Protect

Propojené úkoly

Vazby
Typ vazby Úkol
is related to AI & Autonomous Technologies Risk Management Decisions
is related to AI & Autonomous Technologies Likelihood & Impact Risk Analysis
is related to AI & Autonomous Technologies High Risk Designations
is related to AI Threat Modeling & Risk Assessment
is related to Model & AI Agent Documentation
is related to Release Owner Gate (ROG) For AI-Augmented Content
is related to AI & Autonomous Technologies Output Filtering
is related to AI & Autonomous Technologies Harm Prevention
is related to AI & Autonomous Technologies Human Subject Protections
is related to AI & Autonomous Technologies Environmental Impact & Sustainability
is related to Previously Unknown AI & Autonomous Technologies Threats & Risks
is related to AI & Autonomous Technologies Conformity
is related to Manipulative or Deceptive Techniques
is related to Materially Distorting Behaviors
is related to Social Scoring
is related to AI & Autonomous Technologies Requirements Definitions
is related to AI & Autonomous Technologies Fairness & Bias
is related to AI & Autonomous Technologies Knowledge Limits
is related to AI & Autonomous Technologies Development Practices
is related to AI & Autonomous Technologies Implementation Tasks Definition
is related to Real World Testing of AI & Autonomous Technologies
is related to AI & Autonomous Technologies Testing Techniques
is related to Generative Artificial Intelligence (GAI) Identification
is related to Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV)
is related to AI TEVV Trustworthiness Assessment
is related to AI TEVV Tools
is related to AI TEVV Trustworthiness Demonstration
is related to AI TEVV Results Evaluation
is related to AI TEVV Effectiveness
is related to AI TEVV Reporting
is related to AI & Autonomous Technologies Residual Risks
is related to AI & Autonomous Technologies Viability Decisions
is related to AI TEVV Post-Deployment Monitoring
is related to Updating AI & Autonomous Technologies
is related to Technology Assets, Applications, Services and/or Data (TAASD) Criticality Ratings
is related to Asset-Service Dependencies
is related to Stakeholder Identification & Involvement
is related to Approved Technologies
is related to Automated Unauthorized Component Detection
is related to Prohibited Technology Assets, Applications and/or Services (TAAS)
is related to Software Licensing Restrictions
is related to Asset Categorization
is related to Network Diagrams & Data Flow Diagrams (DFDs)
is related to Security of Assets & Media
is related to Technology Assets, Applications, Services and/or Data (TAASD) Storage
is related to Unattended End-User Equipment
is related to Kiosks & Point of Interaction (PoI) Devices
is related to Secure Disposal, Destruction or Re-Use of Equipment
is related to Return of Assets
is related to Removal of Assets
is related to Use of Personal Devices
is related to Bring Your Own Device (BYOD) Usage
is related to Technology Asset Inspections
is related to Physical Tampering Detection
is related to Roots of Trust Protection
is related to Travel-Only Devices
is related to Ongoing Contingency Planning
is related to Resume All Missions & Business Functions
is related to Continue Essential Mission & Business Functions
is related to Resume Essential Missions & Business Functions
is related to Contingency Training
is related to Simulated Events
is related to Contingency Plan Testing For Alternate Storage & Processing Sites
is related to Contingency Plan Root Cause Analysis (RCA) & Lessons Learned
is related to Alternate Storage Site
is related to Alternate Processing Site
is related to Capacity & Performance Management
is related to Capacity Planning
is related to Change Management Policy
is related to Change Management Program
is related to Configuration Change Control
is related to Prohibition Of Changes
is related to Role-Based Permissions To Implement Changes
is related to Dual Authorization for Changes To Critical / Sensitive Technology Assets, Applications and/or Services (TAAS)
is related to Dual Approval For High-Impact Environments
is related to Security, Compliance & Resilience Representative for Asset Lifecycle Changes
is related to Security Impact Analysis for Changes
is related to Test, Validate & Document Changes
is related to Stakeholder Notification of Changes
is related to Cloud Services
is related to Cloud Infrastructure Onboarding
is related to Cloud Infrastructure Offboarding
is related to Cloud Security Architecture
is related to Cloud Infrastructure Security Subnet
is related to Multi-Tenant Environments
is related to Data Handling & Portability
is related to Standardized Virtualization Formats
is related to Sensitive Data In Public Cloud Providers
is related to Cloud Access Security Broker (CASB)
is related to Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Non-Conformity Oversight
is related to Assessment Rigor
is related to Assurance Levels (AL)
is related to Configuration Management Program
is related to Least Functionality
is related to Development & Test Environment Configurations
is related to Secure Baseline Configurations
is related to Account Lockout
is related to Concurrent Session Control
is related to Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas
is related to Approved Configuration Deviations
is related to Baseline Configuration Reviews & Updates
is related to Periodic Configuration Reviews
is related to Respond To Unauthorized Changes
is related to Content of Event Logs
is related to Audit Trails
is related to Use of Cryptographic Controls
is related to Cryptographic Management
is related to Cryptographic Cipher Suites and Protocols Inventory
is related to Encrypting Data In Transit
is related to Integrity of Data In Transit
is related to Encrypting Data At Rest
is related to Database Encryption
is related to Public Key Infrastructure (PKI)
is related to Public Key Infrastructure (PKI) Availability
is related to Cryptographic Key Management
is related to Transmission of Cybersecurity & Data Protection Attributes
is related to Certificate Authorities
is related to Certificate Monitoring
is related to Sensitive / Regulated Data Governance
is related to Data Catalog
is related to Data & Asset Classification
is related to Highest Classification Level
is related to Sensitive Data Inventories
is related to Periodic Scans for Sensitive / Regulated Data
is related to Data Stewardship
is related to Defining Access Authorizations for Sensitive / Regulated Data
