New version: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 1592 new, 0 changed, 0 removed, 1591 links
- Document: Secure Controls Framework (SCF) (https://raw.githubusercontent.com/securecontrolsframework/securecontrolsframework/main/secure-controls-framework-scf-2026-3.xlsx)
- Version: 2026.3-86f09c716a
- Project: SCF
- Import: #650, 20.10.2026 21:17, scf
The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes).
Review: 0 open, 3183 applied, 0 rejected.
New sections (1592)
- SCF Assessment Objectives [applied]
SCF_AO - GOV-01 Security, Compliance & Resilience Governance Policy – Assessment Procedure [applied]
GOV-01_AO - GOV-02 Security, Compliance & Resilience Program (SCRP) – Assessment Procedure [applied]
GOV-02_AO - GOV-03 Centralized Management of Security, Compliance & Resilience Controls – Assessment Procedure [applied]
GOV-03_AO - GOV-03.1 Secure Practices Alignment Justification – Assessment Procedure [applied]
GOV-03.1_AO - GOV-03.2 Standardized Terminology – Assessment Procedure [applied]
GOV-03.2_AO - GOV-03.3 Control Objectives – Assessment Procedure [applied]
GOV-03.3_AO - GOV-03.4 Assessment Objectives (AO) – Assessment Procedure [applied]
GOV-03.4_AO - GOV-04 Publishing Security, Compliance & Resilience Documentation – Assessment Procedure [applied]
GOV-04_AO - GOV-04.1 Periodic Review & Update of Security, Compliance & Resilience Program – Assessment Procedure [applied]
GOV-04.1_AO - GOV-04.2 Exception Management – Assessment Procedure [applied]
GOV-04.2_AO - GOV-04.3 Periodic Review of Exceptions – Assessment Procedure [applied]
GOV-04.3_AO - GOV-05 Assigned Security, Compliance & Resilience Responsibilities – Assessment Procedure [applied]
GOV-05_AO - GOV-05.1 Stakeholder Accountability Structure – Assessment Procedure [applied]
GOV-05.1_AO - GOV-05.2 Authoritative Chain of Command – Assessment Procedure [applied]
GOV-05.2_AO - GOV-06 Defining Business Context & Mission – Assessment Procedure [applied]
GOV-06_AO - GOV-07 Materiality Determination – Assessment Procedure [applied]
GOV-07_AO - GOV-08 High Value Assets (HVAs) – Assessment Procedure [applied]
GOV-08_AO - GOV-09 Steering Committee & Program Oversight – Assessment Procedure [applied]
GOV-09_AO - GOV-09.1 Status Reporting To Governing Body – Assessment Procedure [applied]
GOV-09.1_AO - GOV-10 Business As Usual (BAU) Security, Compliance & Resilience Practices – Assessment Procedure [applied]
GOV-10_AO - GOV-11 Operationalizing Security, Compliance & Resilience Capabilities – Assessment Procedure [applied]
GOV-11_AO - GOV-11.1 Select Controls – Assessment Procedure [applied]
GOV-11.1_AO - GOV-11.2 Implement Controls – Assessment Procedure [applied]
GOV-11.2_AO - GOV-11.3 Assess Controls – Assessment Procedure [applied]
GOV-11.3_AO - GOV-11.4 Authorize Technology Assets, Applications and/or Services (TAAS) – Assessment Procedure [applied]
GOV-11.4_AO - GOV-11.5 Monitor Controls – Assessment Procedure [applied]
GOV-11.5_AO - GOV-12 Measures of Performance – Assessment Procedure [applied]
GOV-12_AO - GOV-12.1 Key Performance Indicators (KPIs) – Assessment Procedure [applied]
GOV-12.1_AO - GOV-12.2 Key Risk Indicators (KRIs) – Assessment Procedure [applied]
GOV-12.2_AO - GOV-13 Forced Technology Transfer (FTT) – Assessment Procedure [applied]
GOV-13_AO - GOV-14 State-Sponsored Espionage – Assessment Procedure [applied]
GOV-14_AO - GOV-15 Contacts With Authorities – Assessment Procedure [applied]
GOV-15_AO - GOV-16 Contacts With Groups & Associations – Assessment Procedure [applied]
GOV-16_AO - GOV-17 Quality Management System (QMS) – Assessment Procedure [applied]
GOV-17_AO - GOV-18 Assurance – Assessment Procedure [applied]
GOV-18_AO - GOV-19 Mergers, Acquisitions & Divestitures (MA&D) – Assessment Procedure [applied]
GOV-19_AO - GOV-19.1 Virtual Data Room (VDR) – Assessment Procedure [applied]
GOV-19.1_AO - AAT-01 Artificial Intelligence & Autonomous Technologies Policy – Assessment Procedure [applied]
AAT-01_AO - AAT-02 Artificial Intelligence (AI) & Autonomous Technologies Governance – Assessment Procedure [applied]
AAT-02_AO - AAT-03 AI & Autonomous Technologies Mission and Goals Definition – Assessment Procedure [applied]
AAT-03_AO - AAT-03.1 AI & Autonomous Technologies Value Sustainment – Assessment Procedure [applied]
AAT-03.1_AO - AAT-04 AI & Autonomous Technologies Context Definition – Assessment Procedure [applied]
AAT-04_AO - AAT-04.1 AI & Autonomous Technologies-Related Legal Requirements Identification – Assessment Procedure [applied]
AAT-04.1_AO - AAT-05 Assigned Responsibilities for AI & Autonomous Technologies – Assessment Procedure [applied]
AAT-05_AO - AAT-06 Trustworthy AI & Autonomous Technologies – Assessment Procedure [applied]
AAT-06_AO - AAT-06.1 AI & Autonomous Technologies Continuous Improvements – Assessment Procedure [applied]
AAT-06.1_AO - AAT-07 Situational Awareness of AI & Autonomous Technologies In Use – Assessment Procedure [applied]
AAT-07_AO - AAT-07.1 AI Model & Agent Inventory & Lifecycle Management – Assessment Procedure [applied]
AAT-07.1_AO - AAT-07.2 Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization – Assessment Procedure [applied]
AAT-07.2_AO - AAT-08 AI & Autonomous Technologies Internal Controls – Assessment Procedure [applied]
AAT-08_AO - AAT-08.1 Adequate Protections For AI & Autonomous Technologies – Assessment Procedure [applied]
AAT-08.1_AO - AAT-09 AI & Autonomous Technologies Impact Assessment – Assessment Procedure [applied]
AAT-09_AO - AAT-10 AI & Autonomous Technologies Risk Profiling – Assessment Procedure [applied]
AAT-10_AO - AAT-10.1 AI & Autonomous Technologies Risk Mapping – Assessment Procedure [applied]
AAT-10.1_AO - AAT-11 AI & Autonomous Technologies Risk Management Decisions – Assessment Procedure [applied]
AAT-11_AO - AAT-11.1 AI & Autonomous Technologies Likelihood & Impact Risk Analysis – Assessment Procedure [applied]
AAT-11.1_AO - AAT-11.2 AI & Autonomous Technologies High Risk Designations – Assessment Procedure [applied]
AAT-11.2_AO - AAT-12 AI Threat Modeling & Risk Assessment – Assessment Procedure [applied]
AAT-12_AO - AAT-12.1 Novel Risk Assessment Methods & Technologies – Assessment Procedure [applied]
AAT-12.1_AO - AAT-13 AI & Autonomous Technologies Risk Response – Assessment Procedure [applied]
