relative Control Weighting = 09

Incidencias vinculadas

Vínculos
Tipo de vínculo Incidencia
is related to Business As Usual (BAU) Security, Compliance & Resilience Practices
is related to Contacts With Authorities
is related to Artificial Intelligence (AI) & Autonomous Technologies Governance
is related to Trustworthy AI & Autonomous Technologies
is related to AI & Autonomous Technologies Internal Controls
is related to AI & Autonomous Technologies Impact Assessment
is related to AI & Autonomous Technologies Risk Management Decisions
is related to AI & Autonomous Technologies Likelihood & Impact Risk Analysis
is related to AI & Autonomous Technologies High Risk Designations
is related to AI & Autonomous Technologies Risk Tracking Approaches
is related to AI & Autonomous Technologies Output Marking
is related to Human Moderation of AI & Autonomous Technologies-Generated Content
is related to AI & Autonomous Technologies Intellectual Property Infringement Protections
is related to AI & Autonomous Technologies Harm Prevention
is related to AI & Autonomous Technologies Human Subject Protections
is related to AI & Autonomous Technologies Environmental Impact & Sustainability
is related to Previously Unknown AI & Autonomous Technologies Threats & Risks
is related to Manipulative or Deceptive Techniques
is related to Materially Distorting Behaviors
is related to Asset-Service Dependencies
is related to Comprehensive Asset Inventory Management
is related to Software Licensing Restrictions
is related to Network Diagrams & Data Flow Diagrams (DFDs)
is related to Technology Assets, Applications, Services and/or Data (TAASD) Storage
is related to Use of Third-Party Devices
is related to Usage Parameters
is related to Telecommunications Equipment
is related to Business Continuity Management System (BCMS)
is related to Recovery Operations Criteria
is related to Ongoing Contingency Planning
is related to Resume All Missions & Business Functions
is related to Contingency Training
is related to Alternate Storage Site
is related to Separation from Primary Storage Site
is related to Configuration Change Control
is related to Security, Compliance & Resilience Representative for Asset Lifecycle Changes
is related to Security Impact Analysis for Changes
is related to Test, Validate & Document Changes
is related to Stakeholder Notification of Changes
is related to Cloud Infrastructure Offboarding
is related to Cloud Infrastructure Security Subnet
is related to Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Configuration Management Policy
is related to Secure Baseline Configurations
is related to Account Lockout
is related to Integrity of Data In Transit
is related to Encrypting Data At Rest
is related to Database Encryption
is related to Public Key Infrastructure (PKI) Availability
is related to Defining Access Authorizations for Sensitive / Regulated Data
is related to Sensitive / Regulated Data Protection
is related to Restrict Sensitive / Regulated Data Access To Authorized Individuals
is related to Media Storage
is related to Physically Secure All Media Containing Sensitive / Regulated Data
is related to Digital Media Use Restrictions
is related to Embedded Technology Security Program
is related to Separate Operating Environments For Embedded Technologies
is related to Message Queuing Telemetry Transport (MQTT) Security
is related to Remote Management of Embedded Technologies
is related to Safety Assessment
is related to Endpoint Device Management (EDM)
is related to Endpoint Protection Mechanisms
is related to Always On Antimalware Protection
is related to Antimalware Protection Mechanism Testing
is related to Software Firewall
is related to Endpoint Detection & Response (EDR)
is related to Collaborative Computing Devices
is related to Users With Elevated Privileges
is related to Competency Requirements for Security, Compliance & Resilience-Related Positions
is related to Assigned Roles & Responsibilities Awareness
is related to Citizenship Requirements
is related to Access Agreements
is related to Onboarding, Transferring & Offboarding Personnel
is related to Probationary Periods
is related to Identity & Access Management (IAM)
is related to Authenticate, Authorize and Audit (AAA)
is related to User Provisioning & De-Provisioning
is related to Identity Proofing (Identity Verification)
is related to Identity Evidence
is related to Role-Based Access Control (RBAC)
is related to Account Management
