¶¶Òõ¶ÌÊÓƵ

1. Cloud Security Requirements: Specific controls for cloud service usage, required if organization uses cloud services

2. Remote Work Security: Security requirements for remote workers and BYOD policies, needed if remote work is permitted

3. Third-Party Risk Management: Controls for managing vendor and partner cyber risks, essential for organizations with significant third-party relationships

4. Industry-Specific Controls: Additional controls required for specific sectors (e.g., healthcare, financial services)

5. International Data Transfer: Requirements for cross-border data transfers, needed if operating internationally

6. IoT Security: Security requirements for Internet of Things devices, if applicable to the organization

7. AI/ML Systems Security: Security controls for artificial intelligence and machine learning systems, if used

8. Critical Infrastructure Protection: Additional controls for critical infrastructure organizations

1. Schedule A - Technical Security Standards: Detailed technical specifications for security controls and configurations

2. Schedule B - Incident Response Procedures: Step-by-step procedures for different types of security incidents

3. Schedule C - Data Classification Matrix: Detailed criteria for data classification and handling requirements

4. Schedule D - Security Tool Configurations: Standard configurations for security tools and systems

5. Schedule E - Risk Assessment Templates: Templates and forms for conducting risk assessments

6. Schedule F - Security Awareness Training Materials: Training materials and assessment criteria

7. Schedule G - Compliance Checklist: Detailed compliance requirements and verification checklist

8. Schedule H - Contact Lists and Escalation Procedures: Emergency contacts and incident escalation procedures