Control sets you can read, adopt and adapt.
Spectra Core publishes its control sets openly, derived from the standards library the product runs on. Each one states what must be true, the evidence that shows it, and examples of the standards that check it on real systems. Read them in full here, request the PDF, or adapt them for your sector under CC BY 4.0.
Small and mid-sized organisations
IT Control Baseline
Security controls and operational practices for small and mid-sized organisations
30 security controls and 12 operational practices, backed by 148 standards in use in live environments.
Caribbean credit unions
IT Control Baseline, Credit Union Edition
Security controls and operational practices for Caribbean credit unions
Every general control with its ID, plus 29 controls written for the sector and 66 standards added for credit unions.
Adopt it for your members
Industry associations, federations and leagues are invited to adopt a control set for their members, adapt it into an edition for their sector or region, or co-author the next version. Editions keep the same control IDs, so everyone works from a common reference.