Risks originating from a supplier's or External Service Provider's (ESP) own suppliers, subcontractors or dependencies propagate through the supply chain and affect organizational Confidentiality, Integrity, Availability and/or Safety (CIAS), compliance and/or operations.

Propojené úkoly

Vazby
Typ vazby Úkol
is blocked by Security, Compliance & Resilience Governance Policy
is blocked by Security, Compliance & Resilience Program (SCRP)
is blocked by Centralized Management of Security, Compliance & Resilience Controls
is blocked by Publishing Security, Compliance & Resilience Documentation
is blocked by Periodic Review & Update of Security, Compliance & Resilience Program
is blocked by Exception Management
is blocked by Assigned Security, Compliance & Resilience Responsibilities
is blocked by Stakeholder Accountability Structure
is blocked by Authoritative Chain of Command
is blocked by Materiality Determination
is blocked by High Value Assets (HVAs)
is blocked by Steering Committee & Program Oversight
is blocked by Business As Usual (BAU) Security, Compliance & Resilience Practices
is blocked by Operationalizing Security, Compliance & Resilience Capabilities
is blocked by Measures of Performance
is blocked by Forced Technology Transfer (FTT)
is blocked by State-Sponsored Espionage
is blocked by Contacts With Authorities
is blocked by Contacts With Groups & Associations
is blocked by Assurance
is blocked by Mergers, Acquisitions & Divestitures (MA&D)
is blocked by Virtual Data Room (VDR)
is blocked by Artificial Intelligence & Autonomous Technologies Policy
is blocked by Artificial Intelligence (AI) & Autonomous Technologies Governance
is blocked by AI & Autonomous Technologies Mission and Goals Definition
is blocked by AI & Autonomous Technologies Value Sustainment
is blocked by AI & Autonomous Technologies Context Definition
is blocked by AI & Autonomous Technologies-Related Legal Requirements Identification
is blocked by Assigned Responsibilities for AI & Autonomous Technologies
is blocked by Trustworthy AI & Autonomous Technologies
is blocked by Situational Awareness of AI & Autonomous Technologies In Use
is blocked by AI Model & Agent Inventory & Lifecycle Management
is blocked by Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization
is blocked by AI & Autonomous Technologies Internal Controls
is blocked by AI & Autonomous Technologies Impact Assessment
is blocked by AI & Autonomous Technologies Risk Profiling
is blocked by AI & Autonomous Technologies Risk Mapping
is blocked by AI & Autonomous Technologies Risk Management Decisions
is blocked by AI & Autonomous Technologies Likelihood & Impact Risk Analysis
is blocked by AI & Autonomous Technologies High Risk Designations
is blocked by AI Threat Modeling & Risk Assessment
is blocked by Novel Risk Assessment Methods & Technologies
is blocked by AI & Autonomous Technologies Risk Response
is blocked by AI & Autonomous Technologies Risk Tracking Approaches
is blocked by AI & Autonomous Technologies Business Case
is blocked by AI & Autonomous Technologies Potential Benefits Analysis
is blocked by AI & Autonomous Technologies Potential Costs Analysis
is blocked by Model & AI Agent Documentation
is blocked by AI & Autonomous Technologies Output Marking
is blocked by Release Owner Gate (ROG) For AI-Augmented Content
is blocked by AI & Autonomous Technologies Output Filtering
is blocked by Human Moderation of AI & Autonomous Technologies-Generated Content
is blocked by AI & Autonomous Technologies Intellectual Property Infringement Protections
is blocked by Data Source Identification
is blocked by AI & Autonomous Technologies Harm Prevention
is blocked by AI & Autonomous Technologies Human Subject Protections
is blocked by AI & Autonomous Technologies Environmental Impact & Sustainability
is blocked by Previously Unknown AI & Autonomous Technologies Threats & Risks
is blocked by AI & Autonomous Technologies Conformity
is blocked by Manipulative or Deceptive Techniques