is related to Management Approval For New or Changed Accounts
is related to Management Approval For Privileged Accounts
is related to Privileged Account Inventories
is related to Privileged Account Separation
is related to Dedicated Privileged Account
is related to Password Managers
is related to Group Authentication
is related to User Responsibilities for Account Management
is related to Reference Monitor
is related to Access Enforcement
is related to Incident Response Policy
is related to Incident Classification & Prioritization
is related to Indicators of Compromise (IOC)
is related to Incident Handling
is related to Automated Incident Handling Processes
is related to Incident Response Plan (IRP)
is related to Incident Response Plan (IRP) Update
is related to Incident Response Training
is related to Simulated Incidents
is related to Automated Incident Response Training Environments
is related to Root Cause Analysis (RCA) & Lessons Learned
is related to Specialized Assessments
is related to Maintenance Policy
is related to Controlled Maintenance
is related to Preventative Maintenance
is related to Predictive Maintenance
is related to Centralized Management Of Mobile Devices
is related to Restricting Access To Authorized Technology Assets, Applications and/or Services (TAAS)
is related to Full Device & Container-Based Encryption
is related to Separate Mobile Device Profiles
is related to Network Security Controls (NSC)
is related to Limit Network Connections
is related to Interconnection Security Agreements (ISAs)
is related to Security Management Subnets
is related to Separate Subnets To Isolate Functions
is related to Microsegmentation
is related to Policy Decision Point (PDP)
is related to Authenticated Proxy
is related to Route Internal Traffic to Proxy Servers
is related to Physical & Environmental Security Policy
is related to Physical Access Authorizations
is related to Role-Based Physical Access
is related to Physical Access Device Inventories
is related to Controlled Ingress & Egress Points
is related to Access To Critical Systems
is related to Lockable Physical Casings
is related to Access Control for Output Devices
is related to Asset Monitoring and Tracking
is related to Inventory of Personal Data (PD)
is related to Authority To Collect, Process, Store & Share Personal Data (PD)
is related to Security, Compliance & Resilience Resource Management
is related to Risk Management Program
is related to Risk Management Resourcing
is related to Risk Framing
is related to Executive Leadership Approval For Managing Material Risk
is related to Documented Justification For Material Risk Management Decisions
is related to Risk-Based Security Categorization
is related to Risk Catalog
is related to Risk Owner
is related to Risk Assessment
is related to Instances Requiring A Risk Assessment
is related to Risk Assessment Update
is related to Security, Compliance & Resilience Aware Design
is related to Application Partitioning
is related to Information Output Filtering
is related to Honeypots
is related to Operations Security
is related to Security, Compliance & Resilience Awareness Training
is related to Technology Development & Acquisition
is related to Product Conformity Governance
is related to Ongoing Product Security Support
is related to Disclosure of Vulnerabilities
is related to Product Tampering and Counterfeiting (PTC)
is related to Customized Development of Critical Components
is related to DevSecOps
is related to Minimizing Attack Surfaces
is related to Product Testing & Reviews
is related to Secure Development Environments
is related to Library Privileges
is related to Use of Live Data
is related to Developer Screening
is related to Developer Configuration Management
is related to Bills of Material (BOMs)
is related to Third-Party Management
is related to Acquisition Strategies, Tools & Methods
is related to Processes To Address Weaknesses or Deficiencies
is related to Outsourcing Non-Essential Functions or Services
is related to Supplier Diversity
is related to Third-Party Inventories
is related to Third-Party Criticality Assessments
is related to Vulnerability & Patch Management Policy
is related to Vulnerability Remediation Process
is related to Known Exploited Vulnerabilities (KEV) Mitigations
is related to Time To Remediate / Benchmarks For Corrective Action
is related to Web Security
is related to Strong Customer Authentication (SCA)
is related to Web Application Input Validation & Sanitization
