|
is blocked by
|
Security, Compliance & Resilience Governance Policy |
|
is blocked by
|
Security, Compliance & Resilience Program (SCRP) |
|
is blocked by
|
Centralized Management of Security, Compliance & Resilience Controls |
|
is blocked by
|
Secure Practices Alignment Justification |
|
is blocked by
|
Control Objectives |
|
is blocked by
|
Assessment Objectives (AO) |
|
is blocked by
|
Publishing Security, Compliance & Resilience Documentation |
|
is blocked by
|
Periodic Review & Update of Security, Compliance & Resilience Program |
|
is blocked by
|
Exception Management |
|
is blocked by
|
Periodic Review of Exceptions |
|
is blocked by
|
Assigned Security, Compliance & Resilience Responsibilities |
|
is blocked by
|
Stakeholder Accountability Structure |
|
is blocked by
|
Authoritative Chain of Command |
|
is blocked by
|
Defining Business Context & Mission |
|
is blocked by
|
Materiality Determination |
|
is blocked by
|
High Value Assets (HVAs) |
|
is blocked by
|
Steering Committee & Program Oversight |
|
is blocked by
|
Status Reporting To Governing Body |
|
is blocked by
|
Business As Usual (BAU) Security, Compliance & Resilience Practices |
|
is blocked by
|
Operationalizing Security, Compliance & Resilience Capabilities |
|
is blocked by
|
Select Controls |
|
is blocked by
|
Implement Controls |
|
is blocked by
|
Assess Controls |
|
is blocked by
|
Authorize Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Monitor Controls |
|
is blocked by
|
Measures of Performance |
|
is blocked by
|
Key Performance Indicators (KPIs) |
|
is blocked by
|
Key Risk Indicators (KRIs) |
|
is blocked by
|
Forced Technology Transfer (FTT) |
|
is blocked by
|
State-Sponsored Espionage |
|
is blocked by
|
Contacts With Authorities |
|
is blocked by
|
Quality Management System (QMS) |
|
is blocked by
|
Assurance |
|
is blocked by
|
Mergers, Acquisitions & Divestitures (MA&D) |
|
is blocked by
|
Artificial Intelligence & Autonomous Technologies Policy |
|
is blocked by
|
Artificial Intelligence (AI) & Autonomous Technologies Governance |
|
is blocked by
|
AI & Autonomous Technologies Context Definition |
|
is blocked by
|
AI & Autonomous Technologies-Related Legal Requirements Identification |
|
is blocked by
|
Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization |
|
is blocked by
|
AI & Autonomous Technologies Internal Controls |
|
is blocked by
|
Adequate Protections For AI & Autonomous Technologies |
|
is blocked by
|
AI & Autonomous Technologies Impact Assessment |
|
is blocked by
|
AI & Autonomous Technologies Risk Profiling |
|
is blocked by
|
AI & Autonomous Technologies Risk Mapping |
|
is blocked by
|
AI & Autonomous Technologies Risk Management Decisions |
|
is blocked by
|
AI & Autonomous Technologies Likelihood & Impact Risk Analysis |
|
is blocked by
|
AI & Autonomous Technologies High Risk Designations |
|
is blocked by
|
AI Threat Modeling & Risk Assessment |
|
is blocked by
|
Novel Risk Assessment Methods & Technologies |
|
is blocked by
|
AI & Autonomous Technologies Risk Response |
|
is blocked by
|
Model & AI Agent Documentation |
|
is blocked by
|
AI & Autonomous Technologies Conformity |
|
is blocked by
|
Manipulative or Deceptive Techniques |
|
is blocked by
|
Materially Distorting Behaviors |
|
is blocked by
|
Social Scoring |
|
is blocked by
|
Detrimental or Unfavorable Treatment |
|
is blocked by
|
Risk and Criminal Profiling |
|
is blocked by
|
Populating Facial Recognition Databases |
|
is blocked by
|
Emotion Inference |
|
is blocked by
|
Biometric Categorization |
|
is blocked by
|
AI & Autonomous Technologies Fairness & Bias |
|
is blocked by
|
AI & Autonomous Technologies Development Practices |
|
is blocked by
|
AI & Autonomous Technologies Transparency |
|
is blocked by
|
AI & Autonomous Technologies Implementation Documentation |
|
is blocked by
|
AI & Autonomous Technologies Human Domain Knowledge Reliance |
|
is blocked by
|
AI & Autonomous Technologies Implementation Tasks Definition |
|
is blocked by
|
Real World Testing of AI & Autonomous Technologies |
|
is blocked by
|
AI & Autonomous Technologies Testing Techniques |
|
is blocked by
|