is blocked by Materially Distorting Behaviors
is blocked by Social Scoring
is blocked by AI & Autonomous Technologies Requirements Definitions
is blocked by AI & Autonomous Technologies Fairness & Bias
is blocked by AI & Autonomous Technologies Knowledge Limits
is blocked by AI & Autonomous Technologies Development Practices
is blocked by AI & Autonomous Technologies Implementation Tasks Definition
is blocked by Real World Testing of AI & Autonomous Technologies
is blocked by AI & Autonomous Technologies Testing Techniques
is blocked by Generative Artificial Intelligence (GAI) Identification
is blocked by Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV)
is blocked by AI TEVV Trustworthiness Assessment
is blocked by AI TEVV Tools
is blocked by AI TEVV Trustworthiness Demonstration
is blocked by AI TEVV Results Evaluation
is blocked by AI TEVV Effectiveness
is blocked by AI TEVV Reporting
is blocked by AI & Autonomous Technologies Residual Risks
is blocked by AI & Autonomous Technologies Viability Decisions
is blocked by AI TEVV Post-Deployment Monitoring
is blocked by Updating AI & Autonomous Technologies
is blocked by Asset Governance
is blocked by Standardized Naming Convention
is blocked by Asset Inventories
is blocked by Updates During Installations / Removals
is blocked by Identify Critical Assets
is blocked by Technology Assets, Applications, Services and/or Data (TAASD) Criticality Ratings
is blocked by Asset-Service Dependencies
is blocked by Stakeholder Identification & Involvement
is blocked by Comprehensive Asset Inventory Management
is blocked by Asset Discovery
is blocked by Prohibited Technology Assets, Applications and/or Services (TAAS)
is blocked by Software Licensing Restrictions
is blocked by Asset Scope Classification
is blocked by Network Diagrams & Data Flow Diagrams (DFDs)
is blocked by Security of Assets & Media
is blocked by Technology Assets, Applications, Services and/or Data (TAASD) Storage
is blocked by Unattended End-User Equipment
is blocked by Kiosks & Point of Interaction (PoI) Devices
is blocked by Secure Disposal, Destruction or Re-Use of Equipment
is blocked by Return of Assets
is blocked by Use of Third-Party Devices
is blocked by Bring Your Own Device (BYOD) Usage
is blocked by Usage Parameters
is blocked by Technology Asset Inspections
is blocked by Physical Tampering Detection
is blocked by Roots of Trust Protection
is blocked by Telecommunications Equipment
is blocked by Operational Resilience Capabilities
is blocked by Business Continuity & Disaster Recovery (BC/DR) Plans
is blocked by Alternate Site Priority of Service
is blocked by Preparation for Use
is blocked by Inability to Return to Primary Site
is blocked by Resource Priority
is blocked by Change Management Policy
is blocked by Change Management Program
is blocked by Configuration Change Control
is blocked by Access Restriction For Change
is blocked by Dual Authorization for Changes To Critical / Sensitive Technology Assets, Applications and/or Services (TAAS)
is blocked by Dual Approval For High-Impact Environments
is blocked by Security, Compliance & Resilience Representative for Asset Lifecycle Changes
is blocked by Security Impact Analysis for Changes
is blocked by Test, Validate & Document Changes
is blocked by Cloud Security Policy
is blocked by Cloud Services
is blocked by Cloud Infrastructure Security Subnet
is blocked by Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS)
is blocked by Compliance Policy
is blocked by Statutory, Regulatory & Contractual Compliance
is blocked by Compliance Scope
is blocked by Ability To Demonstrate Conformity
is blocked by Conformity Monitoring
is blocked by Functional Review Of Security, Compliance & Resilience Controls
is blocked by Non-Conformity Oversight
is blocked by Executive Leadership Oversight of Security, Compliance & Resilience Controls
is blocked by Internal Audit Function
is blocked by Independent Assessors
