https://sinetris.info/topics/iam/grc/Recent content in GRC on Sinetris's viewpointsSine Die theme for HugoDuilio Ruggieroduilio@sinetris.info© 2023 - 2026, Duilio Ruggiero2025-03-17T10:53:28Z2025-03-17T10:39:53+00:002025-03-17T10:39:53Zhttps://sinetris.info/topics/iam/grc/frameworks/#atom

<h2 id="requirements-and-regulations">Requirements and Regulations</h2> <ul> <li> <a href="https://gdpr-info.eu/" rel="external">GDPR</a>: General Data Protection Regulation</li> <li> <a href="https://www.bafin.de/" rel="external">BaFin</a>: Bundesanstalt für Finanzdienstleistungsaufsicht <blockquote> <p>English translation: <a href="https://www.bafin.de/EN/" rel="external">Federal Financial Supervisory Authority</a></p> </blockquote> </li> <li> <a href="https://www.bafin.de/SharedDocs/Veroeffentlichungen/DE/Rundschreiben/2023/rs_05_2023_MaRisk_BA.html" rel="external">MaRisk</a>: Mindestanforderungen an das Risikomanagement <blockquote> <p>English translation: <a href="https://www.bafin.de/SharedDocs/Downloads/EN/Rundschreiben/dl_rs_0523_marisk_ba_en.html" rel="external">Minimum Requirements for Risk Management</a></p> </blockquote> </li> <li> <a href="https://www.bafin.de/dok/10171052" rel="external">BAIT</a>: Bankaufsichtliche Anforderungen an die IT <blockquote> <p>English translation: <a href="https://www.bafin.de/SharedDocs/Downloads/EN/Rundschreiben/dl_rs_1710_ba_BAIT_en.html" rel="external">Supervisory Requirements for IT in Financial Institutions</a></p> </blockquote> </li> <li> <a href="https://www.iso.org/standard/27001" rel="external">ISO/IEC 27001</a>: Information security management systems - Requirements</li> <li> <a href="https://standards.iso.org/ittf/PubliclyAvailableStandards/c077582_ISO_IEC_24760-1_2019(E).zip" rel="external">ISO/IEC 24760</a>: IT Security and Privacy - A framework for identity management</li> <li> <a href="https://www.bsi.bund.de/DE/Themen/Regulierte-Wirtschaft/Kritische-Infrastrukturen/kritis_node.html" rel="external">KRITIS</a>: Kritische Infrastrukturen <blockquote> <p>English translation: <a href="https://www.bsi.bund.de/EN/Themen/Regulierte-Wirtschaft/Kritische-Infrastrukturen/kritis_node.html" rel="external">Critical Infrastructures</a></p> </blockquote> </li> <li> <a href="https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX%3A32023R1114" rel="external">MiCA</a>: Markets in Crypto-Assets Regulation</li> <li> <a href="https://www.eiopa.europa.eu/digital-operational-resilience-act-dora_en" rel="external">DORA</a>: Digital Operational Resilience Act</li> </ul> <h2 id="good-reads-and-presentations">Good reads and presentations</h2> <ul> <li> <a href="https://www.kuppingercole.com/blog/reinwarth/bait-clearer-guidelines-as-a-basis-for-more-effective-implementation" rel="external">BAIT: Clearer Guidelines as a Basis for More Effective Implementation</a></li> </ul>

2025-03-17T10:45:42+00:002025-03-17T10:45:42Zhttps://sinetris.info/topics/iam/grc/compliance-as-code/#atom

<h2 id="standards">Standards</h2> <ul> <li> <a href="https://scap.nist.gov/" rel="external">SCAP</a>: Security Content Automation Protocol</li> <li> <a href="https://pages.nist.gov/OSCAL/" rel="external">OSCAL</a>: Open Security Controls Assessment Language</li> <li> <a href="https://www.omg.org/spec/BPMN" rel="external">BPMN</a>: Business Process Model and Notation</li> <li> <a href="https://www.omg.org/spec/DMN" rel="external">DMN</a>: Decision Model and Notation</li> </ul> <h2 id="guidelines">Guidelines</h2> <ul> <li> <a href="https://complianceascode.readthedocs.io/" rel="external">ComplianceAsCode</a>: The ComplianceAsCode project <blockquote> <p>Previously known as SCAP Security Guide (SSG)</p> </blockquote> </li> </ul> <h2 id="tools">Tools</h2> <ul> <li> <a href="https://www.open-scap.org/" rel="external">OpenSCAP</a>: open source security compliance toolkit <blockquote> <p>NIST certified for SCAP 1.2</p> </blockquote> </li> <li> <a href="https://github.com/IBM/compliance-trestle" rel="external">Trestle</a>: Manage compliance as code using NIST&rsquo;s OSCAL standard</li> <li> <a href="https://www.openpolicyagent.org/" rel="external">Open Policy Agent (OPA)</a>: Declarative Policies <blockquote> <p>Context-aware, Expressive, Fast, Portable</p> </blockquote> </li> <li> <a href="https://github.com/permitio/opal" rel="external">OPAL</a>: Open Policy Administration Layer</li> </ul> <h2 id="good-reads-and-presentations">Good reads and presentations</h2> <ul> <li> <a href="https://pages.nist.gov/OSCAL/learn/presentations/mini-workshop/" rel="external">OSCAL Mini Workshop Series</a></li> </ul>

2025-03-17T10:53:28+00:002025-03-17T10:53:28Zhttps://sinetris.info/topics/iam/grc/disaster-recovery/#atom

<h3 id="have-a-plan-b-for-disaster-recovery">Have a Plan B for disaster recovery</h3> <p>During a disaster recovery you want to be fast to respect your <a href="/glossary/recovery-time-objective/">RTO</a>.</p> <p>It is possible, for example, to restore the operation of a service using snapshots (both volumes and instances).</p> <p>Restoring snapshots may fail for unforeseen reasons (e.g., you need to restore the service on a different cloud provider), so you should make sure that you can restore from scratch (ability to recreate the service, use database dump, etc.).</p>

2025-03-17T10:43:09+00:002025-03-17T10:43:09Zhttps://sinetris.info/topics/iam/grc/accessibility/#atom

<h2 id="accessibility-directives-and-guidelines">Accessibility Directives and Guidelines</h2> <ul> <li> <a href="https://digital-strategy.ec.europa.eu/en/policies/web-accessibility" rel="external">European Commission - Web Accessibility</a>: Overview of the European Commission Web Accessibility Directive <ul> <li> <a href="http://data.europa.eu/eli/dec_impl/2021/1339" rel="external">EN 301 549</a>: Accessibility requirements for ICT products and services</li> </ul> </li> <li> <a href="https://www.w3.org/WAI/" rel="external">WAI</a>: W3C Web Accessibility Initiative <ul> <li> <a href="https://www.w3.org/WAI/intro/wcag" rel="external">WCAG</a>: Web Content Accessibility Guidelines</li> <li> <a href="https://www.w3.org/WAI/intro/aria" rel="external">ARIA</a>: Accessible Rich Internet Applications suite of web standards</li> <li> <a href="https://www.w3.org/WAI/standards-guidelines/act/" rel="external">ACT</a>: Accessibility Conformance Testing</li> <li> <a href="https://www.w3.org/WAI/intro/earl" rel="external">EARL</a>: Evaluation and Report Language</li> <li> <a href="https://www.w3.org/WAI/policies/" rel="external">policies</a>: Web Accessibility Laws &amp; Policies</li> </ul> </li> </ul>