Crosswalk
BASC (V6-2022)
Where the corpus maps to BASC (V6-2022): Business Alliance for Secure Commerce control and security management system norm.
Canonical citation
- Standard ID
- BASC International Norm V6-2022 (Control and Security Management System, CSMS)
- Current version
- V6-2022
- Publication date
- 2022-03
- Topic
- Business Alliance for Secure Commerce control and security management system norm (CSMS)
- Upstream check location
- https://
www.wbasco.org/ en/ document/ basc-international-norm-and-standards-implementation-guide-v6-2022 (opens in a new tab) - Last verified (UTC)
- needs-reconfirm
Mapped control areas, 7
Control areas from the reverse crosswalk
The Reverse Framework Control Crosswalk Matrix answers which documents address a given control identifier or family. It names this programme in its combined section "CTPAT MSC and BASC v6 (trade and supply-chain security)". The table is that whole section, the same one the CTPAT (2020) instrument page shows.
Coverage, 8 domains
Coverage by domain
From the GRC Library Compliance Alignment Matrix; the main crosswalk table's document counts land here.
Governance, 7 documents
- Governance Library CharterNorm §5, Norm §7.2
- Exception and Risk Acceptance Management PolicyNorm §6.1, Norm §9.2 to §9.3
- Records Retention and Destruction StandardNorm §7.2.3
- Document Index and Classification RegisterNorm §7.2
- Continuous Assurance and Improvement FrameworkTrade and customs assurance governance
- Metrics, Monitoring and Performance Reporting FrameworkTrade-security performance measurement
- Data Retention ScheduleNorm §7.2.3
Risk, 11 documents
- Enterprise Governance and Risk Management PolicyNorm §5, Norm §6.1
- Enterprise Risk Management StandardNorm §6.1
- Third-Party and Supply Chain Risk StandardNorm §6.1, Sec Std §1.1
- Risk Assessment Methodology ProcedureNorm §6.1
- Risk Register ProcedureNorm §6.1, Norm §8.1
- Risk Acceptance ProcedureNorm §6.1, Norm §9.2 to §9.3
- Assurance Map RegisterNorm §8.1, Norm §8.2
- Key Risk Indicator CatalogueNorm §6.1, Norm §8.1
- Scenario Risk CatalogueNorm §6.1
- Enterprise Risk Register TemplateNorm §6.1
- Operational Risk Register TemplateNorm §6.1
Compliance, 11 documents
- Compliance, Audit, and CAPA Management PolicyNorm §8.2, Norm §9.2 to §9.4
- Global Regulatory Applicability RegisterNorm §4.1 to §4.2, Norm §6.2
- BASC IT and Information Security ResponsibilitiesNorm §5.1, Norm §5.4, Norm §6.1, Norm §7.1.2, Norm §7.2, Norm §8.1, Norm §8.2, Norm §9.2 to §9.4, Sec Std §3.1 to §3.2, Sec Std §5.1 to §5.2
- BASC IT Compliance Monitoring and KPIsNorm §8.1
- UK AEO-S IT and Cybersecurity RequirementsSec Std §5.2
- Internal Audit StandardNorm §8.2
- Audit Planning ProcedureNorm §8.2
- Corrective and Preventive Action (CAPA) ProcedureNorm §9.2 to §9.4
- BASC Programme Overview AnnexProgramme governance
- Logistics Sector GRC Requirements AnnexProgramme governance
- BASC Information Security PolicySec Std §5.1, Sec Std §5.2
Security, 35 documents
- Information Security PolicySec Std §5.1
- Identity and Access Management PolicySec Std §5.2
- Acceptable Use PolicyNorm §7.2
- Encryption and Key Management PolicySec Std §5.2
- Logging and Monitoring StandardSec Std §5.2
- Data Classification and Handling StandardSec Std §5.2
- Privileged Access Management StandardSec Std §5.2
- Authentication and Password Management StandardSec Std §5.2
- Security Incident Response ProcedureSec Std §5.2, Norm §9.2 to §9.3
- Vulnerability Management ProcedureSec Std §5.2
- Cryptographic Key Lifecycle Management FrameworkSec Std §5.2
- Cryptographic Key Operations ProcedureSec Std §5.2
- Key Escrow and Recovery ProcedureSec Std §5.2
- Post-Quantum Cryptography Readiness RoadmapSec Std §5.2
- Access Control ProcedureSec Std §5.2
- Identity Management ProcedureSec Std §5.2
- IT Onboarding and Offboarding ProcedureSec Std §5.2
- Zero Trust Architecture FrameworkSec Std §5.2
- Bring Your Own Device (BYOD) PolicySec Std §5.2
- Network Communications Security PolicySec Std §5.2
- Endpoint Hardening StandardSec Std §5.2
- Email Security StandardSec Std §5.2
- Data Loss Prevention StandardSec Std §5.2
- SaaS Security Posture Management StandardSec Std §5.2
- Remote Working Security StandardSec Std §5.2
- Incident Escalation MatrixSec Std §5.2, Norm §9.2
- Security Ticket Reporting SchemeSec Std §5.2, Norm §9.2
- Security Operations Centre Operating Model StandardSec Std §5.2
- Penetration Testing and Red Team StandardSec Std §5.2
- Threat Modelling StandardSec Std §5.2