is blocked by Assessment Methods
is blocked by Configuration Management Policy
is blocked by Configuration Management Program
is blocked by Least Functionality
is blocked by Baseline Tailoring
is blocked by Development & Test Environment Configurations
is blocked by Secure Baseline Configurations
is blocked by Account Lockout
is blocked by Concurrent Session Control
is blocked by Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas
is blocked by Physically Disable or Remove Capabilities
is blocked by Approved Configuration Deviations
is blocked by Periodic Configuration Reviews
is blocked by Respond To Unauthorized Changes
is blocked by Continuous Monitoring Policy
is blocked by Continuous Monitoring
is blocked by Event Log & Security-Relevant Telemetry Monitoring
is blocked by Analyze and Prioritize Monitoring Requirements
is blocked by Audit Level Adjustments
is blocked by System Generated Event Logs & Security-Relevant Telemetry
is blocked by Centralized Collection of Event Logs & Security-Relevant Telemetry
is blocked by Centralized Event Log & Security-Relevant Telemetry Review & Analysis
is blocked by Event Log & Security-Relevant Telemetry Analysis & Triage
is blocked by Monitoring Reporting
is blocked by Trend Analysis Reporting
is blocked by Correlate Monitoring Information
is blocked by Time Stamps
is blocked by Protection of Event Logs & Security-Relevant Telemetry
is blocked by Anomalous Behavior
is blocked by Unusual Transactions
is blocked by Monitoring for Indicators of Compromise (IOC)
is blocked by Deactivated Account Activity
is blocked by Individuals Posing Greater Risk
is blocked by Public Key Infrastructure (PKI)
is blocked by Public Key Infrastructure (PKI) Availability
is blocked by Transmission of Cybersecurity & Data Protection Attributes
is blocked by Certificate Authorities
is blocked by Data Classification & Handling Policy
is blocked by Data Protection
is blocked by Sensitive / Regulated Data Governance
is blocked by Data Catalog
is blocked by Sensitive / Regulated Data Protection
is blocked by Restrict Sensitive / Regulated Data Access To Authorized Individuals
is blocked by Media Marking
is blocked by Masking Displayed Sensitive / Regulated Data
is blocked by Media Storage
is blocked by Data Storage Location Reviews
is blocked by Physically Secure All Media Containing Sensitive / Regulated Data
is blocked by Storing Authentication Data
is blocked by Digital & Non-Digital Media Disposal
is blocked by Digital Media Sanitization
is blocked by Sanitization of Sensitive / Regulated Data
is blocked by Digital Media Sanitization Documentation
is blocked by Digital Media Sanitization Equipment Testing
is blocked by Digital Media Use Restrictions
is blocked by Removable Media Security
is blocked by Limits of Authorized Use To Process, Store and/or Transmit Data
is blocked by Non-Organizationally Owned Technology Assets, Applications and/or Services (TAAS)
is blocked by Information Search & Retrieval
is blocked by Electronic Discovery (eDiscovery)
is blocked by Publicly Accessible Content
is blocked by Data Mining Protection
is blocked by Ad-Hoc Transfers
is blocked by Transfer Authorizations
is blocked by Media & Data Retention
is blocked by Embedded Technology Policy
is blocked by Embedded Technology Security Program
is blocked by Separate Operating Environments For Embedded Technologies
is blocked by Embedded Technology Inventory Management
is blocked by Internet of Things (IOT)
is blocked by Operational Technology (OT)
is blocked by Interface Security
is blocked by Embedded Technology Configuration Monitoring
is blocked by Prevent Alterations
is blocked by Embedded Technology Maintenance
is blocked by Remote Management of Embedded Technologies
is blocked by Endpoint Security Policy
is blocked by Endpoint Device Management (EDM)
is blocked by Endpoint Protection Mechanisms
is blocked by Centralized Management of Endpoint Protection Mechanisms
is blocked by Automatic Endpoint Protection Mechanism Updates