AAT-13_AO - AAT-13.1 AI & Autonomous Technologies Risk Tracking Approaches – Assessment Procedure [applied]
AAT-13.1_AO - AAT-13.2 Fine Tuning Risk Mitigation – Assessment Procedure [applied]
AAT-13.2_AO - AAT-13.3 Responsibility To Supersede, Deactivate and/or Disengage AI & Autonomous Technologies – Assessment Procedure [applied]
AAT-13.3_AO - AAT-14 AI & Autonomous Technologies Business Case – Assessment Procedure [applied]
AAT-14_AO - AAT-14.1 AI & Autonomous Technologies Potential Benefits Analysis – Assessment Procedure [applied]
AAT-14.1_AO - AAT-14.2 AI & Autonomous Technologies Potential Costs Analysis – Assessment Procedure [applied]
AAT-14.2_AO - AAT-14.3 AI & Autonomous Technologies Targeted Application Scope – Assessment Procedure [applied]
AAT-14.3_AO - AAT-14.4 AI & Autonomous Technologies Cost / Benefit Mapping – Assessment Procedure [applied]
AAT-14.4_AO - AAT-15 Model & AI Agent Documentation – Assessment Procedure [applied]
AAT-15_AO - AAT-16 AI & Autonomous Technologies Output Marking – Assessment Procedure [applied]
AAT-16_AO - AAT-17 Release Owner Gate (ROG) For AI-Augmented Content – Assessment Procedure [applied]
AAT-17_AO - AAT-17.1 AI & Autonomous Technologies Output Filtering – Assessment Procedure [applied]
AAT-17.1_AO - AAT-17.2 Human Moderation of AI & Autonomous Technologies-Generated Content – Assessment Procedure [applied]
AAT-17.2_AO - AAT-18 AI & Autonomous Technologies Intellectual Property Infringement Protections – Assessment Procedure [applied]
AAT-18_AO - AAT-18.1 Data Source Identification – Assessment Procedure [applied]
AAT-18.1_AO - AAT-18.2 Data Source Integrity – Assessment Procedure [applied]
AAT-18.2_AO - AAT-18.3 Data Source Lineage & Origin Disclosure – Assessment Procedure [applied]
AAT-18.3_AO - AAT-18.4 Digital Content Modification Logging – Assessment Procedure [applied]
AAT-18.4_AO - AAT-18.5 Training Data Source & Integrity – Assessment Procedure [applied]
AAT-18.5_AO - AAT-18.6 Prohibit Training – Assessment Procedure [applied]
AAT-18.6_AO - AAT-19 AI & Autonomous Technologies Harm Prevention – Assessment Procedure [applied]
AAT-19_AO - AAT-19.1 AI & Autonomous Technologies Human Subject Protections – Assessment Procedure [applied]
AAT-19.1_AO - AAT-19.2 AI & Autonomous Technologies Environmental Impact & Sustainability – Assessment Procedure [applied]
AAT-19.2_AO - AAT-19.3 Previously Unknown AI & Autonomous Technologies Threats & Risks – Assessment Procedure [applied]
AAT-19.3_AO - AAT-20 AI & Autonomous Technologies Conformity – Assessment Procedure [applied]
AAT-20_AO - AAT-20.1 Manipulative or Deceptive Techniques – Assessment Procedure [applied]
AAT-20.1_AO - AAT-20.2 Materially Distorting Behaviors – Assessment Procedure [applied]
AAT-20.2_AO - AAT-20.3 Social Scoring – Assessment Procedure [applied]
AAT-20.3_AO - AAT-20.4 Detrimental or Unfavorable Treatment – Assessment Procedure [applied]
AAT-20.4_AO - AAT-20.5 Risk and Criminal Profiling – Assessment Procedure [applied]
AAT-20.5_AO - AAT-20.6 Populating Facial Recognition Databases – Assessment Procedure [applied]
AAT-20.6_AO - AAT-20.7 Emotion Inference – Assessment Procedure [applied]
AAT-20.7_AO - AAT-20.8 Biometric Categorization – Assessment Procedure [applied]
AAT-20.8_AO - AAT-21 AI & Autonomous Technologies Requirements Definitions – Assessment Procedure [applied]
AAT-21_AO - AAT-22 AI & Autonomous Technologies Fairness & Bias – Assessment Procedure [applied]
AAT-22_AO - AAT-23 AI & Autonomous Technologies Knowledge Limits – Assessment Procedure [applied]
AAT-23_AO - AAT-24 AI & Autonomous Technologies Development Practices – Assessment Procedure [applied]
AAT-24_AO - AAT-24.1 AI & Autonomous Technologies Transparency – Assessment Procedure [applied]
AAT-24.1_AO - AAT-24.2 AI & Autonomous Technologies Implementation Documentation – Assessment Procedure [applied]
AAT-24.2_AO - AAT-24.3 AI & Autonomous Technologies Human Domain Knowledge Reliance – Assessment Procedure [applied]
AAT-24.3_AO - AAT-25 AI & Autonomous Technologies Implementation Tasks Definition – Assessment Procedure [applied]
AAT-25_AO - AAT-26 Real World Testing of AI & Autonomous Technologies – Assessment Procedure [applied]
AAT-26_AO - AAT-27 AI & Autonomous Technologies Testing Techniques – Assessment Procedure [applied]
AAT-27_AO - AAT-27.1 Generative Artificial Intelligence (GAI) Identification – Assessment Procedure [applied]
AAT-27.1_AO - AAT-27.2 AI & Autonomous Technologies Capabilities Testing – Assessment Procedure [applied]
AAT-27.2_AO - AAT-27.3 Real-World Testing – Assessment Procedure [applied]
AAT-27.3_AO - AAT-27.4 Documenting Testing Guidance – Assessment Procedure [applied]
AAT-27.4_AO - AAT-28 Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV) – Assessment Procedure [applied]
AAT-28_AO - AAT-28.1 AI TEVV Trustworthiness Assessment – Assessment Procedure [applied]
AAT-28.1_AO - AAT-28.2 AI TEVV Tools – Assessment Procedure [applied]
AAT-28.2_AO - AAT-28.3 AI TEVV Trustworthiness Demonstration – Assessment Procedure [applied]
AAT-28.3_AO - AAT-28.4 AI TEVV Safety Demonstration – Assessment Procedure [applied]
AAT-28.4_AO - AAT-28.5 AI TEVV Security & Resiliency Assessment – Assessment Procedure [applied]
AAT-28.5_AO - AAT-28.6 AI TEVV Transparency & Accountability Assessment – Assessment Procedure [applied]
AAT-28.6_AO - AAT-28.7 AI TEVV Privacy Assessment – Assessment Procedure [applied]
AAT-28.7_AO - AAT-28.8 AI TEVV Fairness & Bias Assessment – Assessment Procedure [applied]
AAT-28.8_AO - AAT-28.9 AI & Autonomous Technologies Model Validation – Assessment Procedure [applied]
AAT-28.9_AO - AAT-28.10 AI TEVV Comparable Deployment Settings – Assessment Procedure [applied]
AAT-28.10_AO - AAT-28.11 AI TEVV Empirically Validated Methods – Assessment Procedure [applied]
AAT-28.11_AO - AAT-28.12 AI TEVV Benchmarking Content Provenance – Assessment Procedure [applied]
AAT-28.12_AO - AAT-28.13 AI TEVV Model Collapse Mitigations – Assessment Procedure [applied]
AAT-28.13_AO - AAT-28.14 AI TEVV Third-Party Risk Management – Assessment Procedure [applied]
AAT-28.14_AO - AAT-29 AI TEVV Results Evaluation – Assessment Procedure [applied]
AAT-29_AO - AAT-29.1 AI TEVV Effectiveness – Assessment Procedure [applied]
AAT-29.1_AO - AAT-30 AI TEVV Reporting – Assessment Procedure [applied]
AAT-30_AO - AAT-30.1 AI & Autonomous Technologies Residual Risks – Assessment Procedure [applied]
