EUCS (ENISA) – Control Mapping

This page shows which Wombat controls cover which requirements of EUCS (ENISA).

Framework Control	Requirement	Wombat Controls	Severity	Pillar	Category
BCR-01 – Backup policy	BCR-01 – Backup policy	WAF-SOV-030	🟠	Sovereign Cloud	logging-monitoring
BCR-01 – Business continuity	BCR-01 – Business continuity	WAF-SEC-100	🟡	Security	identity-access
CKM-01 – Cryptographic policy	CKM-01 – Cryptographic policy	WAF-SEC-030 · WAF-SEC-040 · WAF-SEC-060	🔴 🟠	Security	identity-access
CKM-02 – Key management	CKM-02 – Key management	WAF-SEC-030	🟠	Security	identity-access
CRY-01 – Encryption at rest	CRY-01 – Encryption at rest	WAF-SOV-050	🔴	Sovereign Cloud	encryption-key-management
CRY-03 – Key management	CRY-03 – Key management	WAF-SOV-050 · WAF-SOV-110	🔴	Sovereign Cloud	encryption-key-management
CSC-01 – Communication security	CSC-01 – Communication security	WAF-SEC-120	🟠	Security	identity-access
CSC-01 – Network security controls	CSC-01 – Network security controls	WAF-SEC-050	🟠	Security	network-security
CSC-04 – Communications security	CSC-04 – Communications security	WAF-SEC-040	🟠	Security	identity-access
CSC-04 – Network segmentation	CSC-04 – Network segmentation	WAF-SEC-050	🟠	Security	network-security
DSP-01 – Data classification and handling	DSP-01 – Data classification and handling	WAF-SEC-130 · WAF-SOV-010	🟠	Security, Sovereign Cloud	identity-access
DSP-02 – Data lifecycle management	DSP-02 – Data lifecycle management	WAF-SEC-130	🟠	Security	identity-access
DSP-04 – Data portability	DSP-04 – Data portability	WAF-SOV-030	🟠	Sovereign Cloud	logging-monitoring
GEO-01 – Data geographic location	GEO-01 – Data geographic location	WAF-SOV-010	🟠	Sovereign Cloud	identity-access
GRC-01 – Compliance management	GRC-01 – Compliance management	WAF-SEC-090	🟡	Security	identity-access
IAM-01 – Access control policy	IAM-01 – Access control policy	WAF-SOV-060	🔴	Sovereign Cloud	identity-access
IAM-01 – Identity and access management	IAM-01 – Identity and access management	WAF-AGN-010 · WAF-AGN-020 · WAF-SEC-010 · WAF-SEC-020	🔴 🟠	Agentic, Security	agentic-governance, identity-access
IAM-02 – Authentication controls	IAM-02 – Authentication controls	WAF-AGN-010 · WAF-SEC-010	🔴 🟠	Agentic, Security	identity-access
IAM-03 – Emergency access	IAM-03 – Emergency access	WAF-SOV-070	🟠	Sovereign Cloud	identity-access
IAM-03 – Least privilege access control	IAM-03 – Least privilege access control	WAF-AGN-020 · WAF-SEC-020	🔴 🟠	Agentic, Security	agentic-governance, identity-access
IAM-03 – Privileged access	IAM-03 – Privileged access	WAF-SOV-060	🔴	Sovereign Cloud	identity-access
IAM-04 – Authentication credentials	IAM-04 – Authentication credentials	WAF-SEC-060	🔴	Security	identity-access
IAM-04 – Third-party access	IAM-04 – Third-party access	WAF-SOV-080	🟡	Sovereign Cloud	logging-monitoring
IVS-09 – Network logging	IVS-09 – Network logging	WAF-SOV-040	🟠	Sovereign Cloud	network-security
IVS-09 – Network security	IVS-09 – Network security	WAF-SOV-090	🟠	Sovereign Cloud	identity-access
IVS-10 – Egress filtering	IVS-10 – Egress filtering	WAF-SOV-090	🟠	Sovereign Cloud	identity-access
LOG-01 – Audit logging	LOG-01 – Audit logging	WAF-SEC-080 · WAF-SOV-040 · WAF-SOV-070	🟠	Security, Sovereign Cloud	identity-access, network-security
MON-01 – Logging and monitoring	MON-01 – Logging and monitoring	WAF-SEC-160	🟠	Security	logging-monitoring
NS-03 – Network security	NS-03 – Network security	WAF-SEC-140	🟠	Security	network-security
OPS-01 – Operational security monitoring	OPS-01 – Operational security monitoring	WAF-SEC-090	🟡	Security	identity-access
OPS-04 – Vulnerability management	OPS-04 – Vulnerability management	WAF-SEC-070	🟡	Security	container-security
OPS-05 – Patch management	OPS-05 – Patch management	WAF-SEC-070	🟡	Security	container-security
OPS-06 – Security monitoring	OPS-06 – Security monitoring	WAF-SEC-080	🟠	Security	identity-access
OPS-07 – Security incident management	OPS-07 – Security incident management	WAF-SEC-100	🟡	Security	identity-access
OPS-08 – Operations and service management	OPS-08 – Operations and service management	WAF-SEC-120	🟠	Security	identity-access
PRO-01 – Portability	PRO-01 – Portability	WAF-SOV-100	🟡	Sovereign Cloud	logging-monitoring
PRO-02 – Interoperability	PRO-02 – Interoperability	WAF-SOV-100	🟡	Sovereign Cloud	logging-monitoring
SCA-01 – Supply chain	SCA-01 – Supply chain	WAF-SOV-080	🟡	Sovereign Cloud	logging-monitoring
SOV-01 – Data location	SOV-01 – Data location	WAF-SOV-020	🔴	Sovereign Cloud	identity-access
SOV-02 – Jurisdiction control	SOV-02 – Jurisdiction control	WAF-SOV-020	🔴	Sovereign Cloud	identity-access
SOV-03 – Customer key control	SOV-03 – Customer key control	WAF-SOV-050 · WAF-SOV-110	🔴	Sovereign Cloud	encryption-key-management
SUP-01 – Supplier and supply chain management	SUP-01 – Supplier and supply chain management	WAF-SEC-110	🟠	Security	container-security