is blocked by Malicious Code Protection (Antimalware)
is blocked by Always On Antimalware Protection
is blocked by Antimalware Protection Mechanism Testing
is blocked by Documented Endpoint Security Protection Measures
is blocked by Software Firewall
is blocked by Unified Endpoint Device Management (UEDM)
is blocked by Endpoint Detection & Response (EDR)
is blocked by Extended Detection & Response (XDR)
is blocked by Endpoint File Integrity Monitoring (FIM)
is blocked by Host Intrusion Detection and Prevention Systems (HIDS / HIPS)
is blocked by Mobile Code
is blocked by Collaborative Computing Devices
is blocked by Collaborative Computing Capability Disabling / Removal In Secure Work Areas
is blocked by Explicitly Indicate Current Participants
is blocked by Participant Identity Verification
is blocked by Participant Connection Management
is blocked by Explicit Indication Of Use
is blocked by Human Resources Security Policy
is blocked by Human Resources Security Management
is blocked by Position Categorization
is blocked by Users With Elevated Privileges
is blocked by Competency Requirements for Security, Compliance & Resilience-Related Positions
is blocked by Defined Roles & Responsibilities
is blocked by Assigned Roles & Responsibilities Awareness
is blocked by Personnel Screening
is blocked by Roles With Special Protection Measures
is blocked by Citizenship Requirements
is blocked by Terms of Employment
is blocked by Rules of Behavior
is blocked by Social Media & Social Networking Restrictions
is blocked by Access Agreements
is blocked by Confidentiality Agreements
is blocked by Onboarding, Transferring & Offboarding Personnel
is blocked by Probationary Periods
is blocked by Personnel Sanctions
is blocked by Personnel Transfer
is blocked by Personnel Termination
is blocked by Automated Employment Status Notifications
is blocked by Third-Party Personnel
is blocked by Separation of Duties (SoD)
is blocked by Incompatible Roles
is blocked by Identification & Authentication Policy
is blocked by Identity & Access Management (IAM)
is blocked by Authenticate, Authorize and Audit (AAA)
is blocked by Replay-Resistant Authentication
is blocked by Retain Access Records
is blocked by Identity Providers (IdP) & Authorization Servers
is blocked by User Provisioning & De-Provisioning
is blocked by Change of Roles & Duties
is blocked by Termination of Employment
is blocked by Identity Proofing (Identity Verification)
is blocked by In-Person or Trusted Third-Party Registration
is blocked by Identity Evidence
is blocked by Role-Based Access Control (RBAC)
is blocked by Attribute-Based Access Control (ABAC)
is blocked by Real-Time Access Decisions
is blocked by Access Profile Rules
is blocked by Account Management
is blocked by Management Approval For New or Changed Accounts
is blocked by Management Approval For Privileged Accounts
is blocked by Privileged Account Management (PAM)
is blocked by Privileged Account Inventories
is blocked by Privileged Account Separation
is blocked by Dedicated Privileged Account
is blocked by Privileged Command Execution
is blocked by Manual Override
is blocked by Emergency Accounts
is blocked by Periodic Review of Individual & Service Account Privileges
is blocked by System Account Reviews
is blocked by User Identity (ID) Management
is blocked by Standardized Identifier Management (User Names)
is blocked by Employment Status Identification
is blocked by Citizenship Identification
is blocked by Authenticator Management
is blocked by Password-Based Authentication
is blocked by Automated Support For Password Strength
is blocked by Password Managers
is blocked by Passkeys
is blocked by Biometric Authentication
is blocked by PKI-Based Authentication
is blocked by Hardware Token-Based Authentication
is blocked by Authenticator Feedback
is blocked by Restrictions on Shared Groups / Accounts
is blocked by Group Authentication
is blocked by User Responsibilities for Account Management