Generative Artificial Intelligence (GAI) Identification |
|
is blocked by
|
AI & Autonomous Technologies Capabilities Testing |
|
is blocked by
|
Real-World Testing |
|
is blocked by
|
Documenting Testing Guidance |
|
is blocked by
|
Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV) |
|
is blocked by
|
AI TEVV Trustworthiness Assessment |
|
is blocked by
|
AI TEVV Tools |
|
is blocked by
|
AI TEVV Trustworthiness Demonstration |
|
is blocked by
|
AI TEVV Safety Demonstration |
|
is blocked by
|
AI TEVV Security & Resiliency Assessment |
|
is blocked by
|
AI TEVV Transparency & Accountability Assessment |
|
is blocked by
|
AI TEVV Privacy Assessment |
|
is blocked by
|
AI TEVV Fairness & Bias Assessment |
|
is blocked by
|
AI & Autonomous Technologies Model Validation |
|
is blocked by
|
AI TEVV Comparable Deployment Settings |
|
is blocked by
|
AI TEVV Empirically Validated Methods |
|
is blocked by
|
AI TEVV Benchmarking Content Provenance |
|
is blocked by
|
AI TEVV Results Evaluation |
|
is blocked by
|
AI TEVV Effectiveness |
|
is blocked by
|
AI TEVV Reporting |
|
is blocked by
|
AI & Autonomous Technologies Residual Risks |
|
is blocked by
|
AI & Autonomous Technologies Viability Decisions |
|
is blocked by
|
AI & Autonomous Technologies Ongoing Assessments |
|
is blocked by
|
AI & Autonomous Technologies Irregularity Reporting |
|
is blocked by
|
Measuring AI & Autonomous Technologies Effectiveness |
|
is blocked by
|
Serious Incident Reporting For AI & Autonomous Technologies |
|
is blocked by
|
AI & Autonomous Technologies System Value Chain |
|
is blocked by
|
Asset Management Policy |
|
is blocked by
|
Asset Governance |
|
is blocked by
|
Component Assignment |
|
is blocked by
|
Prohibited Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
High-Risk Technology Assets, Applications and/or Services (TAAS) Categorization |
|
is blocked by
|
Asset Scope Classification |
|
is blocked by
|
Compliance-Specific Asset Identification |
|
is blocked by
|
Network Diagrams & Data Flow Diagrams (DFDs) |
|
is blocked by
|
Control Applicability Boundary Graphical Representation |
|
is blocked by
|
Data Action Mapping |
|
is blocked by
|
Kiosks & Point of Interaction (PoI) Devices |
|
is blocked by
|
Unsupported Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Business Continuity & Disaster Recovery Policy |
|
is blocked by
|
Business Continuity & Disaster Recovery (BC/DR) Plans |
|
is blocked by
|
Contingency Plan Testing & Exercises |
|
is blocked by
|
Testing for Reliability & Integrity |
|
is blocked by
|
Change Management Policy |
|
is blocked by
|
Change Management Program |
|
is blocked by
|
Report Verification Results |
|
is blocked by
|
Cloud Security Policy |
|
is blocked by
|
Cloud Infrastructure Onboarding |
|
is blocked by
|
Customer Responsibility Matrix (CRM) |
|
is blocked by
|
Sensitive Data In Public Cloud Providers |
|
is blocked by
|
Compliance Policy |
|
is blocked by
|
Statutory, Regulatory & Contractual Compliance |
|
is blocked by
|
Compliance Scope |
|
is blocked by
|
Ability To Demonstrate Conformity |
|
is blocked by
|
Conformity Assessment |
|
is blocked by
|
Designated Certifying Official |
|
is blocked by
|
Conformity Attestations |
|
is blocked by
|
Declaration of Conformity |
|
is blocked by
|
Conformity Monitoring |
|
is blocked by
|
Functional Review Of Security, Compliance & Resilience Controls |
|
is blocked by
|
Non-Conformity Oversight |
|
is blocked by
|
Non-Conformity Corrective Action |
|
is blocked by
|
Executive Leadership Oversight of Security, Compliance & Resilience Controls |
|
is blocked by
|
Internal Audit Function |
|
is blocked by
|
Periodic Audits |
|
is blocked by
|
Independent Assessors |
|
is blocked by
|
Assessment Team Subject Matter Expertise |
|
is blocked by
|
Assessor Access |
|
is blocked by
|
Assessment Methods |
|
is blocked by
|
Assessment Rigor |
|
is blocked by
|
Assurance Levels (AL) |
|
is blocked by
|
Control Reciprocity |
|
is blocked by
|
Control Inheritance |
|
is blocked by
|
Evidence Request List (ERL) |
|
is blocked by
|
Evidence Sampling |
|
is blocked by
|
Continuous Control Monitoring (CCM) |
|
is blocked by
|
Legal Assessment of Investigative Inquires |