AAT-30.1_AO - AAT-30.2 AI & Autonomous Technologies Viability Decisions – Assessment Procedure [applied]
AAT-30.2_AO - AAT-31 AI TEVV Post-Deployment Monitoring – Assessment Procedure [applied]
AAT-31_AO - AAT-32 Updating AI & Autonomous Technologies – Assessment Procedure [applied]
AAT-32_AO - AAT-33 Robust Stakeholder Engagement for AI & Autonomous Technologies – Assessment Procedure [applied]
AAT-33_AO - AAT-33.1 AI & Autonomous Technologies Stakeholder Feedback Integration – Assessment Procedure [applied]
AAT-33.1_AO - AAT-33.2 AI & Autonomous Technologies Ongoing Assessments – Assessment Procedure [applied]
AAT-33.2_AO - AAT-33.3 AI & Autonomous Technologies End User Feedback – Assessment Procedure [applied]
AAT-33.3_AO - AAT-33.4 AI & Autonomous Technologies Incident & Error Reporting – Assessment Procedure [applied]
AAT-33.4_AO - AAT-34 AI & Autonomous Technologies Stakeholder Diversity – Assessment Procedure [applied]
AAT-34_AO - AAT-34.1 AI & Autonomous Technologies Stakeholder Competencies – Assessment Procedure [applied]
AAT-34.1_AO - AAT-35 AI & Autonomous Technologies Deployment – Assessment Procedure [applied]
AAT-35_AO - AAT-35.1 AI & Autonomous Technologies Human Oversight – Assessment Procedure [applied]
AAT-35.1_AO - AAT-35.2 AI & Autonomous Technologies Oversight Measures – Assessment Procedure [applied]
AAT-35.2_AO - AAT-35.3 AI & Autonomous Technologies Separate Verification – Assessment Procedure [applied]
AAT-35.3_AO - AAT-35.4 AI & Autonomous Technologies Oversight Functions Competency – Assessment Procedure [applied]
AAT-35.4_AO - AAT-35.5 AI & Autonomous Technologies Data Relevance – Assessment Procedure [applied]
AAT-35.5_AO - AAT-35.6 AI & Autonomous Technologies Irregularity Reporting – Assessment Procedure [applied]
AAT-35.6_AO - AAT-35.7 AI & Autonomous Technologies Use Notification To Employees – Assessment Procedure [applied]
AAT-35.7_AO - AAT-35.8 AI & Autonomous Technologies Use Notification To Users – Assessment Procedure [applied]
AAT-35.8_AO - AAT-36 AI & Autonomous Technologies Production Monitoring – Assessment Procedure [applied]
AAT-36_AO - AAT-36.1 AI & Autonomous Technologies Measurement Approaches – Assessment Procedure [applied]
AAT-36.1_AO - AAT-36.2 Measuring AI & Autonomous Technologies Effectiveness – Assessment Procedure [applied]
AAT-36.2_AO - AAT-36.3 Unmeasurable AI & Autonomous Technologies Risks – Assessment Procedure [applied]
AAT-36.3_AO - AAT-36.4 Efficacy of AI & Autonomous Technologies Measurement – Assessment Procedure [applied]
AAT-36.4_AO - AAT-36.5 AI & Autonomous Technologies Domain Expert Reviews – Assessment Procedure [applied]
AAT-36.5_AO - AAT-36.6 AI & Autonomous Technologies Performance Changes – Assessment Procedure [applied]
AAT-36.6_AO - AAT-36.7 Pre-Trained AI & Autonomous Technologies Models – Assessment Procedure [applied]
AAT-36.7_AO - AAT-36.8 AI & Autonomous Technologies Event Logging – Assessment Procedure [applied]
AAT-36.8_AO - AAT-36.9 Serious Incident Reporting For AI & Autonomous Technologies – Assessment Procedure [applied]
AAT-36.9_AO - AAT-36.10 Serious Incident Root Cause Analysis (RCA) For AI & Autonomous Technologies – Assessment Procedure [applied]
AAT-36.10_AO - AAT-36.11 Anomaly Detection & Human Oversight – Assessment Procedure [applied]
AAT-36.11_AO - AAT-36.12 Human-in-the-Loop & Escalation – Assessment Procedure [applied]
AAT-36.12_AO - AAT-36.13 Emergent Behavior & Collusion Protections – Assessment Procedure [applied]
AAT-36.13_AO - AAT-36.14 Multi-Agent Trust & Communication Validation – Assessment Procedure [applied]
AAT-36.14_AO - AAT-37 AI & Autonomous Technologies System Value Chain – Assessment Procedure [applied]
AAT-37_AO - AAT-37.1 AI & Autonomous Technologies System Value Chain Fallbacks – Assessment Procedure [applied]
AAT-37.1_AO - AAT-38 AI Model Resilience – Assessment Procedure [applied]
AAT-38_AO - AAT-38.1 AI Model Pollution – Assessment Procedure [applied]
AAT-38.1_AO - AAT-38.2 Cascading Hallucination Defense – Assessment Procedure [applied]
AAT-38.2_AO - AAT-38.3 Resource Exhaustion & Denial of Service (DoS) Resilience – Assessment Procedure [applied]
AAT-38.3_AO - AAT-39 AI Agent Governance – Assessment Procedure [applied]
AAT-39_AO - AAT-39.1 Infrastructure Hardening & Isolation – Assessment Procedure [applied]
AAT-39.1_AO - AAT-39.2 AI Agent Limitations – Assessment Procedure [applied]
AAT-39.2_AO - AAT-39.3 Tool & Application Programming Interface (API) Invocation Controls – Assessment Procedure [applied]
AAT-39.3_AO - AAT-39.4 AI Agent Orchestration Protocol Safeguards – Assessment Procedure [applied]
AAT-39.4_AO - AAT-39.5 AI Agent Data Pipeline & Input Integrity – Assessment Procedure [applied]
AAT-39.5_AO - AAT-39.6 AI Agent Privileged Role & Delegation Boundaries – Assessment Procedure [applied]
AAT-39.6_AO - AAT-39.7 AI Agent Data Access Restrictions – Assessment Procedure [applied]
AAT-39.7_AO - AAT-39.8 AI Agent Data Extraction – Assessment Procedure [applied]
AAT-39.8_AO - AAT-39.9 AI Agent Identity & Impersonation Defense – Assessment Procedure [applied]
AAT-39.9_AO - AAT-39.10 AI Agent Logic Integrity – Assessment Procedure [applied]
AAT-39.10_AO - AAT-39.11 Sandboxing AI Agents – Assessment Procedure [applied]
AAT-39.11_AO - AAT-39.12 AI Agent Prompt Injection Defense – Assessment Procedure [applied]
AAT-39.12_AO - AAT-39.13 AI Agent Kill Switch / User Control – Assessment Procedure [applied]
AAT-39.13_AO - AAT-39.14 AI Agent Adversarial & Red Team Testing – Assessment Procedure [applied]
AAT-39.14_AO - AAT-39.15 AI Agent Self-Modification Controls – Assessment Procedure [applied]
AAT-39.15_AO - AAT-39.16 Purging AI Agent Data – Assessment Procedure [applied]
AAT-39.16_AO - AAT-39.17 AI Agent Delegation and Chaining Control – Assessment Procedure [applied]
AAT-39.17_AO - AAT-39.18 AI Agent Behavioral Drift Detection – Assessment Procedure [applied]
AAT-39.18_AO - AAT-39.19 AI Agent Action Authentication & Authorization – Assessment Procedure [applied]
AAT-39.19_AO - AAT-39.20 AI Agent Transparency & Audit – Assessment Procedure [applied]
AAT-39.20_AO - AAT-39.21 AI Agent Explainability – Assessment Procedure [applied]
AAT-39.21_AO - AAT-39.22 AI Agent Ethics, Fairness & Bias Detection – Assessment Procedure [applied]