is blocked by Credential Sharing
is blocked by Reference Monitor
is blocked by Access Enforcement
is blocked by Access To Sensitive / Regulated Data
is blocked by Use of Privileged Utility Programs
is blocked by Dedicated Administrative Machines
is blocked by Dual Authorization for Privileged Commands
is blocked by Incident Response Policy
is blocked by Incident Response Operations
is blocked by Continuous Incident Response Improvements
is blocked by Incident Classification & Prioritization
is blocked by Indicators of Compromise (IOC)
is blocked by Incident Handling
is blocked by Correlation with External Organizations
is blocked by Automated Incident Handling Processes
is blocked by Incident Response Plan (IRP)
is blocked by Incident Response Capabilities Testing
is blocked by Incident Response Capabilities Testing Coordination with Related Plans
is blocked by Incident Response Training
is blocked by Simulated Incidents
is blocked by Automated Incident Response Training Environments
is blocked by Integrated Security Incident Response Team (ISIRT)
is blocked by Public Relations & Reputation Repair
is blocked by Chain of Custody & Forensics
is blocked by Root Cause Analysis (RCA) & Lessons Learned
is blocked by Regulatory & Law Enforcement Contacts
is blocked by Incident Stakeholder Reporting
is blocked by Information Assurance Policy
is blocked by Information Assurance (IA) Operations
is blocked by Assessment Boundaries
is blocked by Control Validation Testing (CVT)
is blocked by Specialized Assessments
is blocked by Assessor Independence
is blocked by Third-Party Assessment Reciprocity
is blocked by Maintenance Policy
is blocked by Maintenance Operations
is blocked by Controlled Maintenance
is blocked by Timely Maintenance
is blocked by Preventative Maintenance
is blocked by Predictive Maintenance
is blocked by Maintenance Validation
is blocked by Maintenance Monitoring
is blocked by Prevent Unauthorized Removal
is blocked by Automated Maintenance Activities
is blocked by Maintenance Tools
is blocked by Mobile Device Management Policy
is blocked by Centralized Management Of Mobile Devices
is blocked by Personally-Owned Mobile Devices
is blocked by Organization-Owned Mobile Devices
is blocked by Mobile Device Tampering
is blocked by Network Security Policy
is blocked by Network Security Controls (NSC)
is blocked by Boundary Protection
is blocked by Limit Network Connections
is blocked by Domain Name Verification
is blocked by Bandwidth Control
is blocked by Data Flow Enforcement – Access Control Lists (ACLs)
is blocked by Deny Traffic by Default & Allow Traffic by Exception
is blocked by Interconnection Security Agreements (ISAs)
is blocked by External System Connections
is blocked by Internal System Connections
is blocked by Network Segmentation (macrosegmentation)
is blocked by Security Management Subnets
is blocked by Sensitive / Regulated Data Enclave (Secure Zone)
is blocked by Virtual Local Area Network (VLAN) Separation
is blocked by Domain Name Service (DNS) Resolution
is blocked by Policy Decision Point (PDP)
is blocked by Network Access Control (NAC)
is blocked by Authenticated Proxy
is blocked by Route Internal Traffic to Proxy Servers
is blocked by Route Privileged Network Access
is blocked by Application Proxy
is blocked by Visibility of Encrypted Communications
is blocked by Content Check for Encrypted Data
is blocked by Physical & Environmental Security Policy
is blocked by Physical & Environmental Protections
is blocked by Physical Security Plan (PSP)
is blocked by Zone-Based Physical Security
is blocked by Alternate Work Site
is blocked by Physical Access Authorizations
is blocked by Physical Security of Offices, Rooms & Facilities
is blocked by Working in Secure Areas
is blocked by Access To Critical Systems
is blocked by Lockable Physical Casings
is blocked by Visitor Control
is blocked by Equipment Siting & Protection
is blocked by Access Control for Output Devices
