{"framework":{"id":"dpdpa","name":"India DPDPA"},"data":[{"control_id":"AC-02","control_name":"Account Management","family":"AC","mappings":["Rules.6(1)(b)"]},{"control_id":"AC-03","control_name":"Access Enforcement","family":"AC","mappings":["Act.8(5)","Act.11","Rules.6(1)(b)","Rules.Sch1.B.3-4","Rules.Sch1.B.7","Rules.Sch2"]},{"control_id":"AC-04","control_name":"Information Flow Enforcement","family":"AC","mappings":["Act.16","Rules.13(4)","Rules.15"]},{"control_id":"AC-06","control_name":"Least Privilege","family":"AC","mappings":["Act.8(5)","Rules.6(1)(b)","Rules.Sch1.B.7"]},{"control_id":"AC-17","control_name":"Remote Access","family":"AC","mappings":["Rules.6(1)(b)"]},{"control_id":"AC-21","control_name":"Information Sharing","family":"AC","mappings":["Rules.15"]},{"control_id":"AU-02","control_name":"Event Logging","family":"AU","mappings":["Rules.6(1)(c)"]},{"control_id":"AU-03","control_name":"Content of Audit Records","family":"AU","mappings":["Rules.6(1)(c)"]},{"control_id":"AU-06","control_name":"Audit Record Review, Analysis, and Reporting","family":"AU","mappings":["Act.8(5)","Rules.6(1)(c)","Rules.Sch1.B.7"]},{"control_id":"AU-07","control_name":"Audit Record Reduction and Report Generation","family":"AU","mappings":["Rules.6(1)(c)"]},{"control_id":"AU-10","control_name":"Non-repudiation","family":"AU","mappings":["Act.6(10)"]},{"control_id":"AU-11","control_name":"Audit Record Retention","family":"AU","mappings":["Rules.6(1)(e)","Rules.8(3)","Rules.Sch1.B.3-4"]},{"control_id":"AU-12","control_name":"Audit Record Generation","family":"AU","mappings":["Rules.6(1)(c)"]},{"control_id":"CA-02","control_name":"Control Assessments","family":"CA","mappings":["Act.8(4)","Act.10(2)(b)","Act.10(2)(c)","Rules.6(1)(g)","Rules.13(1)-(2)","Rules.Sch1.A.9","Rules.Sch1.B.12"]},{"control_id":"CA-07","control_name":"Continuous Monitoring","family":"CA","mappings":["Act.8(4)","Act.10(2)(c)","Rules.6(1)(g)","Rules.13(1)-(2)","Rules.Sch1.B.12"]},{"control_id":"CM-04","control_name":"Impact Analyses","family":"CM","mappings":["Rules.13(3)"]},{"control_id":"CM-12","control_name":"Information Location","family":"CM","mappings":["Act.16","Rules.13(4)","Rules.15"]},{"control_id":"CM-13","control_name":"Data Action Mapping","family":"CM","mappings":["Act.11"]},{"control_id":"CP-02","control_name":"Contingency Plan","family":"CP","mappings":["Rules.6(1)(d)"]},{"control_id":"CP-06","control_name":"Alternate Storage Site","family":"CP","mappings":["Rules.6(1)(d)"]},{"control_id":"CP-07","control_name":"Alternate Processing Site","family":"CP","mappings":["Rules.6(1)(d)"]},{"control_id":"CP-09","control_name":"System Backup","family":"CP","mappings":["Act.8(5)","Rules.6(1)(d)","Rules.Sch1.B.7"]},{"control_id":"CP-10","control_name":"System Recovery and Reconstitution","family":"CP","mappings":["Rules.6(1)(d)"]},{"control_id":"IA-02","control_name":"Identification and Authentication (Organizational Users)","family":"IA","mappings":["Act.8(5)","Rules.6(1)(b)","Rules.Sch1.B.7"]},{"control_id":"IA-05","control_name":"Authenticator Management","family":"IA","mappings":["Rules.6(1)(b)"]},{"control_id":"IA-12","control_name":"Identity Proofing","family":"IA","mappings":["Act.9(1)","Rules.10","Rules.11"]},{"control_id":"IR-04","control_name":"Incident