|
is blocked by
|
Investigation Request Notifications |
|
is blocked by
|
Investigation Access Restrictions |
|
is blocked by
|
Government Surveillance |
|
is blocked by
|
Potential Human Rights Abuses |
|
is blocked by
|
Grievances |
|
is blocked by
|
Grievance Response |
|
is blocked by
|
Localized Representation |
|
is blocked by
|
Representative Powers |
|
is blocked by
|
Dual Use Technology |
|
is blocked by
|
USML or CCL Identification |
|
is blocked by
|
Export-Controlled Access Restrictions |
|
is blocked by
|
Export Activities Documentation |
|
is blocked by
|
Statement of Applicability (SOA) |
|
is blocked by
|
Work Products |
|
is blocked by
|
Defensible Evidence of Due Diligence |
|
is blocked by
|
Defensible Evidence of Due Care |
|
is blocked by
|
Security, Compliance & Resilience Status Reporting |
|
is blocked by
|
AI & Autonomous Technologies Registration |
|
is blocked by
|
Control Assurance Automation (CAA) Oversight |
|
is blocked by
|
Control Assurance Automation (CAA) Evidence Integrity & Provenance |
|
is blocked by
|
Configuration Management Policy |
|
is blocked by
|
Configuration Management Program |
|
is blocked by
|
Approved Configuration Deviations |
|
is blocked by
|
Baseline Configuration Reviews & Updates |
|
is blocked by
|
Software Usage Restrictions |
|
is blocked by
|
Control Assurance Automation (CAA) Change Control |
|
is blocked by
|
Control Assurance Automation (CAA) Unauthorized Change Detection |
|
is blocked by
|
Control Assurance Automation (CAA) Separation of Duties |
|
is blocked by
|
Continuous Monitoring Policy |
|
is blocked by
|
Cryptographic Protections Policy |
|
is blocked by
|
Use of Cryptographic Controls |
|
is blocked by
|
Cryptographic Management |
|
is blocked by
|
Symmetric Keys |
|
is blocked by
|
Export-Controlled Cryptography |
|
is blocked by
|
Data Classification & Handling Policy |
|
is blocked by
|
Data Protection |
|
is blocked by
|
Sensitive / Regulated Data Governance |
|
is blocked by
|
Data Catalog |
|
is blocked by
|
Data & Asset Classification |
|
is blocked by
|
Highest Classification Level |
|
is blocked by
|
Data Reclassification |
|
is blocked by
|
Sensitive Data Inventories |
|
is blocked by
|
Periodic Scans for Sensitive / Regulated Data |
|
is blocked by
|
Defining Access Authorizations for Sensitive / Regulated Data |
|
is blocked by
|
Sensitive / Regulated Data Protection |
|
is blocked by
|
Restrict Sensitive / Regulated Data Access To Authorized Individuals |
|
is blocked by
|
Limitations on Use & Distribution of Sensitive / Regulated Data |
|
is blocked by
|
Sensitive / Regulated Data Sharing Decisions |
|
is blocked by
|
Disclosure of Sensitive / Regulated Data |
|
is blocked by
|
Controlled Release of Sensitive / Regulated Data |
|
is blocked by
|
Sensitive / Regulated Data Release Sanitization |
|
is blocked by
|
Sensitive / Regulated Data Access Mapping |
|
is blocked by
|
Sensitive / Regulated Media Records |
|
is blocked by
|
Media Marking |
|
is blocked by
|
Automated Marking |
|
is blocked by
|
Masking Displayed Sensitive / Regulated Data |
|
is blocked by
|
Making Sensitive / Regulated Data Unreadable In Storage |
|
is blocked by
|
Media Storage |
|
is blocked by
|
Data Storage Location Reviews |
|
is blocked by
|
Storing Authentication Data |
|
is blocked by
|
Encrypting Data Outside of Controlled Areas |
|
is blocked by
|
Digital & Non-Digital Media Disposal |
|
is blocked by
|
Digital Media Sanitization |
|
is blocked by
|
Sanitization of Sensitive / Regulated Data |
|
is blocked by
|
Digital Media Sanitization Documentation |
|
is blocked by
|
Use of External Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Limits of Authorized Use To Process, Store and/or Transmit Data |
|
is blocked by
|
Protecting Sensitive / Regulated Data on External Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Media & Data Retention |
|
is blocked by
|
Archived Data Set Retention |
|
is blocked by
|
Geographic Data Location |
|
is blocked by
|
Geolocation Requirements for Processing, Storage and Service Locations |
|
is blocked by
|
Data Localization |
|
is blocked by
|
External Transfer of Sensitive / Regulated Data |