is blocked by Component Marking
is blocked by Asset Monitoring and Tracking
is blocked by Data Privacy Policy
is blocked by Data Privacy Program
is blocked by Data Privacy Accountability Structure
is blocked by Chief Privacy Officer (CPO)
is blocked by Data Protection Officer (DPO)
is blocked by Personal Data Process Manager (PDPM)
is blocked by Data Fiduciary
is blocked by Privacy-Aware Design
is blocked by Documenting Data Processing Activities
is blocked by Personal Data (PD) Lineage
is blocked by Personal Data (PD) Inventory Automation Support
is blocked by Updating Personal Data (PD) Process
is blocked by Data Privacy Requirements for Contractors & Service Providers
is blocked by Information Sharing With Third Parties
is blocked by Notification of Disclosure Requests To Data Subject
is blocked by Project & Resource Management Policy
is blocked by Strategic Plan & Objectives
is blocked by Targeted Capability Maturity Levels
is blocked by Security, Compliance & Resilience Protection Portfolio Management
is blocked by Security, Compliance & Resilience Resource Management
is blocked by Allocation of Resources
is blocked by Secure Development Life Cycle (SDLC) Management
is blocked by Security, Compliance & Resilience In Project Management
is blocked by Risk Management Policy
is blocked by Risk Management Program
is blocked by Risk Management Resourcing
is blocked by Risk Culture
is blocked by Risk Framing
is blocked by Material Risks
is blocked by Executive Leadership Approval For Managing Material Risk
is blocked by Documented Justification For Material Risk Management Decisions
is blocked by Risk-Based Security Categorization
is blocked by Business Impact Analysis (BIA)
is blocked by Risk Identification
is blocked by Risk Catalog
is blocked by Risk Owner
is blocked by Risk Assessment Methodology
is blocked by Secure Engineering & Architecture Policy
is blocked by Security, Compliance & Resilience Aware Design
is blocked by Flexible Technology Stack
is blocked by Secure Architecture Principles
is blocked by Secure Engineering Principles
is blocked by Information Output Filtering
is blocked by Heterogeneity
is blocked by Security Operations Policy
is blocked by Operations Security
is blocked by Security Concept Of Operations (CONOPS)
is blocked by Standardized Operating Procedures (SOP)
is blocked by Service Delivery (Business Process Support)
is blocked by Security Operations Center (SOC)
is blocked by Security Awareness & Training Policy
is blocked by Security, Compliance & Resilience-Minded Workforce
is blocked by Maintaining Workforce Development Relevancy
is blocked by Security, Compliance & Resilience Awareness Training
is blocked by Role-Based Security, Compliance & Resilience Training
is blocked by Technology Development & Acquisition Policy
is blocked by Technology Development & Acquisition
is blocked by Secure Software Development Practices (SSDP)
is blocked by Product Management
is blocked by Ongoing Product Security Support
is blocked by Integrity Mechanisms for Software / Firmware Updates
is blocked by Software Release Integrity Verification
is blocked by Information Assurance Enabled Products
is blocked by Disclosure of Vulnerabilities
is blocked by Technical Documentation Artifacts
is blocked by Product-Specific Risk Assessment Artifacts
is blocked by Product Tampering and Counterfeiting (PTC)
is blocked by Customized Development of Critical Components
is blocked by DevSecOps
is blocked by Minimum Viable Product (MVP) Security Requirements
is blocked by Input Data Validation
is blocked by Minimizing Attack Surfaces
is blocked by Product Testing & Reviews
is blocked by Security, Compliance & Resilience Representatives For Product Changes
is blocked by Secure Development Environments
is blocked by Library Privileges
is blocked by Security, Compliance & Resilience Testing Throughout Development
is blocked by Static Code Analysis
is blocked by Use of Live Data
is blocked by Developer Screening
