OpenControls Logo

STIG Viewer

STIGViewer Support
US Cybersecurity Documents/SEC Cybersecurity Rule (17 CFR 229.105, .106)/229.106

229.106(b)(1)(iii)

paragraph (action item)

Whether the registrant has processes to oversee and identify such risks from cybersecurity threats associated with its use of any third-party service provider.

229.106 (Item 106) Cybersecurity.

Related Frameworks

8 mappings across 4 frameworks
SCF8 mappings
GOV-01.1Steering Committee & Program Oversight
1.00
GOV-01.2Status Reporting To Governing Body
1.00
RSK-09Supply Chain Risk Management (SCRM) Plan
1.00
RSK-09.1Supply Chain Risk Assessment
1.00
TPM-01Third-Party Management
1.00
TPM-02Third-Party Criticality Assessments
1.00
TPM-03Supply Chain Risk Management (SCRM)
1.00
TPM-05Third-Party Contract Requirements
1.00
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-1Policy and Procedures
1.00
AC-10Concurrent Session Control
1.00
AC-16Security and Privacy Attributes
1.00
AC-17Remote Access
1.00
AC-18Wireless Access
1.00
AC-19Access Control for Mobile Devices
1.00
AC-2Account Management
1.00
AC-20Use of External Systems
1.00
AC-20(1)Limits on Authorized Use
1.00
AC-20(3)Non-organizationally Owned Systems — Restricted Use
1.00

+90 more (top 10 by confidence shown)

NIST 800-1710 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (4) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

3.11.1
1.00
3.11.2
1.00
3.11.3
1.00
3.1.1
0.80
CCI0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (100) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CCI-000227
1.00
CCI-000228
1.00
CCI-001048
1.00
CCI-001049
1.00
CCI-001050
1.00
CCI-001051
1.00
CCI-001052
1.00
CCI-001053
1.00
CCI-001642
1.00
CCI-002370
1.00

+90 more (top 10 by confidence shown)

Securities and Exchange Commission, Regulation S-K Items 105 and 106: Risk Factors, and Cybersecurity (SEC Cybersecurity Disclosure Rule). Edition dated 2026-01-01. Read the publication.