is related to Sensitive / Regulated Data Protection
is related to Restrict Sensitive / Regulated Data Access To Authorized Individuals
is related to Limitations on Use & Distribution of Sensitive / Regulated Data
is related to Sensitive / Regulated Data Access Mapping
is related to Sensitive / Regulated Media Records
is related to Media Marking
is related to Masking Displayed Sensitive / Regulated Data
is related to Media Storage
is related to Data Storage Location Reviews
is related to Physically Secure All Media Containing Sensitive / Regulated Data
is related to Storing Authentication Data
is related to Media Transportation
is related to Digital & Non-Digital Media Disposal
is related to Digital Media Sanitization
is related to Sanitization of Sensitive / Regulated Data
is related to Digital Media Sanitization Documentation
is related to Digital Media Sanitization Equipment Testing
is related to Portable Storage Devices
is related to Removable Media Security
is related to Use of External Technology Assets, Applications and/or Services (TAAS)
is related to Limits of Authorized Use To Process, Store and/or Transmit Data
is related to Protecting Sensitive / Regulated Data on External Technology Assets, Applications and/or Services (TAAS)
is related to Information Search & Retrieval
is related to Electronic Discovery (eDiscovery)
is related to Ad-Hoc Transfers
is related to Transfer Authorizations
is related to Media & Data Retention
is related to Embedded Technology Policy
is related to Embedded Technology Security Program
is related to Separate Operating Environments For Embedded Technologies
is related to Embedded Technology Inventory Management
is related to Operational Technology (OT)
is related to Interface Security
is related to Embedded Technology Configuration Monitoring
is related to Resilience To Outages
is related to Power Level Monitoring
is related to Embedded Technology Reviews
is related to Restrict Communications
is related to Authorized Communications
is related to Operating Environment Certification
is related to Safety Assessment
is related to Endpoint Device Management (EDM)
is related to Endpoint Protection Mechanisms
is related to Centralized Management of Endpoint Protection Mechanisms
is related to Automatic Endpoint Protection Mechanism Updates
is related to Always On Antimalware Protection
is related to Antimalware Protection Mechanism Testing
is related to Documented Endpoint Security Protection Measures
is related to Software Firewall
is related to Unified Endpoint Device Management (UEDM)
is related to Endpoint Detection & Response (EDR)
is related to Endpoint File Integrity Monitoring (FIM)
is related to Host Intrusion Detection and Prevention Systems (HIDS / HIPS)
is related to Mobile Code
is related to Collaborative Computing Devices
is related to Collaborative Computing Capability Disabling / Removal In Secure Work Areas
is related to Explicitly Indicate Current Participants
is related to Participant Identity Verification
is related to Participant Connection Management
is related to Malicious Link & File Protections
is related to Explicit Indication Of Use
is related to Social Media & Social Networking Restrictions
is related to Probationary Periods
is related to Personnel Transfer
is related to Personnel Termination
is related to Automated Employment Status Notifications
is related to Third-Party Personnel
is related to Separation of Duties (SoD)
is related to Incompatible Roles
is related to Identity & Access Management (IAM)
is related to Authenticate, Authorize and Audit (AAA)
is related to Replay-Resistant Authentication
is related to Retain Access Records
is related to Identity Providers (IdP) & Authorization Servers
is related to User Provisioning & De-Provisioning
is related to Change of Roles & Duties
is related to Termination of Employment
is related to Identity Proofing (Identity Verification)
is related to In-Person or Trusted Third-Party Registration
is related to Identity Evidence
is related to Role-Based Access Control (RBAC)
is related to Attribute-Based Access Control (ABAC)
is related to Real-Time Access Decisions
is related to Access Profile Rules
is related to Account Management
is related to Management Approval For New or Changed Accounts
is related to Management Approval For Privileged Accounts
is related to Privileged Account Management (PAM)
is related to Privileged Account Inventories
is related to Privileged Account Separation
is related to Dedicated Privileged Account
is related to Privileged Command Execution
is related to Manual Override
is related to Emergency Accounts
is related to Periodic Review of Individual & Service Account Privileges
is related to System Account Reviews
is related to User Identity (ID) Management
is related to Standardized Identifier Management (User Names)
is related to Employment Status Identification
is related to Citizenship Identification
is related to Authenticator Management
is related to Password-Based Authentication
is related to Automated Support For Password Strength
is related to Password Managers
is related to Passkeys
is related to PKI-Based Authentication
is related to Hardware Token-Based Authentication
is related to Authenticator Feedback
is related to Restrictions on Shared Groups / Accounts
is related to Group Authentication
is related to User Responsibilities for Account Management
is related to Credential Sharing
is related to Reference Monitor
is related to Access Enforcement
is related to Access To Sensitive / Regulated Data
is related to Use of Privileged Utility Programs
is related to Dedicated Administrative Machines
is related to Dual Authorization for Privileged Commands
is related to Least Privilege
is related to Correlation with External Organizations
is related to Incident Response Plan (IRP) Update
is related to Information Assurance (IA) Operations
is related to Control Validation Testing (CVT)
is related to Assessor Independence
is related to Third-Party Assessment Reciprocity
is related to Maintenance Operations
is related to Controlled Maintenance
is related to Timely Maintenance
is related to Preventative Maintenance
is related to Predictive Maintenance
is related to Maintenance Validation
is related to Maintenance Monitoring
is related to Prevent Unauthorized Removal
is related to Centralized Management Of Mobile Devices
is related to Restricting Access To Authorized Technology Assets, Applications and/or Services (TAAS)
is related to Full Device & Container-Based Encryption