is blocked by Developer Configuration Management
is blocked by Developer Threat Analysis & Flaw Remediation
is blocked by Developer-Provided Training
is blocked by Hardware Integrity Verification
is blocked by Bills of Material (BOMs)
is blocked by Third-Party Management Policy
is blocked by Third-Party Management
is blocked by Acquisition Strategies, Tools & Methods
is blocked by Supply Chain Risk Management (SCRM)
is blocked by Processes To Address Weaknesses or Deficiencies
is blocked by Limit Potential Harm
is blocked by Security, Compliance & Resilience Outsourcing Limitations
is blocked by Outsourcing Non-Essential Functions or Services
is blocked by Supplier Diversity
is blocked by Adequate Supply
is blocked by Third-Party Inventories
is blocked by Third-Party Criticality Assessments
is blocked by Third-Party Risk Assessments & Approvals
is blocked by Responsible, Accountable, Supportive, Consulted & Informed (RASCI) Matrix
is blocked by Third-Party Services
is blocked by Conflict of Interests
is blocked by Third-Party Processing, Storage and Service Locations
is blocked by Threat Management Policy
is blocked by Threat Intelligence Program
is blocked by Dynamic Threat Awareness
is blocked by Threat Intelligence Feeds
is blocked by Threat Intelligence Reporting
is blocked by Material Threats
is blocked by Behavioral Baselining
is blocked by Predictive Cyber Analytics
is blocked by Indicators of Exposure (IOE)
is blocked by Vulnerability & Patch Management Policy
is blocked by Vulnerability & Patch Management Program (VPMP)
is blocked by Attack Surface Scope
is blocked by Vulnerability Exploitation Analysis
is blocked by Vulnerability Ranking
is blocked by Vulnerability Remediation Process
is blocked by Centralized Management of Flaw Remediation Processes
is blocked by Continuous Vulnerability Remediation Activities
is blocked by Known Exploited Vulnerabilities (KEV) Mitigations
is blocked by Time To Remediate / Benchmarks For Corrective Action
is blocked by Deferred Patching Decisions
is blocked by Pre-Deployment Patch Testing
is blocked by Web Security Policy
is blocked by Web Security
is blocked by Web Application Framework
is blocked by Unauthorized Code On Web Pages
is blocked by Client-Facing Web Services
is blocked by Strong Customer Authentication (SCA)
is blocked by Web Application Input Validation & Sanitization
is blocked by Secure Web Traffic
is blocked by Web Application Output Encoding
is blocked by Web Browser Security
is blocked by Website Change Detection
is blocked by Publicly Accessible Content Reviews
is blocked by AI & Autonomous Technologies Cost / Benefit Mapping
is blocked by Prohibit Training
is blocked by AI TEVV Third-Party Risk Management
is blocked by Pre-Trained AI & Autonomous Technologies Models
is blocked by AI & Autonomous Technologies System Value Chain
is blocked by AI & Autonomous Technologies System Value Chain Fallbacks
is blocked by Provenance
is blocked by Coordinate With External Service Providers
is blocked by Separation of Primary / Alternate Providers
is blocked by Signed Components
is blocked by Customer Responsibility Matrix (CRM)
is blocked by Hosted Technology Assets, Applications and/or Services (TAAS)
is blocked by Sensitive / Regulated Data On Hosted Technology Assets, Applications and/or Services (TAAS)
is blocked by Control Inheritance
is blocked by Open Source Software
is blocked by Third-Party Libraries
is blocked by Refresh from Trusted Sources
is blocked by Sensitive / Regulated Data Access Mapping
is blocked by Use of External Technology Assets, Applications and/or Services (TAAS)
is blocked by Protecting Sensitive / Regulated Data on External Technology Assets, Applications and/or Services (TAAS)
is blocked by Binary or Machine-Executable Code
is blocked by Identification & Authentication for Third-Party Technology Assets, Applications and/or Services (TAAS)
is blocked by Supply Chain Coordination
is blocked by Supply Chain Coordination