AAT-39.22_AO - AAT-39.23 AI Agent Output Integrity & Verification – Assessment Procedure [applied]
AAT-39.23_AO - AAT-39.24 AI Agent Resource Limiting – Assessment Procedure [applied]
AAT-39.24_AO - AAT-40 Agentic Output Traceability & Repudiation – Assessment Procedure [applied]
AAT-40_AO - AAT-40.1 AI Agent Logging – Assessment Procedure [applied]
AAT-40.1_AO - AAT-40.2 AI Agent Session Management – Assessment Procedure [applied]
AAT-40.2_AO - AAT-41 Human-in-the-Loop Workload & Manipulation – Assessment Procedure [applied]
AAT-41_AO - AAT-42 Robotic Process Automation (RPA) – Assessment Procedure [applied]
AAT-42_AO - AAT-43 Business Process Task Enumeration – Assessment Procedure [applied]
AAT-43_AO - AST-01 Asset Management Policy – Assessment Procedure [applied]
AST-01_AO - AST-02 Asset Governance – Assessment Procedure [applied]
AST-02_AO - … and 1392 more
New links (1591)
- Blocks → Security, Compliance & Resilience Governance Policy [applied]
GOV-01_AO - Blocks → Security, Compliance & Resilience Program (SCRP) [applied]
GOV-02_AO - Blocks → Centralized Management of Security, Compliance & Resilience Controls [applied]
GOV-03_AO - Blocks → Secure Practices Alignment Justification [applied]
GOV-03.1_AO - Blocks → Standardized Terminology [applied]
GOV-03.2_AO - Blocks → Control Objectives [applied]
GOV-03.3_AO - Blocks → Assessment Objectives (AO) [applied]
GOV-03.4_AO - Blocks → Publishing Security, Compliance & Resilience Documentation [applied]
GOV-04_AO - Blocks → Periodic Review & Update of Security, Compliance & Resilience Program [applied]
GOV-04.1_AO - Blocks → Exception Management [applied]
GOV-04.2_AO - Blocks → Periodic Review of Exceptions [applied]
GOV-04.3_AO - Blocks → Assigned Security, Compliance & Resilience Responsibilities [applied]
GOV-05_AO - Blocks → Stakeholder Accountability Structure [applied]
GOV-05.1_AO - Blocks → Authoritative Chain of Command [applied]
GOV-05.2_AO - Blocks → Defining Business Context & Mission [applied]
GOV-06_AO - Blocks → Materiality Determination [applied]
GOV-07_AO - Blocks → High Value Assets (HVAs) [applied]
GOV-08_AO - Blocks → Steering Committee & Program Oversight [applied]
GOV-09_AO - Blocks → Status Reporting To Governing Body [applied]
GOV-09.1_AO - Blocks → Business As Usual (BAU) Security, Compliance & Resilience Practices [applied]
GOV-10_AO - Blocks → Operationalizing Security, Compliance & Resilience Capabilities [applied]
GOV-11_AO - Blocks → Select Controls [applied]
GOV-11.1_AO - Blocks → Implement Controls [applied]
GOV-11.2_AO - Blocks → Assess Controls [applied]
GOV-11.3_AO - Blocks → Authorize Technology Assets, Applications and/or Services (TAAS) [applied]
GOV-11.4_AO - Blocks → Monitor Controls [applied]
GOV-11.5_AO - Blocks → Measures of Performance [applied]
GOV-12_AO - Blocks → Key Performance Indicators (KPIs) [applied]
GOV-12.1_AO - Blocks → Key Risk Indicators (KRIs) [applied]
GOV-12.2_AO - Blocks → Forced Technology Transfer (FTT) [applied]
GOV-13_AO - Blocks → State-Sponsored Espionage [applied]
GOV-14_AO - Blocks → Contacts With Authorities [applied]
GOV-15_AO - Blocks → Contacts With Groups & Associations [applied]
GOV-16_AO - Blocks → Quality Management System (QMS) [applied]
GOV-17_AO - Blocks → Assurance [applied]
GOV-18_AO - Blocks → Mergers, Acquisitions & Divestitures (MA&D) [applied]
GOV-19_AO - Blocks → Virtual Data Room (VDR) [applied]
GOV-19.1_AO - Blocks → Artificial Intelligence & Autonomous Technologies Policy [applied]
AAT-01_AO - Blocks → Artificial Intelligence (AI) & Autonomous Technologies Governance [applied]
AAT-02_AO - Blocks → AI & Autonomous Technologies Mission and Goals Definition [applied]
AAT-03_AO - Blocks → AI & Autonomous Technologies Value Sustainment [applied]
AAT-03.1_AO - Blocks → AI & Autonomous Technologies Context Definition [applied]
AAT-04_AO - Blocks → AI & Autonomous Technologies-Related Legal Requirements Identification [applied]
AAT-04.1_AO - Blocks → Assigned Responsibilities for AI & Autonomous Technologies [applied]
AAT-05_AO - Blocks → Trustworthy AI & Autonomous Technologies [applied]
AAT-06_AO - Blocks → AI & Autonomous Technologies Continuous Improvements [applied]
AAT-06.1_AO - Blocks → Situational Awareness of AI & Autonomous Technologies In Use [applied]
AAT-07_AO - Blocks → AI Model & Agent Inventory & Lifecycle Management [applied]
AAT-07.1_AO - Blocks → Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization [applied]
AAT-07.2_AO - Blocks → AI & Autonomous Technologies Internal Controls [applied]
AAT-08_AO - Blocks → Adequate Protections For AI & Autonomous Technologies [applied]
AAT-08.1_AO - Blocks → AI & Autonomous Technologies Impact Assessment [applied]
AAT-09_AO - Blocks → AI & Autonomous Technologies Risk Profiling [applied]
AAT-10_AO - Blocks → AI & Autonomous Technologies Risk Mapping [applied]
AAT-10.1_AO - Blocks → AI & Autonomous Technologies Risk Management Decisions [applied]
AAT-11_AO - Blocks → AI & Autonomous Technologies Likelihood & Impact Risk Analysis [applied]
AAT-11.1_AO - Blocks → AI & Autonomous Technologies High Risk Designations [applied]
AAT-11.2_AO - Blocks → AI Threat Modeling & Risk Assessment [applied]
AAT-12_AO - Blocks → Novel Risk Assessment Methods & Technologies [applied]
AAT-12.1_AO - Blocks → AI & Autonomous Technologies Risk Response [applied]
AAT-13_AO - Blocks → AI & Autonomous Technologies Risk Tracking Approaches [applied]
AAT-13.1_AO - Blocks → Fine Tuning Risk Mitigation [applied]
AAT-13.2_AO - Blocks → Responsibility To Supersede, Deactivate and/or Disengage AI & Autonomous Technologies [applied]
AAT-13.3_AO - Blocks → AI & Autonomous Technologies Business Case [applied]
AAT-14_AO - Blocks → AI & Autonomous Technologies Potential Benefits Analysis [applied]
AAT-14.1_AO - Blocks → AI & Autonomous Technologies Potential Costs Analysis [applied]
AAT-14.2_AO - Blocks → AI & Autonomous Technologies Targeted Application Scope [applied]
AAT-14.3_AO - Blocks → AI & Autonomous Technologies Cost / Benefit Mapping [applied]
AAT-14.4_AO - Blocks → Model & AI Agent Documentation [applied]
AAT-15_AO - Blocks → AI & Autonomous Technologies Output Marking [applied]
AAT-16_AO - Blocks → Release Owner Gate (ROG) For AI-Augmented Content [applied]
AAT-17_AO - Blocks → AI & Autonomous Technologies Output Filtering [applied]
