T2P Rules & Standards Hub
Audit & Assessment (25) Audit guides, checklists, and self-assessment tools for information management controls, critical infrastructure, information security, and more. |
Business Continuity, Contingency & Disaster Planning (4) Rules, standards, and frameworks that aim to reduce the adverse impact of both known and unknown contingencies on operational and business processes. |
Change & Patch Management (1) Rules and guidance related to technology changes, patch management, segregation of duties in development environments, and related issues. |
Development & Architecture, Technical (9) Guidance and standards for application development lifecycles, secure coding, and other technical efforts. |
Governance & Risk Management (16) Standards, frameworks, and rules for risk management, high-level oversight, and business and operational governance. |
Information & Operational Protection (86) Rules and guidance for security, integrity, and confidentiality of information and operations, including privacy guidelines that indicate broad-reaching data management practices. |
Maturity Models (3) Guidelines for assessing the completeness, soundness, and organizational integration of IT and information management and control practices. |
Measurement & Metrics (13)
Methods, checklists, and standards for the quantification and qualification of operational efficiency and effectivness. |
Records, Content & Data Management (6) Rules and guidance for the retention and longer-term accessibility of business records and other electronic content. |
Technology Sourcing & Investment Management (6) Guidance on reducing risks and improving value in the acquisition and development of technology, including service-provider and outsourcing management. |