|
is blocked by
|
Automated De-Identification of Sensitive / Regulated Data |
|
is blocked by
|
De-Identify Dataset Upon Collection |
|
is blocked by
|
Removal, Masking, Encryption, Hashing or Replacement of Direct Identifiers |
|
is blocked by
|
Statistical Disclosure Control |
|
is blocked by
|
Motivated Intruder |
|
is blocked by
|
Differential Privacy |
|
is blocked by
|
Attribute Displays for Output Devices |
|
is blocked by
|
Data Subject Attribute Associations |
|
is blocked by
|
Consistent Attribute Interpretation |
|
is blocked by
|
Identity Association Techniques & Technologies |
|
is blocked by
|
Attribute Reassignment |
|
is blocked by
|
Data Rights Management (DRM) |
|
is blocked by
|
Data Loss Prevention (DLP) |
|
is blocked by
|
Embedded Technology Policy |
|
is blocked by
|
Operating Environment Certification |
|
is blocked by
|
Safety Integrity Level (SIL) |
|
is blocked by
|
Endpoint Security Policy |
|
is blocked by
|
Human Resources Security Policy |
|
is blocked by
|
Personnel Screening |
|
is blocked by
|
Roles With Special Protection Measures |
|
is blocked by
|
Citizenship Requirements |
|
is blocked by
|
Identification & Authentication Policy |
|
is blocked by
|
Retain Access Records |
|
is blocked by
|
Citizenship Identification |
|
is blocked by
|
Acceptance of PIV Credentials |
|
is blocked by
|
Acceptance of Third-Party Credentials |
|
is blocked by
|
Acceptance of External Authenticators |
|
is blocked by
|
Acceptance of PIV Credentials from Other Organizations |
|
is blocked by
|
Use of FICAM-Issued Profiles |
|
is blocked by
|
Identification & Authentication Policy |
|
is blocked by
|
Retain Access Records |
|
is blocked by
|
Incident Response Policy |
|
is blocked by
|
Licensed Forensic Investigators |
|
is blocked by
|
Serious Incident Reporting |
|
is blocked by
|
Data Breach |
|
is blocked by
|
Information Assurance Policy |
|
is blocked by
|
Information Assurance (IA) Operations |
|
is blocked by
|
Assessment Boundaries |
|
is blocked by
|
Control Validation Testing (CVT) |
|
is blocked by
|
Specialized Assessments |
|
is blocked by
|
Assessor Independence |
|
is blocked by
|
Third-Party Assessment Reciprocity |
|
is blocked by
|
Adequate Security for Sensitive / Regulated Data In Support of Contracts |
|
is blocked by
|
Applied Security, Compliance and Resilience Controls Documentation |
|
is blocked by
|
Technical Verification |
|
is blocked by
|
Capabilities Deficiency Tracking |
|
is blocked by
|
Deficiency Tracking Automation |
|
is blocked by
|
Security Assessment Report (SAR) |
|
is blocked by
|
Security Authorization |
|
is blocked by
|
Control Assurance Automation (CAA) Automation |
|
is blocked by
|
Maintenance Personnel Without Appropriate Access |
|
is blocked by
|
Mobile Device Management Policy |
|
is blocked by
|
Network Security Policy |
|
is blocked by
|
Network Security Controls (NSC) |
|
is blocked by
|
Incident Response Policy |
|
is blocked by
|
Licensed Forensic Investigators |
|
is blocked by
|
Serious Incident Reporting |
|
is blocked by
|
Data Breach |
|
is blocked by
|
Information Assurance Policy |
|
is blocked by
|
Information Assurance (IA) Operations |
|
is blocked by
|
Assessment Boundaries |
|
is blocked by
|
Control Validation Testing (CVT) |
|
is blocked by
|
Physical & Environmental Security Policy |
|
is blocked by
|
Physical Security Plan (PSP) |
|
is blocked by
|
On-Site Client Segregation |
|
is blocked by
|
Restrict Unescorted Access |
|
is blocked by
|
Component Marking |
|
is blocked by
|
Data Privacy Policy |
|
is blocked by
|
Data Privacy Program |
|
is blocked by
|
Data Privacy Accountability Structure |
|
is blocked by
|
Chief Privacy Officer (CPO) |
|
is blocked by
|
Data Protection Officer (DPO) |
|
is blocked by
|
Personal Data Process Manager (PDPM) |
|
is blocked by
|
Data Fiduciary |
|
is blocked by
|
Privacy-Aware Design |
|
is blocked by
|
Documenting Data Processing Activities |
|
is blocked by
|
Personal Data (PD) Lineage |
|
is blocked by
|
Personal Data (PD) Categories |
|
is blocked by
|
Inventory of Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Inventory Automation Support |
|
is blocked by
|