AAT-17.1_AO - Blocks → Human Moderation of AI & Autonomous Technologies-Generated Content [applied]
AAT-17.2_AO - Blocks → AI & Autonomous Technologies Intellectual Property Infringement Protections [applied]
AAT-18_AO - Blocks → Data Source Identification [applied]
AAT-18.1_AO - Blocks → Data Source Integrity [applied]
AAT-18.2_AO - Blocks → Data Source Lineage & Origin Disclosure [applied]
AAT-18.3_AO - Blocks → Digital Content Modification Logging [applied]
AAT-18.4_AO - Blocks → Training Data Source & Integrity [applied]
AAT-18.5_AO - Blocks → Prohibit Training [applied]
AAT-18.6_AO - Blocks → AI & Autonomous Technologies Harm Prevention [applied]
AAT-19_AO - Blocks → AI & Autonomous Technologies Human Subject Protections [applied]
AAT-19.1_AO - Blocks → AI & Autonomous Technologies Environmental Impact & Sustainability [applied]
AAT-19.2_AO - Blocks → Previously Unknown AI & Autonomous Technologies Threats & Risks [applied]
AAT-19.3_AO - Blocks → AI & Autonomous Technologies Conformity [applied]
AAT-20_AO - Blocks → Manipulative or Deceptive Techniques [applied]
AAT-20.1_AO - Blocks → Materially Distorting Behaviors [applied]
AAT-20.2_AO - Blocks → Social Scoring [applied]
AAT-20.3_AO - Blocks → Detrimental or Unfavorable Treatment [applied]
AAT-20.4_AO - Blocks → Risk and Criminal Profiling [applied]
AAT-20.5_AO - Blocks → Populating Facial Recognition Databases [applied]
AAT-20.6_AO - Blocks → Emotion Inference [applied]
AAT-20.7_AO - Blocks → Biometric Categorization [applied]
AAT-20.8_AO - Blocks → AI & Autonomous Technologies Requirements Definitions [applied]
AAT-21_AO - Blocks → AI & Autonomous Technologies Fairness & Bias [applied]
AAT-22_AO - Blocks → AI & Autonomous Technologies Knowledge Limits [applied]
AAT-23_AO - Blocks → AI & Autonomous Technologies Development Practices [applied]
AAT-24_AO - Blocks → AI & Autonomous Technologies Transparency [applied]
AAT-24.1_AO - Blocks → AI & Autonomous Technologies Implementation Documentation [applied]
AAT-24.2_AO - Blocks → AI & Autonomous Technologies Human Domain Knowledge Reliance [applied]
AAT-24.3_AO - Blocks → AI & Autonomous Technologies Implementation Tasks Definition [applied]
AAT-25_AO - Blocks → Real World Testing of AI & Autonomous Technologies [applied]
AAT-26_AO - Blocks → AI & Autonomous Technologies Testing Techniques [applied]
AAT-27_AO - Blocks → Generative Artificial Intelligence (GAI) Identification [applied]
AAT-27.1_AO - Blocks → AI & Autonomous Technologies Capabilities Testing [applied]
AAT-27.2_AO - Blocks → Real-World Testing [applied]
AAT-27.3_AO - Blocks → Documenting Testing Guidance [applied]
AAT-27.4_AO - Blocks → Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV) [applied]
AAT-28_AO - Blocks → AI TEVV Trustworthiness Assessment [applied]
AAT-28.1_AO - Blocks → AI TEVV Tools [applied]
AAT-28.2_AO - Blocks → AI TEVV Trustworthiness Demonstration [applied]
AAT-28.3_AO - Blocks → AI TEVV Safety Demonstration [applied]
AAT-28.4_AO - Blocks → AI TEVV Security & Resiliency Assessment [applied]
AAT-28.5_AO - Blocks → AI TEVV Transparency & Accountability Assessment [applied]
AAT-28.6_AO - Blocks → AI TEVV Privacy Assessment [applied]
AAT-28.7_AO - Blocks → AI TEVV Fairness & Bias Assessment [applied]
AAT-28.8_AO - Blocks → AI & Autonomous Technologies Model Validation [applied]
AAT-28.9_AO - Blocks → AI TEVV Comparable Deployment Settings [applied]
AAT-28.10_AO - Blocks → AI TEVV Empirically Validated Methods [applied]
AAT-28.11_AO - Blocks → AI TEVV Benchmarking Content Provenance [applied]
AAT-28.12_AO - Blocks → AI TEVV Model Collapse Mitigations [applied]
AAT-28.13_AO - Blocks → AI TEVV Third-Party Risk Management [applied]
AAT-28.14_AO - Blocks → AI TEVV Results Evaluation [applied]
AAT-29_AO - Blocks → AI TEVV Effectiveness [applied]
AAT-29.1_AO - Blocks → AI TEVV Reporting [applied]
AAT-30_AO - Blocks → AI & Autonomous Technologies Residual Risks [applied]
AAT-30.1_AO - Blocks → AI & Autonomous Technologies Viability Decisions [applied]
AAT-30.2_AO - Blocks → AI TEVV Post-Deployment Monitoring [applied]
AAT-31_AO - Blocks → Updating AI & Autonomous Technologies [applied]
AAT-32_AO - Blocks → Robust Stakeholder Engagement for AI & Autonomous Technologies [applied]
AAT-33_AO - Blocks → AI & Autonomous Technologies Stakeholder Feedback Integration [applied]
AAT-33.1_AO - Blocks → AI & Autonomous Technologies Ongoing Assessments [applied]
AAT-33.2_AO - Blocks → AI & Autonomous Technologies End User Feedback [applied]
AAT-33.3_AO - Blocks → AI & Autonomous Technologies Incident & Error Reporting [applied]
AAT-33.4_AO - Blocks → AI & Autonomous Technologies Stakeholder Diversity [applied]
AAT-34_AO - Blocks → AI & Autonomous Technologies Stakeholder Competencies [applied]
AAT-34.1_AO - Blocks → AI & Autonomous Technologies Deployment [applied]
AAT-35_AO - Blocks → AI & Autonomous Technologies Human Oversight [applied]
AAT-35.1_AO - Blocks → AI & Autonomous Technologies Oversight Measures [applied]
AAT-35.2_AO - Blocks → AI & Autonomous Technologies Separate Verification [applied]
AAT-35.3_AO - Blocks → AI & Autonomous Technologies Oversight Functions Competency [applied]
AAT-35.4_AO - Blocks → AI & Autonomous Technologies Data Relevance [applied]
AAT-35.5_AO - Blocks → AI & Autonomous Technologies Irregularity Reporting [applied]
AAT-35.6_AO - Blocks → AI & Autonomous Technologies Use Notification To Employees [applied]
AAT-35.7_AO - Blocks → AI & Autonomous Technologies Use Notification To Users [applied]
AAT-35.8_AO - Blocks → AI & Autonomous Technologies Production Monitoring [applied]
AAT-36_AO - Blocks → AI & Autonomous Technologies Measurement Approaches [applied]
AAT-36.1_AO - Blocks → Measuring AI & Autonomous Technologies Effectiveness [applied]
AAT-36.2_AO - Blocks → Unmeasurable AI & Autonomous Technologies Risks [applied]
AAT-36.3_AO - Blocks → Efficacy of AI & Autonomous Technologies Measurement [applied]
AAT-36.4_AO - Blocks → AI & Autonomous Technologies Domain Expert Reviews [applied]
AAT-36.5_AO - Blocks → AI & Autonomous Technologies Performance Changes [applied]
AAT-36.6_AO - Blocks → Pre-Trained AI & Autonomous Technologies Models [applied]
AAT-36.7_AO - Blocks → AI & Autonomous Technologies Event Logging [applied]
AAT-36.8_AO - Blocks → Serious Incident Reporting For AI & Autonomous Technologies [applied]