is related to Secure Web Traffic
is related to Web Application Output Encoding
is related to Web Browser Security
is related to Website Change Detection
is related to Centralized Management of Security, Compliance & Resilience Controls
is related to Operationalizing Security, Compliance & Resilience Capabilities
is related to Implement Controls
is related to Assigned Responsibilities for AI & Autonomous Technologies
is related to Situational Awareness of AI & Autonomous Technologies In Use
is related to AI & Autonomous Technologies Risk Profiling
is related to AI & Autonomous Technologies Risk Mapping
is related to Fine Tuning Risk Mitigation
is related to Data Source Lineage & Origin Disclosure
is related to Digital Content Modification Logging
is related to AI & Autonomous Technologies Conformity
is related to Social Scoring
is related to Detrimental or Unfavorable Treatment
is related to Populating Facial Recognition Databases
is related to AI & Autonomous Technologies Fairness & Bias
is related to AI & Autonomous Technologies Transparency
is related to AI & Autonomous Technologies Implementation Documentation
is related to AI TEVV Trustworthiness Demonstration
is related to AI TEVV Privacy Assessment
is related to AI TEVV Fairness & Bias Assessment
is related to AI & Autonomous Technologies Residual Risks
is related to AI TEVV Post-Deployment Monitoring
is related to Updating AI & Autonomous Technologies
is related to Robust Stakeholder Engagement for AI & Autonomous Technologies
is related to AI & Autonomous Technologies Stakeholder Feedback Integration
is related to AI & Autonomous Technologies Ongoing Assessments
is related to AI & Autonomous Technologies Incident & Error Reporting
is related to AI & Autonomous Technologies Stakeholder Competencies
is related to AI & Autonomous Technologies Human Oversight
is related to AI & Autonomous Technologies Oversight Measures
is related to AI & Autonomous Technologies Separate Verification
is related to AI & Autonomous Technologies Oversight Functions Competency
is related to AI & Autonomous Technologies Production Monitoring
is related to Identify Critical Assets
is related to Prohibited Technology Assets, Applications and/or Services (TAAS)
is related to Asset Categorization
is related to High-Risk Technology Assets, Applications and/or Services (TAAS) Categorization
is related to Categorize Artificial Intelligence (AI)-Related Technology Assets, Applications and/or Services (TAAS)
is related to Data Action Mapping
is related to Unattended End-User Equipment
is related to Physical Tampering Detection
is related to Technical Debt Reviews
is related to Business Continuity & Disaster Recovery (BC/DR) Plans
is related to Contingency Plan Root Cause Analysis (RCA) & Lessons Learned
is related to Alternate Processing Site
is related to Technology Assets, Applications and/or Services (TAAS) Recovery & Reconstitution
is related to Resilient Data Backup Architecture
is related to Cryptographic Protection
is related to Redundant Copies of Business-Critical Data
is related to Transaction Recovery
is related to Data Backup Access
is related to Testing for Reliability & Integrity
is related to Data Backup Modification and/or Destruction
is related to Dual Approval For High-Impact Environments
is related to Control Functionality Verification
is related to Emergency Changes
is related to Cloud Infrastructure Onboarding
is related to Multi-Tenant Environments
is related to Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Authorized Individuals For Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Sensitive / Regulated Data On Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Conformity Assessment
is related to Non-Conformity Oversight
is related to Configuration Management Program
is related to Baseline Tailoring
is related to Session Lock
is related to Pattern-Hiding Displays
is related to Session Termination
is related to Non-Console Administrative Access
is related to Wireless Access Authentication & Encryption
is related to Approved Configuration Deviations
is related to Respond To Unauthorized Changes
is related to Software Usage Restrictions
is related to Restrict Roles Permitted To Install Software
is related to Open Source Software
is related to Hypervisor Access
is related to Automated Tools for Real-Time Event Log & Security-Relevant Telemetry Analysis
is related to Correlate Monitoring Information
is related to Deactivated Account Activity
