@prefix sdg: <http://metadata.un.org/sdg/> .
@prefix skos: <http://www.w3.org/2004/02/skos/core#> .

<https://test.uncefact.org/vocabulary/conformity-topics/access-management> a skos:Concept ;
    skos:broader <https://test.uncefact.org/vocabulary/conformity-topics/information-security> ;
    skos:definition "Controls for authentication, authorization, and system access ensuring only authorized parties can access resources and data."@en ;
    skos:inScheme <https://test.uncefact.org/vocabulary/conformity-topics/> ;
    skos:notation "11.04" ;
    skos:prefLabel "Access Management"@en ;
    skos:relatedMatch sdg:16 ;
    skos:scopeNote "ISO/IEC 27001 Annex A - Access Control."@en .

<https://test.uncefact.org/vocabulary/conformity-topics/audit-and-accountability> a skos:Concept ;
    skos:broader <https://test.uncefact.org/vocabulary/conformity-topics/information-security> ;
    skos:definition "Logging, monitoring, and accountability mechanisms for digital activities to support compliance verification and forensic analysis."@en ;
    skos:inScheme <https://test.uncefact.org/vocabulary/conformity-topics/> ;
    skos:notation "11.08" ;
    skos:prefLabel "Audit Trail and Accountability"@en ;
    skos:relatedMatch sdg:16 ;
    skos:scopeNote "ISO/IEC 27001 Annex A - Logging and Monitoring."@en .

<https://test.uncefact.org/vocabulary/conformity-topics/cybersecurity-controls> a skos:Concept ;
    skos:broader <https://test.uncefact.org/vocabulary/conformity-topics/information-security> ;
    skos:definition "Implementation of technical and organizational security measures to protect digital infrastructure from threats and vulnerabilities."@en ;
    skos:inScheme <https://test.uncefact.org/vocabulary/conformity-topics/> ;
    skos:notation "11.02" ;
    skos:prefLabel "Cybersecurity Controls"@en ;
    skos:relatedMatch sdg:9 ;
    skos:scopeNote "ISO/IEC 27001; NIST Cybersecurity Framework; IEC 62443."@en .

<https://test.uncefact.org/vocabulary/conformity-topics/data-protection-and-privacy> a skos:Concept ;
    skos:broader <https://test.uncefact.org/vocabulary/conformity-topics/information-security> ;
    skos:definition "Safeguarding personal and sensitive data in compliance with privacy regulations, consent requirements, and ethical data handling principles."@en ;
    skos:inScheme <https://test.uncefact.org/vocabulary/conformity-topics/> ;
    skos:notation "11.01" ;
    skos:prefLabel "Data Protection and Privacy"@en ;
    skos:relatedMatch sdg:16 ;
    skos:scopeNote "GDPR; ISO/IEC 27701 Privacy Information Management."@en .

<https://test.uncefact.org/vocabulary/conformity-topics/digital-identity-and-trust> a skos:Concept ;
    skos:broader <https://test.uncefact.org/vocabulary/conformity-topics/information-security> ;
    skos:definition "Verification and assurance of digital identities, credentials, and trust relationships in electronic transactions and communications."@en ;
    skos:inScheme <https://test.uncefact.org/vocabulary/conformity-topics/> ;
    skos:notation "11.03" ;
    skos:prefLabel "Digital Identity and Trust"@en ;
    skos:relatedMatch sdg:16 ;
    skos:scopeNote "eIDAS Regulation; W3C Verifiable Credentials; UNTP Digital Identity Anchor."@en .

<https://test.uncefact.org/vocabulary/conformity-topics/encryption-and-data-security> a skos:Concept ;
    skos:broader <https://test.uncefact.org/vocabulary/conformity-topics/information-security> ;
    skos:definition "Protection of data confidentiality and integrity in transit and at rest through cryptographic controls and key management."@en ;
    skos:inScheme <https://test.uncefact.org/vocabulary/conformity-topics/> ;
    skos:notation "11.07" ;
    skos:prefLabel "Encryption and Data Security"@en ;
    skos:relatedMatch sdg:9 ;
    skos:scopeNote "ISO/IEC 19790 Cryptographic Modules; NIST FIPS 140."@en .

<https://test.uncefact.org/vocabulary/conformity-topics/incident-response> a skos:Concept ;
    skos:broader <https://test.uncefact.org/vocabulary/conformity-topics/information-security> ;
    skos:definition "Preparedness planning, detection, response procedures, and recovery capabilities for security breaches and system failures."@en ;
    skos:inScheme <https://test.uncefact.org/vocabulary/conformity-topics/> ;
    skos:notation "11.05" ;
    skos:prefLabel "Incident Response and Recovery"@en ;
    skos:relatedMatch sdg:9 ;
    skos:scopeNote "ISO/IEC 27035 Incident Management; NIST SP 800-61."@en .

<https://test.uncefact.org/vocabulary/conformity-topics/system-integrity> a skos:Concept ;
    skos:broader <https://test.uncefact.org/vocabulary/conformity-topics/information-security> ;
    skos:definition "Ensuring reliability, uptime, and integrity of digital systems through resilient architecture and continuity planning."@en ;
    skos:inScheme <https://test.uncefact.org/vocabulary/conformity-topics/> ;
    skos:notation "11.06" ;
    skos:prefLabel "System Integrity and Availability"@en ;
    skos:relatedMatch sdg:9 ;
    skos:scopeNote "ISO 22301 Business Continuity; ISO/IEC 27001 Availability Controls."@en .

<https://test.uncefact.org/vocabulary/conformity-topics/information-security> a skos:Concept ;
    skos:definition "Protection of data, digital systems, and information assets, and the establishment of trust frameworks for digital interactions."@en ;
    skos:inScheme <https://test.uncefact.org/vocabulary/conformity-topics/> ;
    skos:narrower <https://test.uncefact.org/vocabulary/conformity-topics/access-management>,
        <https://test.uncefact.org/vocabulary/conformity-topics/audit-and-accountability>,
        <https://test.uncefact.org/vocabulary/conformity-topics/cybersecurity-controls>,
        <https://test.uncefact.org/vocabulary/conformity-topics/data-protection-and-privacy>,
        <https://test.uncefact.org/vocabulary/conformity-topics/digital-identity-and-trust>,
        <https://test.uncefact.org/vocabulary/conformity-topics/encryption-and-data-security>,
        <https://test.uncefact.org/vocabulary/conformity-topics/incident-response>,
        <https://test.uncefact.org/vocabulary/conformity-topics/system-integrity> ;
    skos:notation "11" ;
    skos:prefLabel "Information Security and Digital Trust"@en ;
    skos:relatedMatch sdg:16,
        sdg:9 ;
    skos:scopeNote "ISO/IEC 27001 Information Security; GDPR; eIDAS; NIST Cybersecurity Framework."@en ;
    skos:topConceptOf <https://test.uncefact.org/vocabulary/conformity-topics/> .