Crosswalk
PIP
Where the corpus maps to PIP: a trade-security programme the compliance alignment matrix maps column by column.
Canonical citation
The canonical citations register carries no row for this programme; its name and scope come from the compliance alignment matrix's own column key.
Mapped control areas, 7
Control areas from the reverse crosswalk
The Reverse Framework Control Crosswalk Matrix answers which documents address a given control identifier or family. It names this programme in its combined section "CTPAT MSC and BASC v6 (trade and supply-chain security)". The table is that whole section, the same one the CTPAT (2020) instrument page shows.
Coverage, 7 domains
Coverage by domain
From the GRC Library Compliance Alignment Matrix; the main crosswalk table's document counts land here.
Governance, 3 documents
- Governance Library CharterProgramme governance
- Records Retention and Destruction StandardRecord retention
- Data Retention ScheduleRecord retention
Risk, 5 documents
- Enterprise Governance and Risk Management PolicyProgramme governance
- Enterprise Risk Management StandardRisk assessment
- Third-Party and Supply Chain Risk StandardThird-party security
- Risk Assessment Methodology ProcedureRisk assessment
- Risk Register ProcedureRisk assessment
Compliance, 7 documents
- Compliance, Audit, and CAPA Management PolicyProgramme governance
- Global Regulatory Applicability RegisterProgramme governance
- UK AEO-S IT and Cybersecurity RequirementsIT security
- Logistics Sector GRC Requirements AnnexProgramme governance
- US CTPAT Minimum Security Criteria Controls RegisterBusiness partner requirements
- Canada PIP IT and Cybersecurity Compliance Controls RegisterIT security requirements
- Trade Compliance Programme Gap Assessment TemplateRisk assessment
Security, 35 documents
- Information Security PolicyIT security
- Identity and Access Management PolicyAccess controls
- Acceptable Use PolicyEmployee security
- Encryption and Key Management PolicyData protection
- Logging and Monitoring StandardIT security
- Data Classification and Handling StandardData protection
- Privileged Access Management StandardAccess controls
- Authentication and Password Management StandardAccess controls
- Security Incident Response ProcedureIncident response
- Vulnerability Management ProcedureIT security
- Cryptographic Key Lifecycle Management FrameworkData protection
- Cryptographic Key Operations ProcedureData protection
- Key Escrow and Recovery ProcedureData protection
- Post-Quantum Cryptography Readiness RoadmapData protection
- Access Control ProcedureAccess controls
- Identity Management ProcedureAccess controls
- IT Onboarding and Offboarding ProcedureAccess controls
- Zero Trust Architecture FrameworkAccess controls
- Bring Your Own Device (BYOD) PolicyIT security
- Network Communications Security PolicyIT security
- Endpoint Hardening StandardIT security
- Email Security StandardIT security
- Data Loss Prevention StandardData protection
- SaaS Security Posture Management StandardIT security
- Remote Working Security StandardIT security
- Incident Escalation MatrixIncident response
- Security Ticket Reporting SchemeIncident response
- Security Operations Centre Operating Model StandardIT security
- Penetration Testing and Red Team StandardIT security
- Threat Modelling StandardIT security
- Security Disciplinary Process ProcedurePersonnel and staffing
- Personnel Security Screening StandardPersonnel and staffing
- Security Awareness and Training StandardPersonnel and staffing
- Insider Risk Programme FrameworkIT security
- Acceptance Into Service PolicyIT security
Operations, 12 documents
- Production Security RequirementsIT security
- Network Security and Segmentation StandardNetwork security
- Cloud Security Configuration BaselineIT security
- Physical Security of IT Infrastructure StandardPhysical security
- Certificate Authority Management StandardIT security
- Change Management and Configuration Control ProcedureIT security
- Endpoint Management and Device Compliance ProcedureIT security
- Media Handling and Transport ProcedureData protection
- Security Monitoring and Alert Management ProcedureIT security
- Threat Intelligence and SIEM Operations ProcedureIT security
- Patch Management ProcedureIT security
- Release Management ProcedureIT security
Supply chain, 13 documents
- Supplier and Cloud Governance FrameworkThird-party and supply chain security
- Supplier Security and Privacy Assurance StandardThird-party security
- Supplier Resilience Monitoring StandardThird-party and supply chain security
- Supplier Due Diligence ProcedureThird-party vetting
- Supplier Onboarding Security Review ProcedureThird-party vetting
- Supplier Ongoing Monitoring ProcedureThird-party security
- Supplier Audit ProcedureThird-party audit
- Supplier Exit and Data Return ProcedureThird-party security
- Fourth-Party and Nth-Party Risk ProcedureThird-party security
- Supplier Risk Register TemplateThird-party security
- Supplier Offboarding Evidence TemplateThird-party security
- Supplier Security QuestionnaireThird-party vetting
- Trade and Supply-Chain Continuity Controls AnnexThird-party security, Business continuity
Resilience, 17 documents
- Business Continuity and Disaster Recovery PolicyBusiness continuity
- Business Continuity and Disaster Recovery StandardBusiness continuity
- Backup and Recovery ProcedureBusiness continuity
- Business Continuity and Resilience FrameworkBusiness continuity
- Business Continuity and Crisis Management PlanBusiness continuity
- IT Disaster Recovery PlanBusiness continuity
- Pandemic Continuity PlanBusiness continuity
- Physical Site Continuity PlanBusiness continuity
- Business Impact Analysis ProcedureBusiness continuity
- Continuity and Recovery Testing ProcedureBusiness continuity
- Crisis Management and Emergency Operations Activation ProcedureBusiness continuity
- Cross-Domain Incident Coordination ProcedureIncident response
- Security Incident Reporting and Escalation ProcedureIncident response
- Emergency Operations Contact Directory RegisterBusiness continuity
- Resilience Metrics and Testing Log RegisterBusiness continuity
- Departmental Continuity Plan TemplateBusiness continuity
- Recovery Runbook TemplateBusiness continuity
Corpus citations, 2
Documents naming it in their framework alignment
Generated from each document's framework alignment list in the taxonomy, through the committed alias map.
Note
What this mapping is
From the GRC Library Compliance Alignment Matrix: citations are indicative, not exhaustive (the representative-citation convention), and no entry constitutes a certification, attestation, or legal opinion.
From the Reverse Framework Control Crosswalk Matrix: coverage is partial, and external control identifiers and clause numbers are referenced for navigation only; the library does not reproduce third-party control text.
From the Cross-Framework Alignment Matrix: the alignment is not an official mapping, certification claim, legal opinion, or reproduction of third-party framework content.
The standards, laws, frameworks, and programmes in the canonical citations register, mapped here or not, are listed with their current editions on the Standards & frameworks page, generated from that register.