is related to Separate Mobile Device Profiles
is related to Personally-Owned Mobile Devices
is related to Organization-Owned Mobile Devices
is related to Mobile Device Geofencing
is related to Remote Purging
is related to Mobile Device Tampering
is related to Network Security Controls (NSC)
is related to Boundary Protection
is related to Limit Network Connections
is related to External Telecommunications Services
is related to Prevent Discovery of Internal Information
is related to Direct Internet Access Restrictions
is related to Prevent Unauthorized Exfiltration
is related to Protocol Compliance Enforcement
is related to Domain Name Verification
is related to Bandwidth Control
is related to Data Flow Enforcement – Access Control Lists (ACLs)
is related to Deny Traffic by Default & Allow Traffic by Exception
is related to Human Reviews
is related to Interconnection Security Agreements (ISAs)
is related to External System Connections
is related to Internal System Connections
is related to Network Segmentation (macrosegmentation)
is related to Security Management Subnets
is related to Out-of-Band Channels
is related to Separate Subnets To Isolate Functions
is related to Sensitive / Regulated Data Enclave (Secure Zone)
is related to Segregation From Enterprise Services
is related to Network Device Plane Segmentation
is related to Virtual Local Area Network (VLAN) Separation
is related to Microsegmentation
is related to Software Defined Networking (SDN)
is related to Domain Name Service (DNS) Resolution
is related to Zero Trust Architecture (ZTA)
is related to Policy Decision Point (PDP)
is related to Network Access Control (NAC)
is related to DNS & Content Filtering
is related to Authenticated Proxy
is related to Route Internal Traffic to Proxy Servers
is related to Application Proxy
is related to Visibility of Encrypted Communications
is related to Content Check for Encrypted Data
is related to Physical & Environmental Protections
is related to Physical Security Plan (PSP)
is related to Zone-Based Physical Security
is related to Physical Access Authorizations
is related to Role-Based Physical Access
is related to Dual Authorization for Physical Access
is related to Physical Access Control
is related to Controlled Ingress & Egress Points
is related to Physical Security of Offices, Rooms & Facilities
is related to Working in Secure Areas
is related to Access To Critical Systems
is related to Lockable Physical Casings
is related to Monitoring Physical Access
is related to Delivery & Removal
is related to Equipment Siting & Protection
is related to Access Control for Output Devices
is related to Component Marking
is related to Asset Monitoring and Tracking
is related to Information Sharing With Third Parties
is related to Limiting Personal Data (PD) Disclosures
is related to Accounting of Disclosures
is related to Financial Incentives For Personal Data (PD)
is related to Notice of Financial Incentive
is related to Dissemination of Data Privacy Program Information
is related to Data Privacy Notice
is related to Privacy Notice Formatting
is related to Conspicuous Link To Data Privacy Notice
is related to Secure Development Life Cycle (SDLC) Management
is related to Security, Compliance & Resilience In Project Management
is related to Security, Compliance & Resilience Aware Design
is related to Achieving Security, Compliance & Resilience Requirements
is related to Flexible Technology Stack
is related to Secure Architecture Principles
is related to Alignment With Enterprise Architecture
is related to Secure Engineering Principles
is related to Defense-In-Depth (DiD) Architecture
is related to System Partitioning
is related to Application Partitioning
is related to Process Isolation
is related to Security Function Isolation
is related to Hardware Separation
is related to Thread Separation
is related to System Privileges Isolation
is related to Information In Shared Resources
is related to Fail Secure
is related to Fail Safe
is related to Non-Persistence
is related to Information Output Filtering
is related to Memory Protection
is related to Honeypots
is related to Honeyclients
is related to Heterogeneity
is related to Operations Security
is related to Security Concept Of Operations (CONOPS)
is related to Standardized Operating Procedures (SOP)
is related to Service Delivery (Business Process Support)
is related to Secure Practices Guidelines
is related to Security, Compliance & Resilience-Minded Workforce
is related to Maintaining Workforce Development Relevancy
is related to Security, Compliance & Resilience Awareness Training
is related to Technology Development & Acquisition
is related to Development Methods, Techniques & Processes
is related to Software Assurance Maturity Model (SAMM)
is related to Developer Architecture & Design
is related to Programming Language Selection
is related to Secure Software Development Practices (SSDP)
is related to Product Management
is related to Product Conformity Governance
is related to Information Assurance Enabled Products
is related to Disclosure of Vulnerabilities
is related to Technical Documentation Artifacts
is related to Product-Specific Risk Assessment Artifacts
is related to Product Tampering and Counterfeiting (PTC)
is related to Customized Development of Critical Components
is related to DevSecOps
is related to Minimum Viable Product (MVP) Security Requirements
is related to Insecure Ports, Protocols & Services
is related to Input Data Validation
is related to Minimizing Attack Surfaces
is related to Product Testing & Reviews
is related to Security, Compliance & Resilience Representatives For Product Changes
is related to Secure Development Environments
is related to Library Privileges
is related to Security, Compliance & Resilience Testing Throughout Development
is related to Static Code Analysis
is related to Use of Live Data
is related to Developer Screening
is related to Developer Configuration Management
is related to Developer Threat Analysis & Flaw Remediation
is related to Developer-Provided Training
is related to Software / Firmware Integrity Verification
is related to Hardware Integrity Verification
is related to Bills of Material (BOMs)
is related to Third-Party Services
is related to Third-Party Processing, Storage and Service Locations
is related to Behavioral Baselining
is related to Predictive Cyber Analytics
is related to Vulnerability & Patch Management Program (VPMP)
is related to Vulnerability Exploitation Analysis