Updating Personal Data (PD) Process |
|
is blocked by
|
Updating & Correcting Personal Data (PD) |
|
is blocked by
|
Flaw Remediation with Personal Data (PD) |
|
is blocked by
|
Reasonable Data Privacy Practices |
|
is blocked by
|
Security of Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Control Testing, Training & Monitoring |
|
is blocked by
|
Authority To Collect, Process, Store & Share Personal Data (PD) |
|
is blocked by
|
Product or Service Delivery Restrictions |
|
is blocked by
|
Data Privacy Requirements for Contractors & Service Providers |
|
is blocked by
|
Binding Corporate Rules (BCR) |
|
is blocked by
|
Information Sharing With Third Parties |
|
is blocked by
|
Limiting Personal Data (PD) Disclosures |
|
is blocked by
|
Accounting of Disclosures |
|
is blocked by
|
Notification of Disclosure Requests To Data Subject |
|
is blocked by
|
Disclosure Request Rejections |
|
is blocked by
|
Justification To Reject Disclosure Requests |
|
is blocked by
|
Financial Incentives For Personal Data (PD) |
|
is blocked by
|
Notice of Financial Incentive |
|
is blocked by
|
Dissemination of Data Privacy Program Information |
|
is blocked by
|
Privacy Act Statements |
|
is blocked by
|
Privacy Act Exemptions |
|
is blocked by
|
System of Records Notice (SORN) |
|
is blocked by
|
System of Records Notice (SORN) Review Process |
|
is blocked by
|
Computer Matching Agreements (CMA) |
|
is blocked by
|
Data Privacy Notice |
|
is blocked by
|
Privacy Notice Formatting |
|
is blocked by
|
Conspicuous Link To Data Privacy Notice |
|
is blocked by
|
Alternative Means To Deliver Privacy Notice |
|
is blocked by
|
Notice of Right To Limit |
|
is blocked by
|
Real-Time or Layered Notice |
|
is blocked by
|
Purpose Specification |
|
is blocked by
|
Purpose Compatibility |
|
is blocked by
|
Choice Architecture |
|
is blocked by
|
Symmetry In Choice |
|
is blocked by
|
Choice Architecture Testing |
|
is blocked by
|
Data Subject Consent |
|
is blocked by
|
Active Participation For Consent By Data Subjects |
|
is blocked by
|
Tailored Consent |
|
is blocked by
|
Revoke Consent |
|
is blocked by
|
Just-In-Time Notice & Updated Consent |
|
is blocked by
|
Prohibition of Selling, Processing and/or Sharing Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Retention & Disposal |
|
is blocked by
|
Personal Data (PD) Formats |
|
is blocked by
|
Temporary Files Containing Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Collection Methods |
|
is blocked by
|
Restrict Collection, Processing & Sharing To Identified Purpose |
|
is blocked by
|
Primary Source Collection For Personal Data (PD) |
|
is blocked by
|
Identifiable Image Collection |
|
is blocked by
|
Acquired Personal Data (PD) |
|
is blocked by
|
Data Brokers |
|
is blocked by
|
Personal Data (PD) Accuracy & Integrity |
|
is blocked by
|
Validate Collected Personal Data (PD) |
|
is blocked by
|
Re-Validate Collected Personal Data (PD) |
|
is blocked by
|
Automated Decision-Making Technology (ADMT) |
|
is blocked by
|
Automated Decision-Making Technology (ADMT) For Data Subject Actions |
|
is blocked by
|
Automated Decision-Making Technology (ADMT) Use Notification |
|
is blocked by
|
Automated Decision-Making Technology (ADMT) Opt-Out Consent |
|
is blocked by
|
Automated Decision-Making Technology (ADMT) Transparency |
|
is blocked by
|
Data Subject Communications |
|
is blocked by
|
Communicating Processing Changes |
|
is blocked by
|
Data Subject Communications Documentation |
|
is blocked by
|
Data Subject Communications Metrics |
|
is blocked by
|
Data Subject Communications Disclosure |
|
is blocked by
|
Data Subject Authentication |
|
is blocked by
|
Data Subject Rights Management |
|
is blocked by
|
Data Subject Empowerment |
|
is blocked by
|
Enabling Data Subjects To Update Personal Data (PD) |
|
is blocked by
|
Correcting Inaccurate Personal Data (PD) |
|
is blocked by
|
Notice of Correction or Processing Change |
|
is blocked by
|
Appeal Adverse Decision |
|
is blocked by
|
Right to Erasure |
|
is blocked by
|
Data Portability |
|
is blocked by
|
Personal Data (PD) Exports |
|
is blocked by
|
Obligation To Inform Third-Parties |
|
is blocked by
|
