STIGViewer Support

229.106(b)(1)(ii)

paragraph (action item)

Whether the registrant engages assessors, consultants, auditors, or other third parties in connection with any such processes; and

229.106 (Item 106) Cybersecurity.

Related Frameworks

3 mappings across 3 frameworks
SCF3 mappings
GOV-04Assigned Security, Compliance & Resilience Responsibilities
1.00
HRS-03.2Competency Requirements for Security-Related Positions
1.00
TPM-05.4Responsible, Accountable, Supportive, Consulted & Informed (RASCI) Matrix
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (95) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AT-1Policy and Procedures
1.00
AU-1Policy and Procedures
1.00
CA-1Policy and Procedures
1.00
CA-2Control Assessments
1.00
CA-5Plan of Action and Milestones
1.00
CA-7Continuous Monitoring
1.00
CA-8Penetration Testing
1.00
CM-1Policy and Procedures
1.00
CM-8(4)Accountability Information
1.00

+85 more (top 10 by confidence shown)

CCI0 mappings

No source states a mapping between these directly.

Also reachable in 4 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

+90 more (top 10 by confidence shown)

Securities and Exchange Commission, Regulation S-K Items 105 and 106: Risk Factors, and Cybersecurity (SEC Cybersecurity Disclosure Rule). Edition dated 2026-01-01. Read the publication.