is related to Vulnerability Ranking
is related to Centralized Management of Flaw Remediation Processes
is related to Continuous Vulnerability Remediation Activities
is related to Known Exploited Vulnerabilities (KEV) Mitigations
is related to Web Security
is related to Web Security Standard
is related to Web Application Framework
is related to Client-Facing Web Services
is related to Strong Customer Authentication (SCA)
is related to Web Application Input Validation & Sanitization
is related to Secure Web Traffic
is related to Web Application Output Encoding
is related to Web Browser Security
is related to Website Change Detection
is related to Centralized Management of Security, Compliance & Resilience Controls
is related to Standardized Terminology
is related to Trustworthy AI & Autonomous Technologies
is related to Novel Risk Assessment Methods & Technologies
is related to Fine Tuning Risk Mitigation
is related to Responsibility To Supersede, Deactivate and/or Disengage AI & Autonomous Technologies
is related to AI & Autonomous Technologies Output Marking
is related to Human Moderation of AI & Autonomous Technologies-Generated Content
is related to AI & Autonomous Technologies Intellectual Property Infringement Protections
is related to Data Source Integrity
is related to Data Source Lineage & Origin Disclosure
is related to Digital Content Modification Logging
is related to Training Data Source & Integrity
is related to Prohibit Training
is related to Detrimental or Unfavorable Treatment
is related to Risk and Criminal Profiling
is related to Populating Facial Recognition Databases
is related to Emotion Inference
is related to Biometric Categorization
is related to AI & Autonomous Technologies Transparency
is related to AI & Autonomous Technologies Implementation Documentation
is related to AI & Autonomous Technologies Human Domain Knowledge Reliance
is related to AI & Autonomous Technologies Capabilities Testing
is related to Real-World Testing
is related to Documenting Testing Guidance
is related to AI TEVV Empirically Validated Methods
is related to AI TEVV Benchmarking Content Provenance
is related to AI TEVV Model Collapse Mitigations
is related to Robust Stakeholder Engagement for AI & Autonomous Technologies
is related to AI & Autonomous Technologies Stakeholder Feedback Integration
is related to AI & Autonomous Technologies Ongoing Assessments
is related to AI & Autonomous Technologies End User Feedback
is related to AI & Autonomous Technologies Incident & Error Reporting
is related to AI & Autonomous Technologies Deployment
is related to AI & Autonomous Technologies Human Oversight
is related to AI & Autonomous Technologies Oversight Measures
is related to AI & Autonomous Technologies Separate Verification
is related to AI & Autonomous Technologies Oversight Functions Competency
is related to AI & Autonomous Technologies Data Relevance
is related to AI & Autonomous Technologies Irregularity Reporting
is related to AI & Autonomous Technologies Use Notification To Employees
is related to AI & Autonomous Technologies Use Notification To Users
is related to Pre-Trained AI & Autonomous Technologies Models
is related to AI & Autonomous Technologies Event Logging
is related to Serious Incident Reporting For AI & Autonomous Technologies
is related to Serious Incident Root Cause Analysis (RCA) For AI & Autonomous Technologies
is related to Anomaly Detection & Human Oversight
is related to Human-in-the-Loop & Escalation
is related to Emergent Behavior & Collusion Protections
is related to Multi-Agent Trust & Communication Validation
is related to AI & Autonomous Technologies System Value Chain
is related to AI & Autonomous Technologies System Value Chain Fallbacks
is related to AI Model Resilience
is related to AI Model Pollution
is related to Cascading Hallucination Defense
is related to Resource Exhaustion & Denial of Service (DoS) Resilience
is related to AI Agent Governance
is related to Infrastructure Hardening & Isolation
is related to AI Agent Limitations
is related to Tool & Application Programming Interface (API) Invocation Controls
is related to AI Agent Orchestration Protocol Safeguards
is related to AI Agent Data Pipeline & Input Integrity
is related to AI Agent Privileged Role & Delegation Boundaries
is related to AI Agent Data Access Restrictions
is related to AI Agent Data Extraction
is related to AI Agent Identity & Impersonation Defense
is related to AI Agent Logic Integrity
is related to Sandboxing AI Agents
is related to AI Agent Prompt Injection Defense
is related to AI Agent Kill Switch / User Control
is related to AI Agent Adversarial & Red Team Testing
is related to AI Agent Self-Modification Controls
is related to Purging AI Agent Data
is related to AI Agent Delegation and Chaining Control
is related to AI Agent Behavioral Drift Detection
is related to AI Agent Action Authentication & Authorization
is related to AI Agent Transparency & Audit
is related to AI Agent Explainability
is related to AI Agent Ethics, Fairness & Bias Detection
is related to AI Agent Output Integrity & Verification
is related to AI Agent Resource Limiting
is related to Agentic Output Traceability & Repudiation
is related to AI Agent Logging
is related to AI Agent Session Management
is related to Human-in-the-Loop Workload & Manipulation
is related to Robotic Process Automation (RPA)
is related to Business Process Task Enumeration
is related to Automated Network Asset Discovery
is related to High-Risk Technology Assets, Applications and/or Services (TAAS) Categorization
is related to Asset Attributes
is related to Management Approval For External Media Transfer
is related to Temporary Asset Storage In Automobiles
is related to Use of Third-Party Devices
is related to Logical Tampering Protection
is related to Telecommunications Equipment
is related to Re-Imaging Devices After Travel
is related to Jump Server
is related to Database Management System (DBMS)
is related to Decommissioning
is related to Technology Lifecycle Management
is related to Removal of Previous Versions
is related to Technical Debt Reviews
is related to Unsupported Technology Assets, Applications and/or Services (TAAS)
is related to Alternate Sources for Continued Support
is related to Predictable Failure Analysis
is related to Operational Resilience Capabilities
is related to Business Continuity & Disaster Recovery (BC/DR) Plans
is related to Alternate Communications Channels
