Changes

Sous-tickets

Liens
Intitulé	Description
New version: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 47 new, 1591 changed, 757 removed, 57494 links	New version: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 47 new, 1591 changed, 757 removed, 57494 links Document: Secure Controls Framework (SCF) (https://raw.githubusercontent.com/securecontrolsframework/securecontrolsframework/main/secure-controls-framework-scf-2026-3.xlsx) Version: 2026.3-86f09c716a Project: SCF Import: #482, 20.10.2026 12:17, scf The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Taken over directly (additional fields, HTML of an unchanged text): 52 issues. Review: 0 open, 59889 applied, 0 rejected. New sections (47) Natural Threat [applied] NT Drought & Water Shortage [applied] NT-1 Earthquakes [applied] NT-2 Fire & Wildfires [applied] NT-3 Floods [applied] NT-4 Hurricanes & Tropical Storms [applied] NT-5 Landslides & Debris Flow [applied] NT-6 Pandemic (Disease) Outbreaks [applied] NT-7 Severe Weather [applied] NT-8 Space Weather [applied] NT-9 Thunderstorms & Lightning [applied] NT-10 Tornadoes [applied] NT-11 Tsunamis [applied] NT-12 Volcanoes [applied] NT-13 Winter Storms & Extreme Cold [applied] NT-14 Man-Made Threat [applied] MT Civil or Political Unrest [applied] MT-1 Malicious Cyber Activity [applied] MT-2 Hazardous Materials Emergencies [applied] MT-3 Nuclear, Biological and Chemical (NBC) Weapons [applied] MT-4 Physical Crime [applied] MT-5 Terrorism & Armed Attacks [applied] MT-6 Utility Service Disruption [applied] MT-7 Dysfunctional Management Practices [applied] MT-8 Human Error [applied] MT-9 Technical / Mechanical Failure [applied] MT-10 Statutory / Regulatory / Contractual Change [applied] MT-11 Data Quality Degradation / Data Poisoning [applied] MT-12 Artificial Intelligence & Autonomous Technologies (AAT) System Failure or Unintended Behavior [applied] MT-13 Fraud, Corruption and/or Intentional Criminal Conduct [applied] MT-14 Conflict of Interest (COI) / Undue Influence / Insider Misconduct [applied] MT-15 Economic Shock / Market Disruption [applied] MT-16 Foreign Ownership, Control, or Influence (FOCI) [applied] MT-17 Geopolitical Conflict / Government Intervention [applied] MT-18 Sanctions / Trade Restriction Disruption [applied] MT-19 Counterfeit / Non-Conforming Products [applied] MT-20 Hazardous / Degraded Operational Environment [applied] MT-21 Manufacturing Capacity / Supply Disruption [applied] MT-22 Product Defect / Design Failure [applied] MT-23 Supplier Financial Distress / Insolvency [applied] MT-24 Workforce Shortage / Loss of Critical Skills / Labor Disruption [applied] MT-25 Transportation / Logistics Disruption [applied] MT-26 Infrastructure Failure / Degradation [applied] MT-27 Harvest Now / Decrypt Later (HNDL) [applied] MT-28 Adversarial Artificial Intelligence (AI) Attack [applied] MT-29 Operational Technology (OT) / Industrial Control System (ICS) Attack [applied] MT-30 Cryptographic Compromise / Cryptanalytic Capability Advancement [applied] MT-31 Changed sections (1591) Security, Compliance & Resilience Governance Policy – text [applied] GOV-01 Security, Compliance & Resilience Program (SCRP) – text [applied] GOV-02 Centralized Management of Security, Compliance & Resilience Controls – text [applied] GOV-03 Secure Practices Alignment Justification – text [applied] GOV-03.1 Standardized Terminology – text [applied] GOV-03.2 Control Objectives – text [applied] GOV-03.3 Assessment Objectives (AO) – text [applied] GOV-03.4 Publishing Security, Compliance & Resilience Documentation – text [applied] GOV-04 Periodic Review & Update of Security, Compliance & Resilience Program – text [applied] GOV-04.1 Exception Management – text [applied] GOV-04.2 Periodic Review of Exceptions – text [applied] GOV-04.3 Assigned Security, Compliance & Resilience Responsibilities – text [applied] GOV-05 Stakeholder Accountability Structure – text [applied] GOV-05.1 Authoritative Chain of Command – text [applied] GOV-05.2 Defining Business Context & Mission – text [applied] GOV-06 Materiality Determination – text [applied] GOV-07 High Value Assets (HVAs) – text [applied] GOV-08 Steering Committee & Program Oversight – text [applied] GOV-09 Status Reporting To Governing Body – text [applied] GOV-09.1 Business As Usual (BAU) Security, Compliance & Resilience Practices – text [applied] GOV-10 Operationalizing Security, Compliance & Resilience Capabilities – text [applied] GOV-11 Select Controls – text [applied] GOV-11.1 Implement Controls – text [applied] GOV-11.2 Assess Controls – text [applied] GOV-11.3 Authorize Technology Assets, Applications and/or Services (TAAS) – text [applied] GOV-11.4 Monitor Controls – text [applied] GOV-11.5 Measures of Performance – text [applied] GOV-12 Key Performance Indicators (KPIs) – text [applied] GOV-12.1 Key Risk Indicators (KRIs) – text [applied] GOV-12.2 Forced Technology Transfer (FTT) – text [applied] GOV-13 State-Sponsored Espionage – text [applied] GOV-14 Contacts With Authorities – text [applied] GOV-15 Contacts With Groups & Associations – text [applied] GOV-16 Quality Management System (QMS) – text [applied] GOV-17 Assurance – text [applied] GOV-18 Mergers, Acquisitions & Divestitures (MA&D) – text [applied] GOV-19 Virtual Data Room (VDR) – text [applied] GOV-19.1 Artificial Intelligence & Autonomous Technologies Policy – text [applied] AAT-01 Artificial Intelligence (AI) & Autonomous Technologies Governance – text [applied] AAT-02 AI & Autonomous Technologies Mission and Goals Definition – text [applied] AAT-03 AI & Autonomous Technologies Value Sustainment – text [applied] AAT-03.1 AI & Autonomous Technologies Context Definition – text [applied] AAT-04 AI & Autonomous Technologies-Related Legal Requirements Identification – text [applied] AAT-04.1 Assigned Responsibilities for AI & Autonomous Technologies – text [applied] AAT-05 Trustworthy AI & Autonomous Technologies – text [applied] AAT-06 AI & Autonomous Technologies Continuous Improvements – text [applied] AAT-06.1 Situational Awareness of AI & Autonomous Technologies In Use – text [applied] AAT-07 AI Model & Agent Inventory & Lifecycle Management – text [applied] AAT-07.1 Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization – text [applied] AAT-07.2 AI & Autonomous Technologies Internal Controls – text [applied] AAT-08 Adequate Protections For AI & Autonomous Technologies – text [applied] AAT-08.1 AI & Autonomous Technologies Impact Assessment – text [applied] AAT-09 AI & Autonomous Technologies Risk Profiling – text [applied] AAT-10 AI & Autonomous Technologies Risk Mapping – text [applied] AAT-10.1 AI & Autonomous Technologies Risk Management Decisions – text [applied] AAT-11 AI & Autonomous Technologies Likelihood & Impact Risk Analysis – text [applied] AAT-11.1 AI & Autonomous Technologies High Risk Designations – text [applied] AAT-11.2 AI Threat Modeling & Risk Assessment – text [applied] AAT-12 Novel Risk Assessment Methods & Technologies – text [applied] AAT-12.1 AI & Autonomous Technologies Risk Response – text [applied] AAT-13 AI & Autonomous Technologies Risk Tracking Approaches – text [applied] AAT-13.1 Fine Tuning Risk Mitigation – text [applied] AAT-13.2 Responsibility To Supersede, Deactivate and/or Disengage AI & Autonomous Technologies – text [applied] AAT-13.3 AI & Autonomous Technologies Business Case – text [applied] AAT-14 AI & Autonomous Technologies Potential Benefits Analysis – text [applied] AAT-14.1 AI & Autonomous Technologies Potential Costs Analysis – text [applied] AAT-14.2 AI & Autonomous Technologies Targeted Application Scope – text [applied] AAT-14.3 AI & Autonomous Technologies Cost / Benefit Mapping – text [applied] AAT-14.4 Model & AI Agent Documentation – text [applied] AAT-15 AI & Autonomous Technologies Output Marking – text [applied] AAT-16 Release Owner Gate (ROG) For AI-Augmented Content – text [applied] AAT-17 AI & Autonomous Technologies Output Filtering – text [applied] AAT-17.1 Human Moderation of AI & Autonomous Technologies-Generated Content – text [applied] AAT-17.2 AI & Autonomous Technologies Intellectual Property Infringement Protections – text [applied] AAT-18 