relative Control Weighting = 07

Propojené úkoly

Vazby
Typ vazby Úkol
is related to Centralized Management of Security, Compliance & Resilience Controls
is related to Exception Management
is related to Materiality Determination
is related to Contacts With Groups & Associations
is related to Mergers, Acquisitions & Divestitures (MA&D)
is related to Virtual Data Room (VDR)
is related to Provenance
is related to Bring Your Own Device (BYOD) Usage
is related to Continue Essential Mission & Business Functions
is related to Simulated Events
is related to Separation from Primary Processing Site
is related to Preparation for Use
is related to Resource Priority
is related to Cloud Access Security Broker (CASB)
is related to Development & Test Environment Configurations
is related to Concurrent Session Control
is related to Approved Configuration Deviations
is related to Periodic Configuration Reviews
is related to Respond To Unauthorized Changes
is related to Monitoring Reporting
is related to Protection of Event Logs & Security-Relevant Telemetry
is related to Monitoring for Indicators of Compromise (IOC)
is related to Deactivated Account Activity
is related to Data & Asset Classification
is related to Media Transportation
is related to Resilience To Outages
is related to Mobile Code
is related to Participant Identity Verification
is related to Malicious Link & File Protections
is related to Personnel Transfer
is related to Automated Employment Status Notifications
is related to Incompatible Roles
is related to Correlation with External Organizations
is related to Assessment Boundaries
is related to Mobile Device Geofencing
is related to Remote Purging
is related to Mobile Device Tampering
is related to External Telecommunications Services
is related to Prevent Discovery of Internal Information
is related to Direct Internet Access Restrictions
is related to Internal System Connections
is related to Physical & Environmental Protections
is related to Alternate Work Site
is related to Physical Access Control
is related to Data Privacy Program
is related to Data Privacy Accountability Structure
is related to Privacy-Aware Design
is related to Notification of Disclosure Requests To Data Subject
is related to Dissemination of Data Privacy Program Information
is related to Allocation of Resources
is related to Alignment With Enterprise Architecture
is related to Security Concept Of Operations (CONOPS)
is related to Service Delivery (Business Process Support)
is related to Continuous Monitoring Plan
is related to Software / Firmware Integrity Verification
is related to Limit Potential Harm
is related to Predictive Cyber Analytics
is related to Assessment Objectives (AO)
is related to Periodic Review & Update of Security, Compliance & Resilience Program
is related to Periodic Review of Exceptions
is related to Authoritative Chain of Command
is related to High Value Assets (HVAs)
is related to Steering Committee & Program Oversight
is related to Assurance
is related to AI & Autonomous Technologies High Risk Designations
is related to Novel Risk Assessment Methods & Technologies
is related to Release Owner Gate (ROG) For AI-Augmented Content
is related to Training Data Source & Integrity
is related to Prohibit Training
is related to Real-World Testing
is related to AI TEVV Tools
is related to AI TEVV Transparency & Accountability Assessment
is related to AI TEVV Benchmarking Content Provenance
is related to AI & Autonomous Technologies End User Feedback
is related to Unmeasurable AI & Autonomous Technologies Risks
is related to AI & Autonomous Technologies Event Logging
is related to Updates During Installations / Removals
is related to Approved Technologies
is related to Temporary Asset Storage In Automobiles
is related to Usage Parameters
is related to Jump Server
is related to Technology Lifecycle Management
is related to Separation from Primary Storage Site
is related to Reserve Hardware
is related to Data Replication
is related to Restoration Integrity Verification
is related to Performance Monitoring
is related to Resiliency Planning For Alternate Sites
is related to Security, Compliance & Resilience Representative for Asset Lifecycle Changes
is related to Documenting Emergency Changes
is related to Non-Conformity Corrective Action
is related to Assessor Access
is related to Assessment Methods
is related to Assessment Rigor
is related to Assurance Levels (AL)
is related to Evidence Request List (ERL)
is related to Evidence Sampling
is related to Continuous Control Monitoring (CCM)
is related to Control Assurance Automation (CAA) Oversight
is related to Bluetooth & Wireless Devices
is related to Automated Baseline Configuration Management & Verification
is related to Network Device Configuration File Synchronization
is related to Prevent Unauthorized Software Execution
is related to Unsupported Internet Browsers & Email Clients
is related to Production Software Repository
is related to Third-Party Libraries
is related to Software Repository Protections
is related to Software Development Repository
is related to Embedded Sensor Capability
is related to Restrict Access To Security Functions
is related to Host-Based Security Function Isolation
is related to Control Assurance Automation (CAA) Change Control
is related to Control Assurance Automation (CAA) Unauthorized Change Detection
is related to System Generated Event Logs & Security-Relevant Telemetry
is related to Event Log & Security-Relevant Telemetry Analysis & Triage
is related to Event Log & Security-Relevant Telemetry Review Escalation Matrix
is related to Account Creation and Modification Logging
is related to Inventory of Technology Asset Event Logging
is related to Unusual Transactions
is related to Session Audit
is related to Third-Party Cryptographic Keys
is related to Data Catalog
is related to Periodic Scans for Sensitive / Regulated Data
is related to Media Marking
is related to Masking Displayed Sensitive / Regulated Data
is related to Digital Media Sanitization Documentation
is related to Data Mining Protection
is related to Mobile Device Data Retention Limitations
is related to Attribute Reassignment
is related to Audit Changes