Framework Control

Requirement

Wombat Controls

Severity

Pillar

Category

BCR-01 – Backup policy

WAF-SOV-030

🟠

Sovereign Cloud

logging-monitoring

BCR-01 – Business continuity

WAF-SEC-100

🟡

Security

identity-access

CKM-01 – Cryptographic policy

WAF-SEC-030 · WAF-SEC-040 · WAF-SEC-060

🔴 🟠

Security

identity-access

CKM-02 – Key management

WAF-SEC-030

🟠

Security

identity-access

CRY-01 – Encryption at rest

WAF-SOV-050

🔴

Sovereign Cloud

encryption-key-management

CRY-03 – Key management

WAF-SOV-050 · WAF-SOV-110

🔴

Sovereign Cloud

encryption-key-management

CSC-01 – Communication security

WAF-SEC-120

🟠

Security

identity-access

CSC-01 – Network security controls

WAF-SEC-050

🟠

Security

network-security

CSC-04 – Communications security

WAF-SEC-040

🟠

Security

identity-access

CSC-04 – Network segmentation

WAF-SEC-050

🟠

Security

network-security

DSP-01 – Data classification and handling

WAF-SEC-130 · WAF-SOV-010

🟠

Security, Sovereign Cloud

identity-access

DSP-02 – Data lifecycle management

WAF-SEC-130

🟠

Security

identity-access

DSP-04 – Data portability

WAF-SOV-030

🟠

Sovereign Cloud

logging-monitoring

GEO-01 – Data geographic location

WAF-SOV-010

🟠

Sovereign Cloud

identity-access

GRC-01 – Compliance management

WAF-SEC-090

🟡

Security

identity-access

IAM-01 – Access control policy

WAF-SOV-060

🔴

Sovereign Cloud

identity-access

IAM-01 – Identity and access management

WAF-AGN-010 · WAF-AGN-020 · WAF-SEC-010 · WAF-SEC-020

🔴 🟠

Agentic, Security

agentic-governance, identity-access

IAM-02 – Authentication controls

WAF-AGN-010 · WAF-SEC-010

🔴 🟠

Agentic, Security

identity-access

IAM-03 – Emergency access

WAF-SOV-070

🟠

Sovereign Cloud

identity-access

IAM-03 – Least privilege access control

WAF-AGN-020 · WAF-SEC-020

🔴 🟠

Agentic, Security

agentic-governance, identity-access

IAM-03 – Privileged access

WAF-SOV-060

🔴

Sovereign Cloud

identity-access

IAM-04 – Authentication credentials

WAF-SEC-060

🔴

Security

identity-access

IAM-04 – Third-party access

WAF-SOV-080

🟡

Sovereign Cloud

logging-monitoring

IVS-09 – Network logging

WAF-SOV-040

🟠

Sovereign Cloud

network-security

IVS-09 – Network security

WAF-SOV-090

🟠

Sovereign Cloud

identity-access

IVS-10 – Egress filtering

WAF-SOV-090

🟠

Sovereign Cloud

identity-access

LOG-01 – Audit logging

WAF-SEC-080 · WAF-SOV-040 · WAF-SOV-070

🟠

Security, Sovereign Cloud

identity-access, network-security

MON-01 – Logging and monitoring

WAF-SEC-160

🟠

Security

logging-monitoring

NS-03 – Network security

WAF-SEC-140

🟠

Security

network-security

OPS-01 – Operational security monitoring

WAF-SEC-090

🟡

Security

identity-access

OPS-04 – Vulnerability management

WAF-SEC-070

🟡

Security

container-security

OPS-05 – Patch management

WAF-SEC-070

🟡

Security

container-security

OPS-06 – Security monitoring

WAF-SEC-080

🟠

Security

identity-access

OPS-07 – Security incident management

WAF-SEC-100

🟡

Security

identity-access

OPS-08 – Operations and service management

WAF-SEC-120

🟠

Security

identity-access

PRO-01 – Portability

WAF-SOV-100

🟡

Sovereign Cloud

logging-monitoring

PRO-02 – Interoperability

WAF-SOV-100

🟡

Sovereign Cloud

logging-monitoring

SCA-01 – Supply chain

WAF-SOV-080

🟡

Sovereign Cloud

logging-monitoring

SOV-01 – Data location

WAF-SOV-020

🔴

Sovereign Cloud

identity-access

SOV-02 – Jurisdiction control

WAF-SOV-020

🔴

Sovereign Cloud

identity-access

SOV-03 – Customer key control

WAF-SOV-050 · WAF-SOV-110

🔴

Sovereign Cloud

encryption-key-management

SUP-01 – Supplier and supply chain management

WAF-SEC-110

🟠

Security

container-security

EUCS (ENISA) – Control Mapping

See also