OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/Reg S-P / S-ID (17 CFR 248)/248.30

248.30(a)(2)(iii)

paragraph (action item)

Protect against unauthorized access to or use of customer information that could result in substantial harm or inconvenience to any customer.

248.30 Procedures to safeguard customer information, including response programs for unauthorized access to customer information and customer notice; disposal of customer information and consumer information.

Related Frameworks

3 mappings across 5 frameworks
SCF3 mappings
CFG-08Sensitive / Regulated Data Access Enforcement
1.00
DCH-01Data Protection
1.00
IAC-20Access Enforcement
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-2Account Management
1.00
AC-2(12)Account Monitoring for Atypical Usage
1.00
AC-2(7)Privileged User Accounts
1.00
AC-20(5)Portable Storage Devices — Prohibited Use
1.00
AC-3Access Enforcement
1.00
AC-3(11)Restrict Access to Specific Information Types
1.00
AC-4Information Flow Enforcement
1.00
AC-4(15)Detection of Unsanctioned Information
1.00
AC-6(7)Review of User Privileges
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (30) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.1.1
1.00
3.1.2
1.00
3.1.3
1.00
3.12.1
1.00
3.12.2
1.00
3.12.3
1.00
3.12.4
1.00
3.13.1
1.00
3.13.10
1.00
3.13.11
1.00

+20 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000421
1.00
CCI-000422
1.00
CCI-000423
1.00
CCI-000424
1.00
CCI-000425
1.00
CCI-000426
1.00
CCI-000571
1.00
CCI-000572
1.00
CCI-000573
1.00
CCI-000574
1.00

+90 more (top 10 by confidence shown)

STIG0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

SV-104181r1_ruleSymantec ProxySG must implement security policies that enforce approved authorizations for logical access to information and system resources by employing identity-based, role-based, and/or attribute-based security policies.
0.50
SV-104485r1_ruleSymantec ProxySG must be configured to enforce user authorization to implement least privilege.
0.50
SV-104487r1_ruleSymantec ProxySG must configure Web Management Console access restrictions to authorized IP address/ranges.
0.50
SV-202017r960792_ruleThe network device must be configured to assign appropriate user roles or access levels to authenticated users.
0.50
SV-205663r1106629_ruleWindows Server 2019 local volumes must use a format that supports NTFS attributes.
0.50
SV-205664r958472_ruleWindows Server 2019 non-administrative accounts or groups must only have print permissions on printer shares.
0.50
SV-205665r958472_ruleWindows Server 2019 Access this computer from the network user right must only be assigned to the Administrators, Authenticated Users, and Enterprise Domain Controllers groups on domain controllers.
0.50
SV-205666r958472_ruleWindows Server 2019 Allow log on through Remote Desktop Services user right must only be assigned to the Administrators group on domain controllers.
0.50
SV-205667r958472_ruleWindows Server 2019 Deny access to this computer from the network user right on domain controllers must be configured to prevent unauthenticated access.
0.50
SV-205668r958472_ruleWindows Server 2019 Deny log on as a batch job user right on domain controllers must be configured to prevent unauthenticated access.
0.50

+90 more (top 10 by confidence shown)

Securities and Exchange Commission, Regulation S-P (Privacy of Consumer Financial Information and Safeguarding Customer Information) and Regulation S-ID (Identity Theft Red Flags). Edition dated 2026-01-01. Read the publication.