Joint Processing of Personal Data (PD) |
|
is blocked by
|
Data Controller Communications |
|
is blocked by
|
Register As A Data Controller and/or Data Processor |
|
is blocked by
|
Post-Quantum Cryptography Agility Plan (PQCAP) |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Transition Planning & Hybrid Mode Support |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Migration Progress Oversight |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Asset Inventory |
|
is blocked by
|
Post-Quantum Cryptography Exposure |
|
is blocked by
|
Quantum Threat Intelligence Monitoring |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Validation Requirements |
|
is blocked by
|
Data Privacy Policy |
|
is blocked by
|
Data Privacy Program |
|
is blocked by
|
Data Privacy Accountability Structure |
|
is blocked by
|
Chief Privacy Officer (CPO) |
|
is blocked by
|
Data Protection Officer (DPO) |
|
is blocked by
|
Personal Data Process Manager (PDPM) |
|
is blocked by
|
Data Fiduciary |
|
is blocked by
|
Privacy-Aware Design |
|
is blocked by
|
Documenting Data Processing Activities |
|
is blocked by
|
Personal Data (PD) Lineage |
|
is blocked by
|
Personal Data (PD) Categories |
|
is blocked by
|
Inventory of Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Inventory Automation Support |
|
is blocked by
|
Updating Personal Data (PD) Process |
|
is blocked by
|
Updating & Correcting Personal Data (PD) |
|
is blocked by
|
Flaw Remediation with Personal Data (PD) |
|
is blocked by
|
Reasonable Data Privacy Practices |
|
is blocked by
|
Security of Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Control Testing, Training & Monitoring |
|
is blocked by
|
Authority To Collect, Process, Store & Share Personal Data (PD) |
|
is blocked by
|
Product or Service Delivery Restrictions |
|
is blocked by
|
Data Privacy Requirements for Contractors & Service Providers |
|
is blocked by
|
Binding Corporate Rules (BCR) |
|
is blocked by
|
Information Sharing With Third Parties |
|
is blocked by
|
Limiting Personal Data (PD) Disclosures |
|
is blocked by
|
Accounting of Disclosures |
|
is blocked by
|
Notification of Disclosure Requests To Data Subject |
|
is blocked by
|
Disclosure Request Rejections |
|
is blocked by
|
Justification To Reject Disclosure Requests |
|
is blocked by
|
Financial Incentives For Personal Data (PD) |
|
is blocked by
|
Notice of Financial Incentive |
|
is blocked by
|
Dissemination of Data Privacy Program Information |
|
is blocked by
|
Privacy Act Statements |
|
is blocked by
|
Privacy Act Exemptions |
|
is blocked by
|
System of Records Notice (SORN) |
|
is blocked by
|
System of Records Notice (SORN) Review Process |
|
is blocked by
|
Computer Matching Agreements (CMA) |
|
is blocked by
|
Data Privacy Notice |
|
is blocked by
|
Privacy Notice Formatting |
|
is blocked by
|
Conspicuous Link To Data Privacy Notice |
|
is blocked by
|
Alternative Means To Deliver Privacy Notice |
|
is blocked by
|
Notice of Right To Limit |
|
is blocked by
|
Real-Time or Layered Notice |
|
is blocked by
|
Purpose Specification |
|
is blocked by
|
Purpose Compatibility |
|
is blocked by
|
Choice Architecture |
|
is blocked by
|
Symmetry In Choice |
|
is blocked by
|
Choice Architecture Testing |
|
is blocked by
|
Data Subject Consent |
|
is blocked by
|
Active Participation For Consent By Data Subjects |
|
is blocked by
|
Tailored Consent |
|
is blocked by
|
Revoke Consent |
|
is blocked by
|
Just-In-Time Notice & Updated Consent |
|
is blocked by
|
Prohibition of Selling, Processing and/or Sharing Personal Data (PD) |
|
is blocked by
|
Risk Management Policy |
|
is blocked by
|
Risk Management Program |
|
is blocked by
|
Risk-Based Security Categorization |
|
is blocked by
|
Business Impact Analysis (BIA) |
|
is blocked by
|
Risk Identification |
|
is blocked by
|
Risk Catalog |
|
is blocked by
|
Risk Owner |
|
is blocked by
|
Risk Assessment Methodology |
|
is blocked by
|
Risk Assessment |
|
is blocked by
|
Instances Requiring A Risk Assessment |
|
is blocked by
|
Risk Assessment Update |
|
is blocked by
|
Risk Assessment Stakeholder Involvement |
|
is blocked by
|
Risk Register |
|
is blocked by
|
Risk Ranking |
