Register
Compliance Controls and Gap Register Template
This register is the primary traceability artefact for audit, insurance, board reporting, and regulatory purposes. It maps security and compliance controls to CSA CCM v4.1, AICM v1.1, and COBIT 2019 process identifiers, and records implementation status, evidence type, and responsible party for each control.
- Type
- Register
- Version
- 1.0.7
- Date
- 2026-10-13
- Owner
- Security Architecture Maintainer
- Approving authority
- Governance Library Maintainer
- Classification
- Public
- Confidentiality
- Public
- Category
- Developer Security
- Review frequency
- Quarterly and upon material control implementation change
- Licence
- CC BY-SA 4.0
Read the full text on GitHub (opens in a new tab)
Outline
- Purpose
- Status definitions
- How to use this register
- CSA CCM v4.1 control mapping
- AICM v1.1: AI-specific controls
- COBIT 2019 process alignment
- Open items and gap register
- Deferred controls register
- Maintenance rules
Related documents
- Security Baseline and Standards Referencedev-security
- Developer Security Requirementsdev-security
- Cross-Framework Alignment Matrixgovernance
- Enterprise Risk Management Standardrisk
Next
All Documents