- Security Disciplinary Process ProcedureSec Std §3.1
- Personnel Security Screening StandardSec Std §3.1
- Security Awareness and Training StandardSec Std §3.2
- Insider Risk Programme FrameworkSec Std §5.2
- Acceptance Into Service PolicySec Std §5.2
Operations, 15 documents
- Production Security RequirementsSec Std §5.2
- Network Security and Segmentation StandardSec Std §5.2
- Cloud Security Configuration BaselineSec Std §5.2
- Physical Security of IT Infrastructure StandardSec Std §4.2
- Certificate Authority Management StandardSec Std §5.2
- Change Management and Configuration Control ProcedureSec Std §5.2
- Endpoint Management and Device Compliance ProcedureSec Std §5.2
- Media Handling and Transport ProcedureSec Std §5.2
- Security Monitoring and Alert Management ProcedureSec Std §5.2
- Threat Intelligence and SIEM Operations ProcedureSec Std §5.2
- Patch Management ProcedureSec Std §5.2
- Release Management ProcedureSec Std §5.2
- Asset Inventory RegisterSec Std §5.2
- IT Operations Key Performance Indicators RegisterNorm §8.1
- IT Security Operations RegisterSec Std §5.2
Supply chain, 13 documents
- Supplier and Cloud Governance FrameworkSec Std §1.1
- Supplier Security and Privacy Assurance StandardSec Std §1.1
- Supplier Resilience Monitoring StandardSec Std §1.1
- Supplier Due Diligence ProcedureSec Std §1.1
- Supplier Onboarding Security Review ProcedureSec Std §1.1
- Supplier Ongoing Monitoring ProcedureSec Std §1.1
- Supplier Audit ProcedureSec Std §1.1, Norm §8.2
- Supplier Exit and Data Return ProcedureSec Std §1.1
- Fourth-Party and Nth-Party Risk ProcedureNorm §6.1, Sec Std §1.1
- Supplier Risk Register TemplateSec Std §1.1
- Supplier Offboarding Evidence TemplateSec Std §1.1
- Supplier Security QuestionnaireSec Std §1.1
- Trade and Supply-Chain Continuity Controls AnnexNorm §6.1(e), Sec Std §1.1
Resilience, 17 documents
- Business Continuity and Disaster Recovery PolicyNorm §6.1(e)
- Business Continuity and Disaster Recovery StandardNorm §6.1(e)
- Backup and Recovery ProcedureNorm §6.1(e)
- Business Continuity and Resilience FrameworkNorm §6.1(e)
- Business Continuity and Crisis Management PlanNorm §6.1(e)
- IT Disaster Recovery PlanNorm §6.1(e)
- Pandemic Continuity PlanNorm §6.1(e)
- Physical Site Continuity PlanNorm §6.1(e)
- Business Impact Analysis ProcedureNorm §6.1(e)
- Continuity and Recovery Testing ProcedureNorm §6.1(e)
- Crisis Management and Emergency Operations Activation ProcedureNorm §6.1(e)
- Cross-Domain Incident Coordination ProcedureSec Std §5.2, Norm §9.2
- Security Incident Reporting and Escalation ProcedureSec Std §5.2, Norm §9.2
- Emergency Operations Contact Directory RegisterNorm §6.1(e)
- Resilience Metrics and Testing Log RegisterNorm §6.1(e)
- Departmental Continuity Plan TemplateNorm §6.1(e)
- Recovery Runbook TemplateNorm §6.1(e)
Privacy, 1 document
- Data Protection and Privacy Breach Response ProcedureTrade-data breach response
Corpus citations, 11
Documents naming it in their framework alignment
Generated from each document's framework alignment list in the taxonomy, through the committed alias map.
- Audit Planning ProcedureCompliance
- BASC Information Security PolicyCompliance
- Continuous Assurance and Improvement FrameworkGovernance
- Corrective and Preventive Action (CAPA) ProcedureCompliance
- Data Protection and Privacy Breach Response ProcedurePrivacy
- Encryption and Key Management PolicySecurity
- Internal Audit StandardCompliance
- Legal and Regulatory Compliance PolicyCompliance
- Metrics, Monitoring and Performance Reporting FrameworkGovernance
- Personnel Security Screening StandardSecurity
- Post-Quantum Cryptography Readiness RoadmapSecurity
Note
What this mapping is
From the GRC Library Compliance Alignment Matrix: citations are indicative, not exhaustive (the representative-citation convention), and no entry constitutes a certification, attestation, or legal opinion.
From the Reverse Framework Control Crosswalk Matrix: coverage is partial, and external control identifiers and clause numbers are referenced for navigation only; the library does not reproduce third-party control text.
From the Cross-Framework Alignment Matrix: the alignment is not an official mapping, certification claim, legal opinion, or reproduction of third-party framework content.
The standards, laws, frameworks, and programmes in the canonical citations register, mapped here or not, are listed with their current editions on the Standards & frameworks page, generated from that register.