Cybersecurity & Data Protection Assessment Standards

We are pleased to announce the release of the Cybersecurity& Data Protection Assessment Standards (CDPAS)!

This is a cohesive, consistent set of standards to governcybersecurity and data protection related Third Party Assessment, Attestationand Certification Services (3PAAC Services). The CDPAS provides performancestandards to normalize 3PAAC Services. By following the CDPAS methodology,cybersecurity and data privacy practitioners can improve the currentlydisjointed approach used to perform assessments of cybersecurity and/or dataprivacy controls.

The CDPAS is not “one-size-fits-all.” Instead, the guidancethroughout this document should be adopted and tailored to the unique size,resources and risk circumstances of each organization. It can be modified, oraugmented, with specific requirements. The CDPAS empowers organizations todevelop cybersecurity and data protection assessment strategies tailored totheir specific mission and business needs, threats and operationalenvironments.

Download from: https://content.securecontrolsframework.com/cdpas.pdf