is related to Separation from Primary Storage Site
is related to Primary Storage Site Accessibility
is related to Separation from Primary Processing Site
is related to Preparation for Use
is related to Inability to Return to Primary Site
is related to Separation of Primary / Alternate Providers
is related to Technology Assets, Applications and/or Services (TAAS) Recovery & Reconstitution
is related to Redundant Secondary System
is related to Resilient Data Backup Architecture
is related to Data Backups
is related to Transfer to Alternate Storage Site
is related to Separate Storage for Critical Information
is related to Cryptographic Protection
is related to Redundant Copies of Business-Critical Data
is related to Data Archiving
is related to Data Backup Access
is related to Data Backup & Restoration Hardware Protection
is related to Test Restoration Using Sampling
is related to Data Backup Modification and/or Destruction
is related to Dual Authorization For Sensitive / Regulated Backup Media Destruction
is related to Resource Priority
is related to Resiliency Planning For Alternate Sites
is related to Access Restriction For Change
is related to Control Functionality Verification
is related to Emergency Changes
is related to Documenting Emergency Changes
is related to Automated Security Response
is related to Unauthorized Software Installation Alerts
is related to Signed Components
is related to Authorized Individuals For Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Sensitive / Regulated Data On Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Ability To Demonstrate Conformity
is related to Assessment Team Subject Matter Expertise
is related to Investigation Access Restrictions
is related to Government Surveillance
is related to Potential Human Rights Abuses
is related to Statement of Applicability (SOA)
is related to Work Products
is related to Defensible Evidence of Due Diligence
is related to Defensible Evidence of Due Care
is related to AI & Autonomous Technologies Registration
is related to Control Assurance Automation (CAA) Evidence Integrity & Provenance
is related to Baseline Tailoring
is related to Session Lock
is related to Pattern-Hiding Displays
is related to Session Termination
is related to User-Initiated Logouts / Message Displays
is related to Non-Console Administrative Access
is related to Wireless Access Authentication & Encryption
is related to Bluetooth & Wireless Devices
is related to Infrared Communications
is related to Microphones & Web Cameras
is related to Multi-Function Devices (MFD)
is related to Radio Frequency Identification (RFID) Security
is related to Contactless Access Control Systems
is related to Thin Nodes
is related to Video Teleconference (VTC) Security
is related to Voice Over Internet Protocol (VoIP) Security
is related to Disable Wireless Networking
is related to Physically Disable or Remove Capabilities
is related to Integrity Assurance & Enforcement (IAE)
is related to Network Device Configuration File Synchronization
is related to Software Usage Restrictions
is related to Restrict Roles Permitted To Install Software
is related to Open Source Software
is related to Prevent Unauthorized Software Execution
is related to Explicitly Allow / Deny Applications
is related to Unsupported Internet Browsers & Email Clients
is related to Zero-Touch Provisioning (ZTP)
is related to Production Software Repository
is related to Third-Party Libraries
is related to Software Repository Protections
is related to Software Development Repository
is related to Embedded Sensor Capability
is related to Embedded Sensor Data Use Restrictions
is related to Embedded Sensor Data Collection Minimization
is related to Embedded Sensor Configuration Verification
is related to Refresh from Trusted Sources
is related to Hypervisor Access
is related to Restrict Access To Security Functions
is related to Host-Based Security Function Isolation
is related to Control Assurance Automation (CAA) Change Control
is related to Control Assurance Automation (CAA) Separation of Duties
is related to Cryptographic Protection of Event Logs & Security-Relevant Telemetry
is related to Dual Authorization for Event Log & Security-Relevant Telemetry Movement
is related to Unusual Transactions
is related to De-Militarized Zone (DMZ) Monitoring
is related to Permitted Monitoring Actions
is related to Non-Repudiation
is related to Identity Binding
is related to Alternate Physical Protection
is related to Pre/Post Transmission Handling
is related to Encrypting Storage Media
is related to Encrypting Offline Storage
is related to Symmetric Keys
is related to Asymmetric Keys
is related to Cryptographic Key Loss or Change
is related to Control & Distribution of Cryptographic Keys
is related to Assigned Cryptographic Key Owners
is related to Third-Party Cryptographic Keys
is related to External System Cryptographic Key Control
is related to Cryptographic Hash
is related to Export-Controlled Cryptography
is related to Data Reclassification
is related to Sensitive / Regulated Data Sharing Decisions
is related to Disclosure of Sensitive / Regulated Data
is related to Controlled Release of Sensitive / Regulated Data
is related to Sensitive / Regulated Data Release Sanitization
is related to Automated Marking
is related to Making Sensitive / Regulated Data Unreadable In Storage
is related to Media Transportation Custodians
is related to Encrypting Data Outside of Controlled Areas
is related to Dual Authorization for Sensitive / Regulated Data Destruction
is related to First Time Use Sanitization
is related to Digital Media Use Restrictions
is related to Prohibit Portable Storage Devices Use Without Owner
is related to Non-Organizationally Owned Technology Assets, Applications and/or Services (TAAS)
is related to Publicly Accessible Content
is related to Data Mining Protection
is related to Minimize Sensitive / Regulated Data Exposure
is related to Archived Data Set Retention
is related to Archiving Sensitive / Regulated Data
is related to Mobile Device Data Retention Limitations
is related to Limit Sensitive / Regulated Data In Testing, Training & Research
is related to Geolocation Requirements for Processing, Storage and Service Locations
is related to Data Localization
is related to External Transfer of Sensitive / Regulated Data
is related to Data Quality Operations
is related to Data Tags
is related to De-Identification (Anonymization)
is related to Automated De-Identification of Sensitive / Regulated Data