is related to Inbound & Outbound Communications Traffic
is related to Network Intrusion Detection & Prevention Systems (NIDS & NIPS) Monitoring
is related to File Integrity Monitoring (FIM)
is related to Cryptographic Cipher Suites and Protocols Inventory
is related to Public Key Infrastructure (PKI)
is related to Symmetric Keys
is related to Asymmetric Keys
is related to Control & Distribution of Cryptographic Keys
is related to Sensitive / Regulated Data Governance
is related to Sensitive Data Inventories
is related to Sensitive / Regulated Data Sharing Decisions
is related to Sensitive / Regulated Data Access Mapping
is related to Making Sensitive / Regulated Data Unreadable In Storage
is related to Media Transportation
is related to Media Transportation Custodians
is related to Sanitization of Sensitive / Regulated Data
is related to Portable Storage Devices
is related to Use of External Technology Assets, Applications and/or Services (TAAS)
is related to Geographic Data Location
is related to Internet of Things (IOT)
is related to Operational Technology (OT)
is related to Operating Environment Certification
is related to Safe Operations
is related to Proximity Sensor
is related to Automatic Endpoint Protection Mechanism Updates
is related to Host Intrusion Detection and Prevention Systems (HIDS / HIPS)
is related to Roles With Special Protection Measures
is related to Social Media & Social Networking Restrictions
is related to Use of Critical Technologies
is related to Use of Mobile Devices
is related to Personnel Sanctions
is related to Personnel Transfer
is related to Personnel Termination
is related to Asset Collection
is related to High-Risk Terminations
is related to Replay-Resistant Authentication
is related to In-Person or Trusted Third-Party Registration
is related to Authorized Accounts
is related to Removal of Temporary / Emergency Accounts
is related to User Identity (ID) Management
is related to Standardized Identifier Management (User Names)
is related to Privileged Account Identifiers
is related to Events Requiring Authenticator Change
is related to Password-Based Authentication
is related to PKI-Based Authentication
is related to Hardware Token-Based Authentication
is related to Use of Privileged Utility Programs
is related to Revocation of Access Authorizations
is related to Prohibit Non-Privileged Users from Executing Privileged Functions
is related to Authorize Access to Security Functions
is related to Non-Privileged Access for Non-Security Functions
is related to Auditing Use of Privileged Functions
is related to Identification & Authentication for Organizational Users
is related to Identification & Authentication for Non-Organizational Users
is related to Identification & Authentication for Devices
is related to Access Control For Mobile Devices
is related to Identification & Authentication for Third-Party Technology Assets, Applications and/or Services (TAAS)
is related to Privileged Access by Non-Organizational Users
is related to Multi-Factor Authentication (MFA)
is related to Phishing-Resistant Multi-Factor Authentication (MFA)
is related to Multi-Factor Authentication (MFA) For Network Access to Privileged Accounts
is related to Incident Response Operations
is related to Automated Reporting
is related to Incident Response Capabilities Testing
is related to Integrated Security Incident Response Team (ISIRT)
is related to Chain of Custody & Forensics
is related to Licensed Forensic Investigators
is related to Regulatory & Law Enforcement Contacts
is related to Incident Stakeholder Reporting
is related to Cyber Incident Reporting for Sensitive / Regulated Data
is related to Assessment Boundaries
is related to Assessor Independence
is related to Third-Party Assessment Reciprocity
is related to Capabilities Deficiency Tracking
is related to Maintenance Operations
is related to Timely Maintenance
is related to Prevent Unauthorized Removal
is related to Remote Maintenance
is related to Remote Maintenance Notifications
is related to Remote Maintenance Disconnect Verification
is related to Remote Maintenance Cryptographic Protection
is related to Auditing Remote Maintenance
is related to Authorized Maintenance Personnel
is related to Remote Purging
is related to Mobile Device Tampering
is related to Human Reviews
is related to Out-of-Band Channels
is related to Virtual Local Area Network (VLAN) Separation
is related to Architecture & Provisioning for Name / Address Resolution Service
