OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/GLBA Safeguards Rule (16 CFR 314)/314.4

314.4(d)(2)(i)

paragraph (action item)

Annual penetration testing of your information systems determined each given year based on relevant identified risks in accordance with the risk assessment; and

314.4 Elements.

Related Frameworks

1 mapping across 3 frameworks
SCF1 mapping
VPM-07Penetration Testing
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (49) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CA-2Control Assessments
1.00
CA-5Plan of Action and Milestones
1.00
CA-7Continuous Monitoring
1.00
CA-8Penetration Testing
1.00
CM-1Policy and Procedures
1.00
CP-1Policy and Procedures
1.00

+39 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (8) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-002093
1.00
CCI-002094
1.00
CCI-002095
1.00
CCI-003190
0.50
CCI-003191
0.50
CCI-003192
0.50
CCI-004812
0.50
CCI-004813
0.50

Federal Trade Commission, Standards for Safeguarding Customer Information (GLBA Safeguards Rule). Edition dated 2026-01-01. Read the publication.