Account and security

Control Mapping ReaderFrameworks Controls Reviewed pairs Template Sources Pricing Privacy Terms support@theartofservice.comThe clause text and evidence guidance behind every placement come from the standards themselves (ISO/IEC 27001, SOC 2, the HIPAA Security Rule and NIST SP 800-53 Rev 5; the trust services criteria are named, not quoted). The Art of Service publishes both Control Mapping Reader and that reading of the standards: each requirement is our statement of its clause, read against the copy we hold and cited to it, not the instrument verbatim, and where a text is not held in full the page names it and does not state it. Editions held: ISO/IEC 27001:2022; ISO/IEC 27001:2013 kept for lineage and migration, with certificates under the 2013 edition withdrawn after its transition window closed; the AICPA 2017 Trust Services Criteria with the revised points of focus; the HIPAA Security Rule as it currently stands, with the rule proposed to make encryption and multi-factor authentication mandatory and that proposal not final; and NIST SP 800-53 Rev 5, Release 5.2.0. Control Mapping Reader is operated by The Art of Service Pty Ltd, GPO Box 2673, Brisbane QLD 4001, Australia.