AAT-36.9_AO - Blocks → Serious Incident Root Cause Analysis (RCA) For AI & Autonomous Technologies [applied]
AAT-36.10_AO - Blocks → Anomaly Detection & Human Oversight [applied]
AAT-36.11_AO - Blocks → Human-in-the-Loop & Escalation [applied]
AAT-36.12_AO - Blocks → Emergent Behavior & Collusion Protections [applied]
AAT-36.13_AO - Blocks → Multi-Agent Trust & Communication Validation [applied]
AAT-36.14_AO - Blocks → AI & Autonomous Technologies System Value Chain [applied]
AAT-37_AO - Blocks → AI & Autonomous Technologies System Value Chain Fallbacks [applied]
AAT-37.1_AO - Blocks → AI Model Resilience [applied]
AAT-38_AO - Blocks → AI Model Pollution [applied]
AAT-38.1_AO - Blocks → Cascading Hallucination Defense [applied]
AAT-38.2_AO - Blocks → Resource Exhaustion & Denial of Service (DoS) Resilience [applied]
AAT-38.3_AO - Blocks → AI Agent Governance [applied]
AAT-39_AO - Blocks → Infrastructure Hardening & Isolation [applied]
AAT-39.1_AO - Blocks → AI Agent Limitations [applied]
AAT-39.2_AO - Blocks → Tool & Application Programming Interface (API) Invocation Controls [applied]
AAT-39.3_AO - Blocks → AI Agent Orchestration Protocol Safeguards [applied]
AAT-39.4_AO - Blocks → AI Agent Data Pipeline & Input Integrity [applied]
AAT-39.5_AO - Blocks → AI Agent Privileged Role & Delegation Boundaries [applied]
AAT-39.6_AO - Blocks → AI Agent Data Access Restrictions [applied]
AAT-39.7_AO - Blocks → AI Agent Data Extraction [applied]
AAT-39.8_AO - Blocks → AI Agent Identity & Impersonation Defense [applied]
AAT-39.9_AO - Blocks → AI Agent Logic Integrity [applied]
AAT-39.10_AO - Blocks → Sandboxing AI Agents [applied]
AAT-39.11_AO - Blocks → AI Agent Prompt Injection Defense [applied]
AAT-39.12_AO - Blocks → AI Agent Kill Switch / User Control [applied]
AAT-39.13_AO - Blocks → AI Agent Adversarial & Red Team Testing [applied]
AAT-39.14_AO - Blocks → AI Agent Self-Modification Controls [applied]
AAT-39.15_AO - Blocks → Purging AI Agent Data [applied]
AAT-39.16_AO - Blocks → AI Agent Delegation and Chaining Control [applied]
AAT-39.17_AO - Blocks → AI Agent Behavioral Drift Detection [applied]
AAT-39.18_AO - Blocks → AI Agent Action Authentication & Authorization [applied]
AAT-39.19_AO - Blocks → AI Agent Transparency & Audit [applied]
AAT-39.20_AO - Blocks → AI Agent Explainability [applied]
AAT-39.21_AO - Blocks → AI Agent Ethics, Fairness & Bias Detection [applied]
AAT-39.22_AO - Blocks → AI Agent Output Integrity & Verification [applied]
AAT-39.23_AO - Blocks → AI Agent Resource Limiting [applied]
AAT-39.24_AO - Blocks → Agentic Output Traceability & Repudiation [applied]
AAT-40_AO - Blocks → AI Agent Logging [applied]
AAT-40.1_AO - Blocks → AI Agent Session Management [applied]
AAT-40.2_AO - Blocks → Human-in-the-Loop Workload & Manipulation [applied]
AAT-41_AO - Blocks → Robotic Process Automation (RPA) [applied]
AAT-42_AO - Blocks → Business Process Task Enumeration [applied]
AAT-43_AO - Blocks → Asset Management Policy [applied]
AST-01_AO - Blocks → Asset Governance [applied]
AST-02_AO - Blocks → Standardized Naming Convention [applied]
AST-03_AO - … and 1391 more
Links not found (165)
- BCD-01 → Blocks BSI C5:2026-5.14
- BCD-02 → Blocks BSI C5:2026-5.14
- BCD-12 → Blocks MITREATTACK T1070.001
- BCD-12 → Blocks MITREATTACK T1070.002
- BCD-13 → Blocks MITREATTACK T1070.001
- BCD-13 → Blocks MITREATTACK T1070.002
- BCD-24 → Blocks MITREATTACK T1070.001
- BCD-24 → Blocks MITREATTACK T1070.002
- CHG-03 → Blocks MITREATTACK T1562.008
- CHG-03 → Blocks MITREATTACK T1562.012
- CHG-04.1 → Blocks MITREATTACK T1562
- CHG-04.1 → Blocks MITREATTACK T1562.001
- CHG-04.1 → Blocks MITREATTACK T1562.002
- CHG-04.1 → Blocks MITREATTACK T1562.004
- CHG-04.1 → Blocks MITREATTACK T1562.006
- CHG-04.1 → Blocks MITREATTACK T1562.007
- CHG-04.1 → Blocks MITREATTACK T1562.008
- CHG-04.1 → Blocks MITREATTACK T1562.009
- CHG-04.1 → Blocks MITREATTACK T1562.011
- CHG-04.1 → Blocks MITREATTACK T1562.012
- CPL-07 → Blocks MITREATTACK T1070.001
- CPL-07 → Blocks MITREATTACK T1070.002
- CPL-07 → Blocks MITREATTACK T1562
- CPL-07 → Blocks MITREATTACK T1562.001
- CPL-07 → Blocks MITREATTACK T1562.002
- CPL-07 → Blocks MITREATTACK T1562.004
- CPL-07 → Blocks MITREATTACK T1562.006
- CFG-03 → Blocks MITREATTACK T1562
- CFG-03 → Blocks MITREATTACK T1562.001
- CFG-03 → Blocks MITREATTACK T1562.002
- CFG-03 → Blocks MITREATTACK T1562.003
- CFG-03 → Blocks MITREATTACK T1562.004
- CFG-03 → Blocks MITREATTACK T1562.006
- CFG-03 → Blocks MITREATTACK T1562.009
- CFG-03 → Blocks MITREATTACK T1562.010
- CFG-04 → Blocks MITREATTACK T1070.001
- CFG-04 → Blocks MITREATTACK T1070.002
- CFG-04 → Blocks MITREATTACK T1562
- CFG-04 → Blocks MITREATTACK T1562.001
- CFG-04 → Blocks MITREATTACK T1562.002
- CFG-04 → Blocks MITREATTACK T1562.003
- CFG-04 → Blocks MITREATTACK T1562.004
- CFG-04 → Blocks MITREATTACK T1562.006
- CFG-04 → Blocks MITREATTACK T1562.009
- CFG-04 → Blocks MITREATTACK T1562.010
- CFG-04 → Blocks MITREATTACK T1562.011
- CFG-04 → Blocks MITREATTACK T1562.012
- CFG-11 → Blocks MITREATTACK T1562.006
- CFG-11 → Blocks MITREATTACK T1562.009
- MON-02 → Blocks MITREATTACK T1070.001
- MON-02 → Blocks MITREATTACK T1070.002
- MON-02 → Blocks MITREATTACK T1562
- MON-02 → Blocks MITREATTACK T1562.001
- MON-02 → Blocks MITREATTACK T1562.002
- MON-02 → Blocks MITREATTACK T1562.003
- MON-02 → Blocks MITREATTACK T1562.004
- MON-02 → Blocks MITREATTACK T1562.006
- MON-02 → Blocks MITREATTACK T1562.010
- MON-02 → Blocks MITREATTACK T1562.011
- MON-02 → Blocks MITREATTACK T1562.012
- CRY-05 → Blocks MITREATTACK T1562
- CRY-05 → Blocks MITREATTACK T1562.010
- CRY-06 → Blocks MITREATTACK T1562
- CRY-06 → Blocks MITREATTACK T1562.006
- CRY-06 → Blocks MITREATTACK T1562.010
- CRY-09 → Blocks MITREATTACK T1521.003
- DCH-27 → Blocks MITREATTACK T1070.001
- DCH-27 → Blocks MITREATTACK T1070.002
- DCH-37 → Blocks MITREATTACK T1070.001
- DCH-37 → Blocks MITREATTACK T1070.002
- END-04 → Blocks MITREATTACK T1070.001
- END-04 → Blocks MITREATTACK T1070.002
- END-04 → Blocks MITREATTACK T1562
- END-04 → Blocks MITREATTACK T1562.001
- END-04 → Blocks MITREATTACK T1562.002
- END-04 → Blocks MITREATTACK T1562.004
- END-04 → Blocks MITREATTACK T1562.006
- END-04 → Blocks MITREATTACK T1562.011
- END-11 → Blocks MITREATTACK T1070.001
- END-11 → Blocks MITREATTACK T1070.002
- END-11 → Blocks MITREATTACK T1562