|
is blocked by
|
Risk Response |
|
is blocked by
|
Risk Treatment Options |
|
is blocked by
|
Risk Remediation |
|
is blocked by
|
Risk Treatment Plan (RTP) |
|
is blocked by
|
Documented Alternatives |
|
is blocked by
|
Compensating Countermeasures |
|
is blocked by
|
Data Protection Impact Assessment (DPIA) |
|
is blocked by
|
Supply Chain Risk Management (SCRM) Plan |
|
is blocked by
|
AI & Autonomous Technologies Supply Chain Impacts |
|
is blocked by
|
Supply Chain Risk Assessment (SCRA) |
|
is blocked by
|
Risk Monitoring |
|
is blocked by
|
Secure Engineering & Architecture Policy |
|
is blocked by
|
Security, Compliance & Resilience Aware Design |
|
is blocked by
|
System Use Notification (Logon Banner) |
|
is blocked by
|
Standardized Microsoft Windows Banner |
|
is blocked by
|
Truncated Banner |
|
is blocked by
|
Security Operations Policy |
|
is blocked by
|
Operations Security |
|
is blocked by
|
Security Concept Of Operations (CONOPS) |
|
is blocked by
|
Standardized Operating Procedures (SOP) |
|
is blocked by
|
Service Delivery (Business Process Support) |
|
is blocked by
|
Security Awareness & Training Policy |
|
is blocked by
|
Security, Compliance & Resilience-Minded Workforce |
|
is blocked by
|
Maintaining Workforce Development Relevancy |
|
is blocked by
|
Security, Compliance & Resilience Awareness Training |
|
is blocked by
|
Role-Based Security, Compliance & Resilience Training |
|
is blocked by
|
Sensitive / Regulated Data Storage, Handling & Processing |
|
is blocked by
|
Privileged User Training |
|
is blocked by
|
Security, Compliance & Resilience Training Records |
|
is blocked by
|
Training Feedback |
|
is blocked by
|
Technology Development & Acquisition Policy |
|
is blocked by
|
Technology Development & Acquisition |
|
is blocked by
|
Software Assurance Maturity Model (SAMM) |
|
is blocked by
|
Developer Architecture & Design |
|
is blocked by
|
Software Design Review |
|
is blocked by
|
Product Management |
|
is blocked by
|
Product Conformity Governance |
|
is blocked by
|
Continuous Monitoring Plan |
|
is blocked by
|
Information Assurance Enabled Products |
|
is blocked by
|
Reporting Exploitable Vulnerabilities |
|
is blocked by
|
Technical Documentation Artifacts |
|
is blocked by
|
Product-Specific Risk Assessment Artifacts |
|
is blocked by
|
Functional Properties |
|
is blocked by
|
Products With Digital Elements |
|
is blocked by
|
Commercial Off-The-Shelf (COTS) Security Solutions |
|
is blocked by
|
Risk Management Policy |
|
is blocked by
|
Risk Management Program |
|
is blocked by
|
Risk-Based Security Categorization |
|
is blocked by
|
Business Impact Analysis (BIA) |
|
is blocked by
|
Risk Identification |
|
is blocked by
|
Risk Catalog |
|
is blocked by
|
Risk Owner |
|
is blocked by
|
Risk Assessment Methodology |
|
is blocked by
|
Risk Assessment |
|
is blocked by
|
Instances Requiring A Risk Assessment |
|
is blocked by
|
Risk Assessment Update |
|
is blocked by
|
Risk Assessment Stakeholder Involvement |
|
is blocked by
|
Risk Register |
|
is blocked by
|
Risk Ranking |
|
is blocked by
|
Risk Response |
|
is blocked by
|
Risk Treatment Options |
|
is blocked by
|
Risk Remediation |
|
is blocked by
|
Risk Treatment Plan (RTP) |
|
is blocked by
|
Documented Alternatives |
|
is blocked by
|
Compensating Countermeasures |
|
is blocked by
|
Data Protection Impact Assessment (DPIA) |
|
is blocked by
|
Supply Chain Risk Management (SCRM) Plan |
|
is blocked by
|
AI & Autonomous Technologies Supply Chain Impacts |
|
is blocked by
|
Supply Chain Risk Assessment (SCRA) |
|
is blocked by
|
Risk Monitoring |
|
is blocked by
|
Secure Engineering & Architecture Policy |
|
is blocked by
|
Security, Compliance & Resilience Aware Design |
|
is blocked by
|
Product Testing & Reviews |
|
is blocked by
|
Security, Compliance & Resilience Representatives For Product Changes |
|
is blocked by
|
Secure Development Environments |
|
is blocked by
|
Separation of Development, Testing and Operational Environments |
|
is blocked by
|
Security, Compliance & Resilience Testing Throughout Development |
|
is blocked by
|
Application Penetration Testing |
|
is blocked by
|
