...
Some countries may have their own control sets, for example the UK specifies five controls for basic cyber hygine in the Cyber Essentials standard, and controls/objectives for operators of essential services under the NIS Directive are published by NCSC.
Particular domains for example, scientific collaboration environments, may also have their own control sets, for example in https://www.eugridpma.org/sci/. The telecommunications sector has ISO/IEC 27011 and cloud computing has ISO/IEC 27017
...