is related to De-Identify Dataset Upon Collection
is related to Removal, Masking, Encryption, Hashing or Replacement of Direct Identifiers
is related to Statistical Disclosure Control
is related to Motivated Intruder
is related to Differential Privacy
is related to Cybersecurity & Data Protection Attributes
is related to Dynamic Attribute Association
is related to Attribute Value Changes By Authorized Individuals
is related to Maintenance of Attribute Associations By System
is related to Association of Attributes By Authorized Individuals
is related to Attribute Displays for Output Devices
is related to Data Subject Attribute Associations
is related to Consistent Attribute Interpretation
is related to Identity Association Techniques & Technologies
is related to Attribute Reassignment
is related to Attribute Configuration By Authorized Individuals
is related to Code Names
is related to Data Rights Management (DRM)
is related to Data Loss Prevention (DLP)
is related to Control Assurance Automation (CAA) Aggregated Telemetry
is related to Internet of Things (IOT)
is related to Prevent Alterations
is related to Embedded Technology Maintenance
is related to Message Queuing Telemetry Transport (MQTT) Security
is related to Remote Management of Embedded Technologies
is related to Certificate-Based Authentication
is related to Chip-To-Cloud Security
is related to Real-Time Operating System (RTOS) Security
is related to Safe Operations
is related to Proximity Sensor
is related to Safety Instrumented System (SIS)
is related to Safety Instrumented Function (SIF)
is related to Binary or Machine-Executable Code
is related to Extended Detection & Response (XDR)
is related to Boot Process Integrity
is related to Protection of Boot Firmware
is related to Security-Minded Dress Code
is related to Post-Employment Requirements Awareness
is related to Post-Employment Requirements Notification
is related to Preventative Access Restriction
is related to Asset Collection
is related to High-Risk Terminations
is related to Identify Critical Skills & Gaps
is related to Remediate Identified Skills Deficiencies
is related to Identify Vital Security, Compliance & Resilience Staff
is related to Establish Redundancy for Vital Security, Compliance & Resilience Staff
is related to Perform Succession Planning
is related to Identifying Authorized Work Locations
is related to Communicating Authorized Work Locations
is related to Reporting Suspicious Activities
is related to Identity Evidence Validation & Verification
is related to In-Person Validation & Verification
is related to Address Confirmation
is related to Automated System Account Management (Directory Services)
is related to Authorized Accounts
is related to Disable Inactive Accounts
is related to Account Disabling for High Risk Individuals
is related to Automated Audit Actions
is related to Account Separation Between Infrastructure Environments
is related to Multiple System Accounts
is related to Removal of Temporary / Emergency Accounts
is related to Dynamic Management
is related to Cross-Organization Management
is related to Privileged Account Identifiers
is related to Pairwise Pseudonymous Identifiers (PPID)
is related to Events Requiring Authenticator Change
is related to Protection of Authenticators
is related to No Embedded Unencrypted Static Authenticators
is related to Default Authenticators
is related to Expiration of Cached Authenticators
is related to Biometric Authentication
is related to Database Access
is related to Revocation of Access Authorizations
is related to Prohibit Non-Privileged Users from Executing Privileged Functions
is related to Authorize Access to Security Functions
is related to Non-Privileged Access for Non-Security Functions
is related to Network Access to Privileged Commands
is related to Privilege Levels for Code Execution
is related to Permitted Actions Without Identification or Authorization
is related to Identification & Authentication for Organizational Users
is related to Out-of-Band Authentication (OOBA)
is related to Acceptance of PIV Credentials
is related to Identification & Authentication for Non-Organizational Users
is related to Acceptance of Third-Party Credentials
is related to Acceptance of External Authenticators
is related to Disassociability
is related to Acceptance of PIV Credentials from Other Organizations
is related to Use of FICAM-Issued Profiles
is related to Identification & Authentication for Devices
is related to Device Attestation
is related to Device Authorization Enforcement
is related to Access Control For Mobile Devices
is related to Identification & Authentication for Third-Party Technology Assets, Applications and/or Services (TAAS)
is related to Sharing Identification & Authentication Information
is related to Privileged Access by Non-Organizational Users
is related to Multi-Factor Authentication (MFA)
is related to Replay-Resistant Multi-Factor Authentication (MFA)
is related to Phishing-Resistant Multi-Factor Authentication (MFA)
is related to Out-of-Band (OOB) Multi-Factor Authentication (MFA)
is related to Alternative Multi-Factor Authentication (MFA)
is related to Multi-Factor Authentication (MFA) For Network Access to Privileged Accounts
is related to Multi-Factor Authentication (MFA) For Network Access to Non-Privileged Accounts
is related to Multi-Factor Authentication (MFA) For Local Access to Privileged Accounts
is related to Cryptographic Module Authentication
is related to Hardware Security Modules (HSM)
is related to Single Sign-On (SSO) Transparent Authentication
is related to Adaptive Identification & Authentication
is related to Continuous Authentication
is related to Re-Authentication
is related to Mutual Authentication (MA)
is related to Federated Credential Management
is related to Invalidate Session Identifiers at Logout
is related to Unique System-Generated Session Identifiers
is related to Software Defined Storage (SDS) Data Access Control
is related to Sensitive / Regulated Data Access Enforcement
is related to Sensitive / Regulated Data Actions
is related to Compliance As Code (CAC) Least Privileges
is related to Compliance As Code (CAC) Credential Lifecycle Management
is related to Compliance As Code (CAC) Credentials Management
is related to Incident Response Capabilities Testing Coordination with Related Plans
is related to Licensed Forensic Investigators
is related to Cryptographic Incident Response (Emergency Algorithm Transition)
