatory-Format-POC-20Categories-Section70B-Dir1to4CERT-In Directions 1-4 Incident Reporting - Mandatory 6-Hour Window + 20 Categories + Standardised Report Format + Designated Point of Contact + 24x7 Channel
CERTIN-Logging-180DayRetention-IndiaLocalisation-NTP-NIC-NPL-CERTIn-Access-Dir5to7CERT-In Directions 5-7 System Logging + Clock Synchronization - 180-Day Log Retention in India + NTP Synchronisation with NIC/NPL + Log Availability to CERT-In on Order
CERTIN-VASP-VirtualAsset-CryptoExchange-KYC-FinancialTransactionRecords-DigitalPayment-Dir11to13CERT-In Directions 11-13 Virtual Asset Service Provider Requirements - KYC for Virtual Asset Exchanges/Custodian Wallets + Financial Transaction Records + Digital Payment System In
How this is calculated
Already covered means a mapping runs from a control in PCI PIN Security to that control. Likely
covered means no direct mapping exists but both frameworks map to the same control in a third
standard. New work means neither. We keep those separate rather than adding them into one
friendlier number, because blending them would present a two-hop inference as a verified
fact.
Coverage is not symmetric.
Run it the other way and you will get a
different number; both are correct.
From 332,959 cross-framework control
mappings across 723 frameworks, 531 of them verified against
their source documents. It does not tell you that you are compliant: a mapped control means
the two standards ask for the same thing, not that you have done it.
Try another pair ยท
Today's edition