is related to Message Queuing Telemetry Transport (MQTT) Security
is related to Safety Instrumented Function (SIF)
is related to Formal Indoctrination
is related to Separation of Duties (SoD)
is related to Reporting Suspicious Activities
is related to Identity Providers (IdP) & Authorization Servers
is related to Account Separation Between Infrastructure Environments
is related to Dedicated Privileged Account
is related to Employment Status Identification
is related to Group Authentication
is related to Multi-Factor Authentication (MFA) For Network Access to Non-Privileged Accounts
is related to Sensitive / Regulated Data Access Enforcement
is related to Sensitive / Regulated Data Actions
is related to Compliance As Code (CAC) Identity Governance
is related to Compliance As Code (CAC) Credential Lifecycle Management
is related to Incident Response Capabilities Testing Coordination with Related Plans
is related to Incident Tracking Repository
is related to Supply Chain Coordination
is related to Cryptographic Incident Response (Emergency Algorithm Transition)
is related to Embedded Technology Incidents
is related to Adequate Security for Sensitive / Regulated Data In Support of Contracts
is related to Applied Security, Compliance and Resilience Controls Documentation
is related to Security Assessment Report (SAR)
is related to Remote Maintenance Pre-Approval
is related to Maintenance Personnel Without Appropriate Access
is related to Separate Mobile Device Profiles
is related to Certificate Denylisting
is related to Network Processing Rules For Personal Data (PD)
is related to Separate Subnets To Isolate Functions
is related to Network Device Plane Segmentation
is related to Application Proxy
is related to API Gateway
is related to Sender Denylisting
is related to Physical Access Authorizations
is related to Monitoring Physical Access
is related to Visitor Access Revocation
is related to Emergency Lighting
is related to Fire Protection
is related to Data Protection Officer (DPO)
is related to Data Fiduciary
is related to Security of Personal Data (PD)
is related to Authority To Collect, Process, Store & Share Personal Data (PD)
is related to Product or Service Delivery Restrictions
is related to Limiting Personal Data (PD) Disclosures
is related to Data Privacy Notice
is related to Purpose Specification
is related to Data Subject Consent
is related to Restrict Collection, Processing & Sharing To Identified Purpose
is related to Primary Source Collection For Personal Data (PD)
is related to Identifiable Image Collection
is related to Data Brokers
is related to Data Controller Communications
is related to Commitment To Continual Improvements
is related to Project Management Stage Gates
is related to Business Process Definition
is related to Quantum Security Policy
is related to Quantum Risk Governance
is related to Data Shelf-Life Classification for Post-Quantum Cryptography (PQC) Prioritization
is related to Long-Lived Data Identification
is related to Cryptographic Agility Risk Assessment (CARA)
is related to Cryptographic Exception Register
is related to Compensating Controls for Quantum-Vulnerable Systems
is related to Crypto Agility Maturity Assessment
is related to Harvest Now, Decrypt Later (HNDL) Mitigation
is related to Post-Quantum Cryptography Agility Plan (PQCAP)
is related to Post-Quantum Cryptography (PQC) Transition Planning & Hybrid Mode Support
is related to Post-Quantum Cryptography (PQC) Migration Progress Oversight
is related to Post-Quantum Cryptography (PQC) Supply Chain Visibility
is related to Post-Quantum Cryptography (PQC) Supply Chain Flow-Down Requirements
is related to Post-Quantum Cryptography (PQC) Discovery & Visibility
is related to Post-Quantum Cryptography (PQC) Asset Inventory
is related to Post-Quantum Cryptography Exposure
is related to Quantum Threat Intelligence Monitoring
is related to Collaboration & Information Sharing
is related to Crypto-Agility Architecture
is related to Entropy Source & Random Bit Generation
is related to Stateful Hash-Based Signatures for Firmware & Code Signing
is related to Approved Post-Quantum Cryptography (PQC) Algorithm Use
is related to Post-Quantum Cryptography (PQC) Validation Requirements
is related to Deprecated Cryptographic Algorithms
is related to Post-Quantum Cryptography (PQC) Key Management
is related to Quantum-Safe Public Key Infrastructure (PKI) Transition
is related to Algorithm Negotiation Integrity
is related to Hybrid / Composite Cryptography
is related to Cryptographic Application Programming Interface (API) Abstraction
is related to Post-Quantum Cryptography (PQC) Implementation Validation & Interoperability Testing
is related to Material Risks
is related to Security, Compliance & Resilience Aware Design
is related to Secure Architecture Principles
is related to Process Isolation
is related to Security Function Isolation
is related to Hardware Separation
is related to Thread Separation
is related to Non-Persistent Information
is related to Secure Practices Guidelines
is related to Vendor-Specific Security, Compliance & Resilience Training
is related to Quantum Security Awareness
is related to Training Feedback
is related to Programming Language Selection
is related to Threat Modeling
is related to Technical Documentation Artifacts
is related to Software Escrow
is related to Malformed Input Testing
is related to Developer Knowledge & Skills Register
is related to Requisite Developer Training
is related to Cryptographic Bill of Materials (CBOM)
is related to Security, Compliance & Resilience Outsourcing Limitations
is related to External Connectivity Requirements - Identification of Ports, Protocols & Services
is related to First-Party Declaration (1PD)
is related to Technology Assets, Applications, Services and Data (TAASD) Portability
is related to Third-Party Exit Obligations Management
is related to Third-Party Exit Contingencies
is related to Material Threats
is related to Threat Analysis
is related to Known Exploited Vulnerabilities (KEV) Mitigations
is related to Pre-Deployment Patch Testing
is related to Out-of-Cycle Patching
is related to Publicly Accessible Content Reviews