is related to Plan / Coordinate with Other Organizational Entities
is related to Specialized Assessments
is related to Adequate Security for Sensitive / Regulated Data In Support of Contracts
is related to Threat Analysis & Flaw Remediation During Development
is related to Technical Verification
is related to Security Authorization
is related to Control Assurance Automation (CAA) Automation
is related to Automated Maintenance Activities
is related to Automated Support For Predictive Maintenance
is related to Maintenance Tools
is related to Inspect Tools
is related to Inspect Media
is related to Restrict Tool Usage
is related to Remote Maintenance
is related to Remote Maintenance Notifications
is related to Remote Maintenance Pre-Approval
is related to Remote Maintenance Disconnect Verification
is related to Remote Maintenance Cryptographic Protection
is related to Remote Maintenance Comparable Security & Sanitization
is related to Separation of Maintenance Sessions
is related to Authorized Maintenance Personnel
is related to Maintenance Personnel Without Appropriate Access
is related to Non-System Related Maintenance
is related to Maintain Configuration Control During Maintenance
is related to Field Maintenance
is related to Off-Site Maintenance
is related to Internet Address Denylisting
is related to Certificate Denylisting
is related to Content Disarm and Reconstruction (CDR)
is related to Network Processing Rules For Personal Data (PD)
is related to Split Tunneling
is related to Architecture & Provisioning for Name / Address Resolution Service
is related to Secure Name / Address Resolution Service (Recursive or Caching Resolver)
is related to Domain Registrar Security
is related to Denial of Service (DoS) Protection
is related to Guest Networks
is related to Intranets
is related to Wireless Networking
is related to Wireless Networking Authentication & Encryption
is related to Wireless Boundaries
is related to Remote Access
is related to Remote Access Pathways
is related to Expeditious Remote Access Disconnect / Disable Capability
is related to Remote Access Endpoint Security Validation
is related to Remote Access Cryptographic Protections
is related to Remote Access Privileged Commands & Sensitive Data Access
is related to Work From Anywhere (WFA) - Telecommuting Security
is related to Network Connection Termination
is related to Session Integrity
is related to Third-Party Remote Access Governance
is related to Network Intrusion Detection / Prevention Systems (NIDS / NIPS)
is related to Wireless Intrusion Detection / Prevention Systems (WIDS / WIPS) Deployment
is related to Demilitarized Zones (DMZ)
is related to Web Application Firewall (WAF)
is related to Application Programming Interface (API) Security
is related to API Gateway
is related to Safeguarding Data Over Open Networks
is related to Wireless Link Protection
is related to Email Domain Reputation Protections
is related to Domain-Based Message Authentication Reporting and Conformance (DMARC)
is related to Sender Policy Framework (SPF)
is related to Authenticated Received Chain (ARC)
is related to Sender Denylisting
is related to End-User Messaging Technologies
is related to Electronic Messaging
is related to Phishing & Spam Protection
is related to Email Content Protections
is related to Adaptive Email Protections
is related to Email Labeling
is related to User Digital Signatures for Outgoing Email
is related to Encryption for Outgoing Email
is related to User Threat Reporting
is related to Cross Domain Solution (CDS)
is related to Separate Subnet for Connecting to Different Security Domains
is related to Cross Domain Authentication
is related to Data Type Identifiers
is related to Decomposition Into Policy-Related Subcomponents
is related to Cross Domain Content Transfer
is related to Isolation of System Components
is related to Dynamic Isolation & Segregation (Sandboxing)
is related to Host Containment
is related to Resource Containment
is related to Conceal / Randomize Communications
is related to Object Security Attributes
is related to Embedded Data Types
is related to Metadata
is related to Metadata Validation
is related to Side Channel Attack Prevention
is related to Alternate Work Site
is related to Physical Access Device Inventories
is related to Physical Access Logs
is related to On-Site Client Segregation
is related to Visitor Control
is related to Distinguish Visitors from On-Site Personnel
is related to Identification Requirement
is related to Restrict Unescorted Access
is related to Automated Records Management & Review
is related to Minimize Visitor Personal Data (PD)
is related to Visitor Access Revocation
is related to Temporary Storage
is related to Transmission Medium Security
is related to Supporting Utilities
is related to Automatic Voltage Controls
is related to Emergency Shutoff
is related to Emergency Power
is related to Emergency Lighting
is related to Water Damage Protection
is related to Automation Support for Water Damage Protection
is related to Redundant Cabling
is related to Fire Protection
is related to Fire Suppression Devices
is related to Temperature & Humidity Controls Monitoring
is related to Information Leakage Due To Electromagnetic Signals Emanations
is related to Electromagnetic Pulse (EMP) Protection
is related to Personal Data Process Manager (PDPM)
is related to Data Fiduciary
is related to Privacy-Aware Design
is related to Updating & Correcting Personal Data (PD)
is related to Reasonable Data Privacy Practices
is related to Security of Personal Data (PD)
is related to Alternative Means To Deliver Privacy Notice
is related to Notice of Right To Limit
is related to Purpose Compatibility
is related to Choice Architecture
is related to Symmetry In Choice
is related to Choice Architecture Testing
is related to Active Participation For Consent By Data Subjects
is related to Data Subject Right To Opt-Out
is related to Opt-Out Links
is related to Alternative Opt-Out Link
is related to Global Privacy Control (GPC)
is related to Data Subject Opt-In Consent
is related to Parent or Guardian Opt-In Consent For Minors
is related to Authorized Agent
is related to Continued Use of Personal Data (PD)
is related to Cease Processing, Storing and/or Sharing Personal Data (PD)
is related to Personal Data (PD) Formats
is related to Temporary Files Containing Personal Data (PD)
is related to Personal Data (PD) Collection Methods
is related to Data Brokers
is related to Automated Decision-Making Technology (ADMT) For Data Subject Actions