Handling","family":"IR","mappings":["Act.8(5)","Rules.6(1)(c)","Rules.7(1)","Rules.7(2)","Rules.Sch1.B.7"]},{"control_id":"IR-05","control_name":"Incident Monitoring","family":"IR","mappings":["Rules.7(2)"]},{"control_id":"IR-06","control_name":"Incident Reporting","family":"IR","mappings":["Act.8(6)","Rules.7(2)"]},{"control_id":"IR-08","control_name":"Incident Response Plan","family":"IR","mappings":["Act.8(6)","Rules.7(1)","Rules.7(2)"]},{"control_id":"MP-06","control_name":"Media Sanitization","family":"MP","mappings":["Act.8(7)","Rules.8(1)"]},{"control_id":"PE-03","control_name":"Physical Access Control","family":"PE","mappings":["Rules.6(1)(b)"]},{"control_id":"PM-01","control_name":"Information Security Program Plan","family":"PM","mappings":["Rules.6(1)(g)"]},{"control_id":"PM-05","control_name":"System Inventory","family":"PM","mappings":["Act.11"]},{"control_id":"PM-14","control_name":"Testing, Training, and Monitoring","family":"PM","mappings":["Act.8(4)","Rules.6(1)(g)"]},{"control_id":"PM-18","control_name":"Privacy Program Plan","family":"PM","mappings":["Act.8(1)","Act.8(4)"]},{"control_id":"PM-19","control_name":"Privacy Program Leadership Role","family":"PM","mappings":["Act.8(1)","Act.8(4)","Act.8(9)","Act.10(2)(a)","Rules.9","Rules.Sch2"]},{"control_id":"PM-20","control_name":"Dissemination of Privacy Program Information","family":"PM","mappings":["Act.6(3)","Act.8(9)","Rules.9","Rules.14(1)-(2)","Rules.14(3)","Rules.Sch2"]},{"control_id":"PM-21","control_name":"Accounting of Disclosures","family":"PM","mappings":["Act.11","Rules.Sch1.B.3-4"]},{"control_id":"PM-22","control_name":"Personally Identifiable Information Quality Management","family":"PM","mappings":["Act.8(3)","Act.12(2)","Rules.Sch2"]},{"control_id":"PM-25","control_name":"Minimization of Personally Identifiable Information Used in Testing, Training, and Research","family":"PM","mappings":["Rules.Sch2"]},{"control_id":"PM-26","control_name":"Complaint Management","family":"PM","mappings":["Act.8(9)","Act.8(10)","Act.13","Rules.9","Rules.14(1)-(2)","Rules.14(3)"]},{"control_id":"PM-27","control_name":"Privacy Reporting","family":"PM","mappings":["Rules.13(1)-(2)","Rules.Sch1.B.12"]},{"control_id":"PT-01","control_name":"Policy and Procedures","family":"PT","mappings":["Act.8(4)"]},{"control_id":"PT-02","control_name":"Authority to Process Personally Identifiable Information","family":"PT","mappings":["Act.4","Act.6(6)","Act.7","Act.9(3)","Rules.Sch2"]},{"control_id":"PT-03","control_name":"Personally Identifiable Information Processing Purposes","family":"PT","mappings":["Act.4","Act.5(1)","Act.5(2)","Act.6(1)","Act.7","Rules.3","Rules.Sch2"]},{"control_id":"PT-04","control_name":"Consent","family":"PT","mappings":["Act.4","Act.5(1)","Act.6(1)","Act.6(3)","Act.6(4)","Act.6(6)","Act.6(7)-(9)","Act.9(1)","Rules.3","Rules.4","Rules.10","Rules.11"]},{"control_id":"PT-05","control_name":"Privacy Notice","family":"PT","mappings":["Act.5(1)","Act.5(2)","Act.5(3)","Act.6(3)","Rules.3","Rules.Sch2"]},{"control_id":"PT-07","control_name":"Specific Categories of Personally Identifiable Information","family":"PT","mappings":["Act.9(1)","Act.9(2)","Act.9(3)","Rules.10"]},{"control_id":"RA-03","control_name":"Risk Assessment","family":"RA","mappings":["Act.8(5)","Act.9(2)","Act.10(2)(c)","Rules.13(1)-(2)","Rules.13(3)","Rules.Sch1.B.7"]}],"pagination":{"page":1,"per_page":50,"total":69,"total_pages":2}}