- END-11 → Blocks MITREATTACK T1562.001
- END-11 → Blocks MITREATTACK T1562.002
- END-11 → Blocks MITREATTACK T1562.004
- END-11 → Blocks MITREATTACK T1562.006
- END-11 → Blocks MITREATTACK T1562.009
- END-11 → Blocks MITREATTACK T1562.010
- END-11 → Blocks MITREATTACK T1562.011
- END-11 → Blocks MITREATTACK T1562.012
- HRS-14 → Blocks MITREATTACK T1070.001
- HRS-14 → Blocks MITREATTACK T1070.002
- HRS-14 → Blocks MITREATTACK T1562
- HRS-14 → Blocks MITREATTACK T1562.001
- HRS-14 → Blocks MITREATTACK T1562.002
- HRS-14 → Blocks MITREATTACK T1562.004
- HRS-14 → Blocks MITREATTACK T1562.006
- HRS-14 → Blocks MITREATTACK T1562.007
- HRS-14 → Blocks MITREATTACK T1562.008
- HRS-14 → Blocks MITREATTACK T1562.009
- IAC-02 → Blocks BSI C5:2026-5.7
- IAC-08 → Blocks MITREATTACK T1070.001
- IAC-08 → Blocks MITREATTACK T1070.002
- IAC-08 → Blocks MITREATTACK T1562
- IAC-08 → Blocks MITREATTACK T1562.001
- IAC-08 → Blocks MITREATTACK T1562.002
- IAC-08 → Blocks MITREATTACK T1562.004
- IAC-08 → Blocks MITREATTACK T1562.006
- IAC-08 → Blocks MITREATTACK T1562.007
- IAC-08 → Blocks MITREATTACK T1562.008
- IAC-08 → Blocks MITREATTACK T1562.009
- IAC-08 → Blocks MITREATTACK T1562.012
- IAC-13.1 → Blocks MITREATTACK T1562
- IAC-25 → Blocks MITREATTACK T1070.001
- IAC-25 → Blocks MITREATTACK T1070.002
- IAC-25 → Blocks MITREATTACK T1562
- IAC-25 → Blocks MITREATTACK T1562.001
- IAC-25 → Blocks MITREATTACK T1562.002
- IAC-25 → Blocks MITREATTACK T1562.004
- IAC-25 → Blocks MITREATTACK T1562.006
- IAC-25 → Blocks MITREATTACK T1562.007
- IAC-25 → Blocks MITREATTACK T1562.008
- IAC-25 → Blocks MITREATTACK T1562.009
- IAC-25 → Blocks MITREATTACK T1562.012
- IAC-30 → Blocks MITREATTACK T1070.001
- IAC-30 → Blocks MITREATTACK T1070.002
- IAC-30 → Blocks MITREATTACK T1562
- IAC-30 → Blocks MITREATTACK T1562.001
- IAC-30 → Blocks MITREATTACK T1562.002
- IAC-30 → Blocks MITREATTACK T1562.004
- IAC-30 → Blocks MITREATTACK T1562.006
- IAC-30 → Blocks MITREATTACK T1562.007
- IAC-30 → Blocks MITREATTACK T1562.008
- IAC-30 → Blocks MITREATTACK T1562.009
- IAC-30 → Blocks MITREATTACK T1562.012
- IAC-32 → Blocks MITREATTACK T1562
- IAC-32 → Blocks MITREATTACK T1562.001
- IAC-32 → Blocks MITREATTACK T1562.002
- IAC-32 → Blocks MITREATTACK T1562.004
- IAC-32 → Blocks MITREATTACK T1562.006
- IAC-32 → Blocks MITREATTACK T1562.007
- IAC-32 → Blocks MITREATTACK T1562.008
- IAC-32 → Blocks MITREATTACK T1562.009
- IAC-36 → Blocks MITREATTACK T1562.006
- IAC-36 → Blocks MITREATTACK T1562.009
- NET-24 → Blocks MITREATTACK T1070.001
- NET-24 → Blocks MITREATTACK T1070.002
- NET-26 → Blocks MITREATTACK T1070.001
- NET-26 → Blocks MITREATTACK T1070.002
- NET-29 → Blocks MITREATTACK T1562.006
- NET-29 → Blocks MITREATTACK T1562.009
- PRM-07 → Blocks MITREATTACK T1574.002
- SEA-05 → Blocks MITREATTACK T1574.002
- SEA-14 → Blocks MITREATTACK T1070.001
- SEA-14 → Blocks MITREATTACK T1070.002
- SEA-25 → Blocks MITREATTACK T1070.001
- SEA-25 → Blocks MITREATTACK T1070.002
- TDA-02 → Blocks MITREATTACK T1574.002
- TDA-04 → Blocks MITREATTACK T1574.002
- TDA-05 → Blocks MITREATTACK T1574.002
- TDA-17 → Blocks MITREATTACK T1574.002
- TDA-20 → Blocks MITREATTACK T1574.002
- TDA-20.2 → Blocks MITREATTACK T1574.002
- VPM-08 → Blocks MITREATTACK T1574.002
- VPM-12 → Blocks MITREATTACK T1562
- VPM-12 → Blocks MITREATTACK T1562.010
Links the source no longer names (they stay): 46764
- GOV-01 → Blocks EULAW CELEX:32022R2554#art_5_1
- GOV-01 → Blocks EULAW CELEX:32022R2554#art_9_4
- GOV-01 → Blocks EULAW CELEX:32022R2554#art_16_1
- GOV-01 → Blocks EULAW CELEX:32022R2554#art_16_2
- GOV-01 → Relates SCF label_SCRMFocusTier3TACTICAL
- GOV-01 → Blocks SCF R-AC-1
- GOV-01 → Blocks SCF R-AC-2
- GOV-01 → Blocks SCF R-AC-3
- GOV-01 → Blocks SCF R-AC-4
- GOV-01 → Blocks SCF R-AM-1
- GOV-01 → Blocks SCF R-AM-2
- GOV-01 → Blocks SCF R-BC-1
- GOV-01 → Blocks SCF R-BC-2
- GOV-01 → Blocks SCF R-BC-3
- GOV-01 → Blocks SCF R-BC-4
- GOV-01 → Blocks SCF R-BC-5
- GOV-01 → Blocks SCF R-EX-1
- GOV-01 → Blocks SCF R-EX-3
- GOV-01 → Blocks SCF R-EX-4
- GOV-01 → Blocks SCF R-EX-6
- GOV-01 → Blocks SCF R-EX-7
- GOV-01 → Blocks SCF R-GV-8
- GOV-01 → Blocks SCF R-IR-1
- GOV-01 → Blocks SCF R-IR-2
- GOV-01 → Blocks SCF R-IR-3
- GOV-01 → Blocks SCF R-IR-4
- GOV-01 → Blocks SCF R-SA-1
- GOV-01 → Blocks SCF R-SC-1
- GOV-01 → Blocks SCF R-SC-2
- GOV-01 → Blocks SCF R-SC-3
- GOV-01 → Blocks SCF R-SC-4
- GOV-01 → Blocks SCF R-SC-5
- GOV-01 → Blocks SCF R-SC-6
- GOV-01 → Blocks DELAW BDSG § 9
- GOV-01 → Blocks EULAW CELEX:32022L2555#art_21
- GOV-01.1 → Blocks EULAW CELEX:32022R2554#art_5_2
- GOV-01.1 → Relates SCF label_SCRMFocusTier1STRATEGIC
- GOV-01.1 → Relates SCF label_SCRMFocusTier2OPERATIONAL
- GOV-01.1 → Relates SCF label_cadence_Annual
- GOV-01.1 → Relates SCF label_PPTDFApplicability_Process
- GOV-01.1 → Relates SCF label_nISTCSFFunctionGrouping_Govern
- GOV-01.1 → Blocks SCF R-AC-1
- GOV-01.1 → Blocks SCF R-AC-2
- GOV-01.1 → Blocks SCF R-AC-3
- GOV-01.1 → Blocks SCF R-AC-4
- GOV-01.1 → Blocks SCF R-AM-1
- GOV-01.1 → Blocks SCF R-AM-2
- GOV-01.1 → Blocks SCF R-BC-1
- GOV-01.1 → Blocks SCF R-BC-2
- GOV-01.1 → Blocks SCF R-BC-3
- GOV-01.1 → Blocks SCF R-BC-4
- GOV-01.1 → Blocks SCF R-BC-5
- GOV-01.1 → Blocks SCF R-EX-1
- GOV-01.1 → Blocks SCF R-EX-2
- GOV-01.1 → Blocks SCF R-EX-3
- GOV-01.1 → Blocks SCF R-EX-4
- GOV-01.1 → Blocks SCF R-EX-5
- GOV-01.1 → Blocks SCF R-EX-6
- GOV-01.1 → Blocks SCF R-EX-7
- GOV-01.1 → Blocks SCF R-GV-1
- GOV-01.1 → Blocks SCF R-GV-2
- GOV-01.1 → Blocks SCF R-GV-3
- GOV-01.1 → Blocks SCF R-GV-4
- GOV-01.1 → Blocks SCF R-GV-5
- GOV-01.1 → Blocks SCF R-GV-6
- GOV-01.1 → Blocks SCF R-GV-7
- GOV-01.1 → Blocks SCF R-GV-8
- GOV-01.1 → Blocks SCF R-IR-1
- GOV-01.1 → Blocks SCF R-IR-2
- GOV-01.1 → Blocks SCF R-IR-3
- GOV-01.1 → Blocks SCF R-IR-4
- GOV-01.1 → Blocks SCF R-SA-1
- GOV-01.1 → Blocks SCF R-SA-2
- GOV-01.1 → Blocks SCF R-SC-1
- GOV-01.1 → Blocks SCF R-SC-2
- GOV-01.1 → Blocks SCF R-SC-3
- GOV-01.1 → Blocks SCF R-SC-4
- GOV-01.1 → Blocks SCF R-SC-5
- GOV-01.1 → Blocks SCF R-SC-6
- GOV-01.1 → Relates SCF label_relativeControlWeighting_07
- GOV-01.1 → Blocks EULAW CELEX:32022L2555#art_21
- GOV-01.2 → Blocks EULAW CELEX:32022R2554#art_5_2
- GOV-01.2 → Blocks EULAW CELEX:32022R2554#art_13_5
- GOV-01.2 → Relates SCF label_SCRMFocusTier1STRATEGIC