is related to Automated Decision-Making Technology (ADMT) Use Notification
is related to Automated Decision-Making Technology (ADMT) Opt-Out Consent
is related to Automated Decision-Making Technology (ADMT) Transparency
is related to Data Subject Communications
is related to Communicating Processing Changes
is related to Data Subject Communications Documentation
is related to Data Subject Communications Metrics
is related to Data Subject Communications Disclosure
is related to Data Subject Authentication
is related to Enabling Data Subjects To Update Personal Data (PD)
is related to Manage Organizational Knowledge
is related to Quantum Security Policy
is related to Quantum Risk Governance
is related to Cryptographic Agility Risk Assessment (CARA)
is related to Cryptographic Exception Register
is related to Compensating Controls for Quantum-Vulnerable Systems
is related to Crypto Agility Maturity Assessment
is related to Harvest Now, Decrypt Later (HNDL) Mitigation
is related to Post-Quantum Cryptography Agility Plan (PQCAP)
is related to Post-Quantum Cryptography (PQC) Transition Planning & Hybrid Mode Support
is related to Post-Quantum Cryptography (PQC) Migration Progress Oversight
is related to Post-Quantum Cryptography (PQC) Supply Chain Visibility
is related to Post-Quantum Cryptography (PQC) Supply Chain Flow-Down Requirements
is related to Post-Quantum Cryptography (PQC) Discovery & Visibility
is related to Post-Quantum Cryptography Exposure
is related to Quantum Threat Intelligence Monitoring
is related to Collaboration & Information Sharing
is related to Crypto-Agility Architecture
is related to Entropy Source & Random Bit Generation
is related to Stateful Hash-Based Signatures for Firmware & Code Signing
is related to Approved Post-Quantum Cryptography (PQC) Algorithm Use
is related to Post-Quantum Cryptography (PQC) Validation Requirements
is related to Deprecated Cryptographic Algorithms
is related to Post-Quantum Cryptography (PQC) Key Management
is related to Quantum-Safe Public Key Infrastructure (PKI) Transition
is related to Algorithm Negotiation Integrity
is related to Hybrid / Composite Cryptography
is related to Cryptographic Application Programming Interface (API) Abstraction
is related to Post-Quantum Cryptography (PQC) Implementation Validation & Interoperability Testing
is related to Risk Management Resourcing
is related to Risk Catalog
is related to Risk Assessment Stakeholder Involvement
is related to Risk Treatment Options
is related to Risk Treatment Plan (RTP)
is related to AI & Autonomous Technologies Supply Chain Impacts
is related to Non-Persistent Information
is related to Virtualization Techniques
is related to Virtual Machine Images
is related to Concealment & Misdirection
is related to Randomness
is related to Change Processing & Storage Locations
is related to Distributed Processing & Storage
is related to Non-Modifiable Executable Programs
is related to Secure Log-On Procedures (Trusted Path)
is related to System Use Notification (Logon Banner)
is related to Standardized Microsoft Windows Banner
is related to Truncated Banner
is related to Previous Logon Notification
is related to Clock Synchronization
is related to Application Container
is related to Privileged Environments
is related to Security Operations Center (SOC)
is related to Security Orchestration, Automation, and Response (SOAR)
is related to Simulated Cyber Attack Scenario Training
is related to Role-Based Security, Compliance & Resilience Training
is related to Sensitive / Regulated Data Storage, Handling & Processing
is related to Privileged User Training
is related to Vendor-Specific Security, Compliance & Resilience Training
is related to Social Engineering & Mining
is related to Suspicious Communications & Anomalous System Behavior
is related to Anti-Counterfeit Training
is related to Quantum Security Awareness
is related to Practical Security Training Exercises
is related to Security, Compliance & Resilience Training Records
is related to Secure Settings By Default
is related to Criticality Analysis During Development
is related to Software Design Root Cause Analysis (RCA)
is related to Ongoing Product Security Support
is related to Integrity Mechanisms for Software / Firmware Updates
is related to Software Release Integrity Verification
is related to Reporting Exploitable Vulnerabilities
is related to Functional Properties
is related to Administrator Documentation
is related to Products With Digital Elements
is related to Commercial Off-The-Shelf (COTS) Security Solutions
is related to Error Handling
is related to Designated Roles To View Error Messages
is related to Pre-Established Secure Configurations
is related to Malware Testing Prior to Release
is related to Separation of Development, Testing and Operational Environments
is related to Secure Migration Practices
is related to Access to Program Source Code
is related to Approved Code
is related to Archiving Software Releases
is related to Software Escrow
is related to Test Data Integrity
is related to Developer Knowledge & Skills Register
is related to Requisite Developer Training
is related to Outsourcing Non-Essential Functions or Services
is related to Supplier Diversity
is related to Adequate Supply
is related to Third-Party Authentication Practices
is related to Contract Flow-Down Requirements
is related to Provider Contingency Plan
is related to Break Clauses
is related to Foreign Ownership, Control or Influence (FOCI)
is related to Ownership Change Provisions
is related to Technology Assets, Applications, Services and Data (TAASD) Disposition
is related to Third-Party Access Revocation
is related to Dynamic Threat Awareness
is related to Threat Catalog
is related to Threat Analysis
is related to Attack Surface Scope
is related to Vulnerability Remediation Process
is related to Time To Remediate / Benchmarks For Corrective Action
is related to Software & Firmware Patching
is related to Automated Software & Firmware Updates
is related to Software Patch Integrity
is related to Automated Remediation Status
is related to Deferred Patching Decisions
is related to Pre-Deployment Patch Testing
is related to Out-of-Cycle Patching
is related to Update Vulnerability Scanning Tools
is related to Breadth / Depth of Coverage For Vulnerability Scanning
is related to Privileged Access For Vulnerability Scanning Tools
is related to Acceptable Discoverable Information
is related to Unauthorized Code On Web Pages