is related to Secure Name / Address Resolution Service (Recursive or Caching Resolver)
is related to Domain Registrar Security
is related to DNS & Content Filtering
is related to Denial of Service (DoS) Protection
is related to Wireless Networking
is related to Wireless Networking Authentication & Encryption
is related to Remote Access Pathways
is related to Remote Access Cryptographic Protections
is related to Network Intrusion Detection / Prevention Systems (NIDS / NIPS)
is related to Demilitarized Zones (DMZ)
is related to Application Programming Interface (API) Security
is related to End-User Messaging Technologies
is related to Physical & Environmental Protections
is related to Intrusion Alarms / Surveillance Equipment
is related to Visitor Control
is related to Equipment Siting & Protection
is related to Transmission Medium Security
is related to Supporting Utilities
is related to Fire Detection Devices
is related to Temperature & Humidity Controls Monitoring
is related to Updating Personal Data (PD) Process
is related to Reasonable Data Privacy Practices
is related to Information Sharing With Third Parties
is related to Security, Compliance & Resilience Requirements Definition
is related to Risk Tolerance
is related to Risk Threshold
is related to Risk Appetite
is related to Impact-Level Prioritization
is related to Risk Identification
is related to Risk Ranking
is related to Risk Response
is related to Risk Treatment Options
is related to Risk Treatment Plan (RTP)
is related to Documented Alternatives
is related to Compensating Countermeasures
is related to Data Protection Impact Assessment (DPIA)
is related to Supply Chain Risk Assessment (SCRA)
is related to Risk Monitoring
is related to Alignment With Enterprise Architecture
is related to Non-Persistence
is related to System Use Notification (Logon Banner)
is related to Standardized Microsoft Windows Banner
is related to Truncated Banner
is related to Clock Synchronization
is related to Security Concept Of Operations (CONOPS)
is related to Standardized Operating Procedures (SOP)
is related to System Administrative Processes
is related to Database Administrative Processes
is related to Sensitive / Regulated Data Storage, Handling & Processing
is related to Privileged User Training
is related to Suspicious Communications & Anomalous System Behavior
is related to Security, Compliance & Resilience Training Records
is related to Software Assurance Maturity Model (SAMM)
is related to Secure Settings By Default
is related to Criticality Analysis During Development
is related to Continuous Monitoring Plan
is related to Minimum Viable Product (MVP) Security Requirements
is related to Insecure Ports, Protocols & Services
is related to Input Data Validation
is related to Error Handling
is related to Malware Testing Prior to Release
is related to Access to Program Source Code
is related to Security, Compliance & Resilience Testing Throughout Development
is related to Static Code Analysis
is related to Dynamic Code Analysis
is related to Application Penetration Testing
is related to Developer Threat Analysis & Flaw Remediation
is related to Developer-Provided Training
is related to Hardware Bill of Materials (HBOM)
is related to Indentured Bill of Materials (IBOM)
is related to Software Bill of Materials (SBOM)
is related to Supply Chain Risk Management (SCRM)
is related to Limit Potential Harm
is related to Adequate Supply
is related to Third-Party Risk Assessments & Approvals
is related to Third-Party Personnel Security
is related to Contract Flow-Down Requirements
is related to Review of Third-Party Services
is related to Third-Party Deficiency Remediation
is related to Break Clauses
is related to Security Compromise Notification Agreements
is related to Third-Party Access Revocation
is related to Vulnerability & Patch Management Program (VPMP)
is related to Centralized Management of Flaw Remediation Processes
is related to Software Patch Integrity
is related to Automated Remediation Status
is related to Vulnerability Scanning
is related to Privileged Access For Vulnerability Scanning Tools
is related to Vulnerability Trend Analysis
is related to Review Historical Event logs
is related to External Vulnerability Assessment
is related to Internal Vulnerability Assessment
is related to Penetration Testing
is related to Web Security Standard
is related to Web Application Framework
is related to Unauthorized Code On Web Pages