- GOV-01.2 → Relates SCF label_SCRMFocusTier2OPERATIONAL
- GOV-01.2 → Relates SCF label_cadence_Annual
- GOV-01.2 → Relates SCF label_PPTDFApplicability_Process
- GOV-01.2 → Relates SCF label_nISTCSFFunctionGrouping_Govern
- GOV-01.2 → Blocks SCF R-AC-1
- GOV-01.2 → Blocks SCF R-EX-3
- GOV-01.2 → Blocks SCF R-EX-4
- GOV-01.2 → Blocks SCF R-GV-1
- GOV-01.2 → Blocks SCF R-GV-4
- GOV-01.2 → Blocks SCF R-GV-5
- GOV-01.2 → Blocks SCF R-GV-6
- GOV-01.2 → Blocks SCF R-GV-7
- GOV-01.2 → Blocks SCF R-SC-1
- GOV-01.2 → Blocks SCF R-SC-2
- GOV-01.2 → Blocks SCF R-SC-3
- GOV-01.2 → Blocks SCF R-SC-4
- GOV-01.2 → Blocks SCF R-SC-5
- GOV-01.2 → Blocks SCF R-SC-6
- GOV-01.2 → Relates SCF label_relativeControlWeighting_05
- GOV-01.3 → Relates SCF label_SCRMFocusTier1STRATEGIC
- GOV-01.3 → Relates SCF label_SCRMFocusTier2OPERATIONAL
- GOV-01.3 → Relates SCF label_cadence_Annual
- GOV-01.3 → Relates SCF label_PPTDFApplicability_Process
- GOV-01.3 → Relates SCF label_nISTCSFFunctionGrouping_Govern
- GOV-01.3 → Blocks SCF R-AC-1
- GOV-01.3 → Blocks SCF R-EX-3
- GOV-01.3 → Blocks SCF R-EX-4
- GOV-01.3 → Blocks SCF R-GV-1
- GOV-01.3 → Blocks SCF R-GV-4
- GOV-01.3 → Blocks SCF R-GV-5
- GOV-01.3 → Blocks SCF R-GV-6
- GOV-01.3 → Blocks SCF R-GV-7
- GOV-01.3 → Blocks SCF R-SC-3
- GOV-01.3 → Blocks SCF R-SC-4
- GOV-01.3 → Blocks SCF R-SC-5
- GOV-01.3 → Blocks SCF R-SC-6
- GOV-01.3 → Relates SCF label_relativeControlWeighting_07
- GOV-02 → Blocks EULAW CELEX:32022R2554#art_6_2
- GOV-02 → Blocks EULAW CELEX:32022R2554#art_9_4
- GOV-02 → Blocks SCF R-AC-1
- GOV-02 → Blocks SCF R-AC-2
- GOV-02 → Blocks SCF R-AC-3
- GOV-02 → Blocks SCF R-AC-4
- GOV-02 → Blocks SCF R-AM-1
- GOV-02 → Blocks SCF R-AM-2
- GOV-02 → Blocks SCF R-BC-1
- GOV-02 → Blocks SCF R-BC-2
- GOV-02 → Blocks SCF R-BC-3
- GOV-02 → Blocks SCF R-BC-4
- GOV-02 → Blocks SCF R-BC-5
- GOV-02 → Blocks SCF R-EX-1
- GOV-02 → Blocks SCF R-EX-3
- GOV-02 → Blocks SCF R-EX-4
- GOV-02 → Blocks SCF R-EX-6
- GOV-02 → Blocks SCF R-EX-7
- GOV-02 → Blocks SCF R-GV-8
- GOV-02 → Blocks SCF R-IR-1
- GOV-02 → Blocks SCF R-IR-2
- GOV-02 → Blocks SCF R-IR-3
- GOV-02 → Blocks SCF R-IR-4
- GOV-02 → Blocks SCF R-SA-1
- GOV-02 → Blocks SCF R-SC-1
- GOV-02 → Blocks SCF R-SC-2
- GOV-02 → Blocks SCF R-SC-3
- GOV-02 → Blocks SCF R-SC-4
- GOV-02 → Blocks SCF R-SC-5
- GOV-02 → Blocks SCF R-SC-6
- GOV-02 → Blocks EULAW CELEX:32016R0679#art_24
- GOV-02.1 → Relates SCF label_SCRMFocusTier1STRATEGIC
- GOV-02.1 → Relates SCF label_SCRMFocusTier2OPERATIONAL
- GOV-02.1 → Relates SCF label_SCRMFocusTier3TACTICAL
- GOV-02.1 → Relates SCF label_cadence_Annual
- GOV-02.1 → Relates SCF label_PPTDFApplicability_Process
- GOV-02.1 → Relates SCF label_nISTCSFFunctionGrouping_Govern
- GOV-02.1 → Blocks SCF R-AC-1
- GOV-02.1 → Blocks SCF R-AC-2
- GOV-02.1 → Blocks SCF R-AC-3
- GOV-02.1 → Blocks SCF R-AC-4
- GOV-02.1 → Blocks SCF R-AM-1
- GOV-02.1 → Blocks SCF R-AM-2
- GOV-02.1 → Blocks SCF R-AM-3
- GOV-02.1 → Blocks SCF R-BC-1
- GOV-02.1 → Blocks SCF R-BC-2
- GOV-02.1 → Blocks SCF R-BC-3
- GOV-02.1 → Blocks SCF R-BC-4
- GOV-02.1 → Blocks SCF R-BC-5
- GOV-02.1 → Blocks SCF R-EX-1
- GOV-02.1 → Blocks SCF R-EX-2
- GOV-02.1 → Blocks SCF R-EX-3
- GOV-02.1 → Blocks SCF R-EX-4
- GOV-02.1 → Blocks SCF R-EX-5
- GOV-02.1 → Blocks SCF R-EX-6
- GOV-02.1 → Blocks SCF R-EX-7
- GOV-02.1 → Blocks SCF R-GV-1
- GOV-02.1 → Blocks SCF R-GV-2
- GOV-02.1 → Blocks SCF R-GV-3
- GOV-02.1 → Blocks SCF R-GV-4
- GOV-02.1 → Blocks SCF R-GV-5
- GOV-02.1 → Blocks SCF R-GV-6
- GOV-02.1 → Blocks SCF R-GV-7
- GOV-02.1 → Blocks SCF R-GV-8
- GOV-02.1 → Blocks SCF R-IR-1
- GOV-02.1 → Blocks SCF R-IR-2
- GOV-02.1 → Blocks SCF R-IR-3
- GOV-02.1 → Blocks SCF R-IR-4
- GOV-02.1 → Blocks SCF R-SA-1
- GOV-02.1 → Blocks SCF R-SA-2
- GOV-02.1 → Blocks SCF R-SC-1
- GOV-02.1 → Blocks SCF R-SC-2
- GOV-02.1 → Blocks SCF R-SC-3
- GOV-02.1 → Blocks SCF R-SC-4
- GOV-02.1 → Blocks SCF R-SC-5
- GOV-02.1 → Blocks SCF R-SC-6
- GOV-02.1 → Relates SCF label_relativeControlWeighting_08
- GOV-03 → Relates SCF label_SCRMFocusTier3TACTICAL
- GOV-03 → Relates SCF label_nISTCSFFunctionGrouping_Govern
- … and 46564 more
Verknüpfte Vorgänge
| Verknüpfungstyp | Vorgang |
|---|---|
| is related to | Secure Controls Framework |
| is related to | English |
| is related to | Major |
| is related to | New version |
- Secure Controls Framework -
The Secure Controls Framework® (SCF)
"The SCF is the Common Controls Framework™ (CCF), the world's most comprehensive cybersecurity and data privacy metaframework - it is also free to use. The entire concept is building secure, compliant and resilient capabilities in the most efficient and cost-effective manner possible.
The SCF is more than just a unified control catalog, since its included content creates a playbook for Governance, Risk & Compliance (GRC) capabilities. Used globally by organizations of every size, the SCF is a robust and scalable solution for security, compliance and resilience controls. As a comprehensive security framework, the SCF maps 1,400+ controls across 200+ laws, regulations, and industry frameworks so you can implement once and comply everywhere.
Like it or not, cybersecurity is a protracted war on an asymmetric battlefield, where the threats are everywhere and as defenders we have to make the effort to work together to help improve cybersecurity and data privacy practices, since we all suffer when massive data breaches occur or when cyber attacks have physical impacts. Hackers share information on attack methods with other hackers, so why shouldn’t the good guys share information on how to best protect an organization? We decided to take action and make a difference, since we feel it is too important to wait for someone else to fix the problems that exist.
The SCF is made up of volunteers, mainly specialists within the cybersecurity profession, who focus on GRC and the cybersecurity side of data privacy. These are auditors, engineers, architects, incident responders, consultants and other specialists who live and breathe these topics on a daily basis. The end product is "expert-derived content" that makes up the SCF." https://securecontrolsframework.com/Terms & Conditions
The SCF End User License Agreement (EULA) governs the use of the Secure Controls Framework® (SCF) under the Creative Commons Attribution-No Derivatives 4.0 International Public License.