Manual Code Review |
|
is blocked by
|
Use of Live Data |
|
is blocked by
|
Developer Threat Analysis & Flaw Remediation |
|
is blocked by
|
Cryptographic Bill of Materials (CBOM) |
|
is blocked by
|
Software Bill of Materials (SBOM) |
|
is blocked by
|
Third-Party Management Policy |
|
is blocked by
|
Third-Party Management |
|
is blocked by
|
Acquisition Strategies, Tools & Methods |
|
is blocked by
|
Supply Chain Risk Management (SCRM) |
|
is blocked by
|
Security, Compliance & Resilience Outsourcing Limitations |
|
is blocked by
|
Third-Party Processing, Storage and Service Locations |
|
is blocked by
|
Third-Party Contract Requirements |
|
is blocked by
|
Contract Flow-Down Requirements |
|
is blocked by
|
Review of Third-Party Services |
|
is blocked by
|
Third-Party Scope Review |
|
is blocked by
|
Break Clauses |
|
is blocked by
|
Foreign Ownership, Control or Influence (FOCI) |
|
is blocked by
|
Ownership Change Monitoring |
|
is blocked by
|
Ownership Change Provisions |
|
is blocked by
|
Third-Party Incident Response & Recovery Capabilities |
|
is blocked by
|
First-Party Declaration (1PD) |
|
is blocked by
|
Third-Party Attestation (3PA) |
|
is blocked by
|
Terminating Third-Party Relationships |
|
is blocked by
|
Technology Assets, Applications, Services and Data (TAASD) Disposition |
|
is blocked by
|
Third-Party Exit Obligations Management |
|
is blocked by
|
Third-Party Exit Contingencies |
|
is blocked by
|
Threat Management Policy |
|
is blocked by
|
Vulnerability & Patch Management Policy |
|
is blocked by
|
Vulnerability & Patch Management Program (VPMP) |
|
is blocked by
|
External Vulnerability Assessment |
|
is blocked by
|
Internal Vulnerability Assessment |
|
is blocked by
|
Penetration Testing |
|
is blocked by
|
Independent Penetration Agent or Team |
|
is blocked by
|
Web Security Policy |
|
is blocked by
|
Web Security |
|
is blocked by
|
Web Security Standard |
|
is blocked by
|
Product Testing & Reviews |
|
is blocked by
|
Security, Compliance & Resilience Representatives For Product Changes |
|
is blocked by
|
Secure Development Environments |
|
is blocked by
|
Separation of Development, Testing and Operational Environments |
|
is blocked by
|
Security, Compliance & Resilience Testing Throughout Development |
|
is blocked by
|
Application Penetration Testing |
|
is blocked by
|
Manual Code Review |
|
is blocked by
|
Use of Live Data |
|
is blocked by
|
Developer Threat Analysis & Flaw Remediation |
|
is blocked by
|
Cryptographic Bill of Materials (CBOM) |
|
is blocked by
|
Software Bill of Materials (SBOM) |
|
is blocked by
|
Third-Party Management Policy |
|
is blocked by
|
Third-Party Management |
|
is blocked by
|
Acquisition Strategies, Tools & Methods |
|
is blocked by
|
Supply Chain Risk Management (SCRM) |
|
is blocked by
|
Security, Compliance & Resilience Outsourcing Limitations |
|
is blocked by
|
Third-Party Processing, Storage and Service Locations |
|
is blocked by
|
Third-Party Contract Requirements |
|
is blocked by
|
Contract Flow-Down Requirements |
|
is blocked by
|
Product Testing & Reviews |
|
is blocked by
|
Security, Compliance & Resilience Representatives For Product Changes |
|
is blocked by
|
Secure Development Environments |
|
is blocked by
|
Separation of Development, Testing and Operational Environments |
|
is blocked by
|
Security, Compliance & Resilience Testing Throughout Development |
|
is blocked by
|
Application Penetration Testing |
|
is blocked by
|
Manual Code Review |
|
is blocked by
|
Use of Live Data |
|
is blocked by
|
Developer Threat Analysis & Flaw Remediation |
|
is blocked by
|
Cryptographic Bill of Materials (CBOM) |
|
is blocked by
|
Software Bill of Materials (SBOM) |
|
is blocked by
|
Third-Party Management Policy |
|
is blocked by
|
Third-Party Management |
|
is blocked by
|
Acquisition Strategies, Tools & Methods |
|
is blocked by
|
Supply Chain Risk Management (SCRM) |
|
is blocked by
|
Security, Compliance & Resilience Outsourcing Limitations |
|
is blocked by
|
Third-Party Processing, Storage and Service Locations |
|
is blocked by
|
Third-Party Contract Requirements |
|
is blocked by
|
Contract Flow-Down Requirements |