is blocked by Third-Party Remote Access Governance
is blocked by Third-Party Remote Access Governance
is blocked by Binding Corporate Rules (BCR)
is blocked by Data Brokers
is blocked by Post-Quantum Cryptography (PQC) Supply Chain Visibility
is blocked by Post-Quantum Cryptography (PQC) Supply Chain Flow-Down Requirements
is blocked by Binding Corporate Rules (BCR)
is blocked by Risk Assessment
is blocked by Instances Requiring A Risk Assessment
is blocked by Risk Assessment Update
is blocked by Risk Assessment Stakeholder Involvement
is blocked by Risk Register
is blocked by Risk Ranking
is blocked by Risk Response
is blocked by Supply Chain Risk Management (SCRM) Plan
is blocked by AI & Autonomous Technologies Supply Chain Impacts
is blocked by Supply Chain Risk Assessment (SCRA)
is blocked by Commercial Off-The-Shelf (COTS) Security Solutions
is blocked by Risk Assessment
is blocked by Instances Requiring A Risk Assessment
is blocked by Risk Assessment Update
is blocked by Risk Assessment Stakeholder Involvement
is blocked by Risk Register
is blocked by Risk Ranking
is blocked by Risk Response
is blocked by Supply Chain Risk Management (SCRM) Plan
is blocked by AI & Autonomous Technologies Supply Chain Impacts
is blocked by Supply Chain Risk Assessment (SCRA)
is blocked by Pre-Established Secure Configurations
is blocked by Malware Testing Prior to Release
is blocked by Software / Firmware Integrity Verification
is blocked by Cryptographic Bill of Materials (CBOM)
is blocked by Hardware Bill of Materials (HBOM)
is blocked by Indentured Bill of Materials (IBOM)
is blocked by Software Bill of Materials (SBOM)
is blocked by Third-Party Authentication Practices
is blocked by External Connectivity Requirements - Identification of Ports, Protocols & Services
is blocked by Third-Party Contract Requirements
is blocked by Contract Flow-Down Requirements
is blocked by Review of Third-Party Services
is blocked by Third-Party Scope Review
is blocked by Managing Changes To Third-Party Services
is blocked by Third-Party Deficiency Remediation
is blocked by Break Clauses
is blocked by Foreign Ownership, Control or Influence (FOCI)
is blocked by Ownership Change Monitoring
is blocked by Ownership Change Provisions
is blocked by Third-Party Incident Response & Recovery Capabilities
is blocked by Security Compromise Notification Agreements
is blocked by First-Party Declaration (1PD)
is blocked by Third-Party Attestation (3PA)
is blocked by Terminating Third-Party Relationships
is blocked by Third-Party Transition Planning
is blocked by Technology Assets, Applications, Services and Data (TAASD) Portability
is blocked by Technology Assets, Applications, Services and Data (TAASD) Disposition
is blocked by Third-Party Access Revocation
is blocked by Third-Party Exit Obligations Management
is blocked by Third-Party Exit Contingencies
is blocked by Pre-Established Secure Configurations
is blocked by Malware Testing Prior to Release
is blocked by Software / Firmware Integrity Verification
is blocked by Cryptographic Bill of Materials (CBOM)
is blocked by Hardware Bill of Materials (HBOM)
is blocked by Indentured Bill of Materials (IBOM)
is blocked by Software Bill of Materials (SBOM)
is blocked by Third-Party Authentication Practices
is blocked by External Connectivity Requirements - Identification of Ports, Protocols & Services
is blocked by Third-Party Contract Requirements
is blocked by Pre-Established Secure Configurations
is blocked by Malware Testing Prior to Release
is blocked by Software / Firmware Integrity Verification
is blocked by Cryptographic Bill of Materials (CBOM)
is blocked by Hardware Bill of Materials (HBOM)
is blocked by Indentured Bill of Materials (IBOM)
is blocked by Software Bill of Materials (SBOM)
is blocked by Third-Party Authentication Practices
is blocked by External Connectivity Requirements - Identification of Ports, Protocols & Services
is blocked by Third-Party Contract Requirements