Data Source Identification – text [applied] AAT-18.1 Data Source Integrity – text [applied] AAT-18.2 Data Source Lineage & Origin Disclosure – text [applied] AAT-18.3 Digital Content Modification Logging – text [applied] AAT-18.4 Training Data Source & Integrity – text [applied] AAT-18.5 Prohibit Training – text [applied] AAT-18.6 AI & Autonomous Technologies Harm Prevention – text [applied] AAT-19 AI & Autonomous Technologies Human Subject Protections – text [applied] AAT-19.1 AI & Autonomous Technologies Environmental Impact & Sustainability – text [applied] AAT-19.2 Previously Unknown AI & Autonomous Technologies Threats & Risks – text [applied] AAT-19.3 AI & Autonomous Technologies Conformity – text [applied] AAT-20 Manipulative or Deceptive Techniques – text [applied] AAT-20.1 Materially Distorting Behaviors – text [applied] AAT-20.2 Social Scoring – text [applied] AAT-20.3 Detrimental or Unfavorable Treatment – text [applied] AAT-20.4 Risk and Criminal Profiling – text [applied] AAT-20.5 Populating Facial Recognition Databases – text [applied] AAT-20.6 Emotion Inference – text [applied] AAT-20.7 Biometric Categorization – text [applied] AAT-20.8 AI & Autonomous Technologies Requirements Definitions – text [applied] AAT-21 AI & Autonomous Technologies Fairness & Bias – text [applied] AAT-22 AI & Autonomous Technologies Knowledge Limits – text [applied] AAT-23 AI & Autonomous Technologies Development Practices – text [applied] AAT-24 AI & Autonomous Technologies Transparency – text [applied] AAT-24.1 AI & Autonomous Technologies Implementation Documentation – text [applied] AAT-24.2 AI & Autonomous Technologies Human Domain Knowledge Reliance – text [applied] AAT-24.3 AI & Autonomous Technologies Implementation Tasks Definition – text [applied] AAT-25 Real World Testing of AI & Autonomous Technologies – text [applied] AAT-26 AI & Autonomous Technologies Testing Techniques – text [applied] AAT-27 Generative Artificial Intelligence (GAI) Identification – text [applied] AAT-27.1 AI & Autonomous Technologies Capabilities Testing – text [applied] AAT-27.2 Real-World Testing – text [applied] AAT-27.3 Documenting Testing Guidance – text [applied] AAT-27.4 Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV) – text [applied] AAT-28 AI TEVV Trustworthiness Assessment – text [applied] AAT-28.1 AI TEVV Tools – text [applied] AAT-28.2 AI TEVV Trustworthiness Demonstration – text [applied] AAT-28.3 AI TEVV Safety Demonstration – text [applied] AAT-28.4 AI TEVV Security & Resiliency Assessment – text [applied] AAT-28.5 AI TEVV Transparency & Accountability Assessment – text [applied] AAT-28.6 AI TEVV Privacy Assessment – text [applied] AAT-28.7 AI TEVV Fairness & Bias Assessment – text [applied] AAT-28.8 AI & Autonomous Technologies Model Validation – text [applied] AAT-28.9 AI TEVV Comparable Deployment Settings – text [applied] AAT-28.10 AI TEVV Empirically Validated Methods – text [applied] AAT-28.11 AI TEVV Benchmarking Content Provenance – text [applied] AAT-28.12 AI TEVV Model Collapse Mitigations – text [applied] AAT-28.13 AI TEVV Third-Party Risk Management – text [applied] AAT-28.14 AI TEVV Results Evaluation – text [applied] AAT-29 AI TEVV Effectiveness – text [applied] AAT-29.1 AI TEVV Reporting – text [applied] AAT-30 AI & Autonomous Technologies Residual Risks – text [applied] AAT-30.1 AI & Autonomous Technologies Viability Decisions – text [applied] AAT-30.2 AI TEVV Post-Deployment Monitoring – text [applied] AAT-31 Updating AI & Autonomous Technologies – text [applied] AAT-32 Robust Stakeholder Engagement for AI & Autonomous Technologies – text [applied] AAT-33 AI & Autonomous Technologies Stakeholder Feedback Integration – text [applied] AAT-33.1 AI & Autonomous Technologies Ongoing Assessments – text [applied] AAT-33.2 AI & Autonomous Technologies End User Feedback – text [applied] AAT-33.3 AI & Autonomous Technologies Incident & Error Reporting – text [applied] AAT-33.4 AI & Autonomous Technologies Stakeholder Diversity – text [applied] AAT-34 AI & Autonomous Technologies Stakeholder Competencies – text [applied] AAT-34.1 AI & Autonomous Technologies Deployment – text [applied] AAT-35 AI & Autonomous Technologies Human Oversight – text [applied] AAT-35.1 AI & Autonomous Technologies Oversight Measures – text [applied] AAT-35.2 AI & Autonomous Technologies Separate Verification – text [applied] AAT-35.3 AI & Autonomous Technologies Oversight Functions Competency – text [applied] AAT-35.4 AI & Autonomous Technologies Data Relevance – text [applied] AAT-35.5 AI & Autonomous Technologies Irregularity Reporting – text [applied] AAT-35.6 AI & Autonomous Technologies Use Notification To Employees – text [applied] AAT-35.7 AI & Autonomous Technologies Use Notification To Users – text [applied] AAT-35.8 AI & Autonomous Technologies Production Monitoring – text [applied] AAT-36 AI & Autonomous Technologies Measurement Approaches – text [applied] AAT-36.1 Measuring AI & Autonomous Technologies Effectiveness – text [applied] AAT-36.2 Unmeasurable AI & Autonomous Technologies Risks – text [applied] AAT-36.3 Efficacy of AI & Autonomous Technologies Measurement – text [applied] AAT-36.4 AI & Autonomous Technologies Domain Expert Reviews – text [applied] AAT-36.5 AI & Autonomous Technologies Performance Changes – text [applied] AAT-36.6 Pre-Trained AI & Autonomous Technologies Models – text [applied] AAT-36.7 AI & Autonomous Technologies Event Logging – text [applied] AAT-36.8 Serious Incident Reporting For AI & Autonomous Technologies – text [applied] AAT-36.9 Serious Incident Root Cause Analysis (RCA) For AI & Autonomous Technologies – text [applied] AAT-36.10 Anomaly Detection & Human Oversight – text [applied] AAT-36.11 Human-in-the-Loop & Escalation – text [applied] AAT-36.12 Emergent Behavior & Collusion Protections – text [applied] AAT-36.13 Multi-Agent Trust & Communication Validation – text [applied] AAT-36.14 AI & Autonomous Technologies System Value Chain – text [applied] AAT-37 AI & Autonomous Technologies System Value Chain Fallbacks – text [applied] AAT-37.1 AI Model Resilience – text [applied] AAT-38 AI Model Pollution – text [applied] AAT-38.1 Cascading Hallucination Defense – text [applied] AAT-38.2 Resource Exhaustion & Denial of Service (DoS) Resilience – text [applied] AAT-38.3 AI Agent Governance – text [applied] AAT-39 Infrastructure Hardening & Isolation – text [applied] AAT-39.1 AI Agent Limitations – text [applied] AAT-39.2 Tool & Application Programming Interface (API) Invocation Controls – text [applied] AAT-39.3 AI Agent Orchestration Protocol Safeguards – text [applied] AAT-39.4 AI Agent Data Pipeline & Input Integrity – text [applied] AAT-39.5 AI Agent Privileged Role & Delegation Boundaries – text [applied] AAT-39.6 AI Agent Data Access Restrictions – text [applied] AAT-39.7 AI Agent Data Extraction – text [applied] AAT-39.8 AI Agent Identity & Impersonation Defense – text [applied] AAT-39.9 AI Agent Logic Integrity – text [applied] AAT-39.10 Sandboxing AI Agents – text [applied] AAT-39.11 AI Agent Prompt Injection Defense – text [applied] AAT-39.12 AI Agent Kill Switch / User Control – text [applied] AAT-39.13 AI Agent Adversarial & Red Team Testing – text [applied] AAT-39.14 AI Agent Self-Modification Controls – text [applied] AAT-39.15 Purging AI Agent Data – text [applied] AAT-39.16 AI Agent Delegation and Chaining Control – text [applied] AAT-39.17 AI Agent Behavioral Drift Detection – text [applied] AAT-39.18 AI Agent Action Authentication & Authorization – text [applied] AAT-39.19 AI Agent Transparency & Audit – text [applied] AAT-39.20 AI Agent Explainability – text [applied] AAT-39.21 AI Agent Ethics, Fairness & Bias Detection – text [applied] AAT-39.22 AI Agent Output Integrity & Verification – text [applied] AAT-39.23 AI Agent Resource Limiting – text [applied] AAT-39.24 Agentic Output Traceability & Repudiation – text [applied] AAT-40 AI Agent Logging – text [applied] AAT-40.1 AI Agent Session Management – text [applied] AAT-40.2 Human-in-the-Loop Workload & Manipulation – text [applied] AAT-41 Robotic Process Automation (RPA) – text [applied] AAT-42 Business Process Task Enumeration – text [applied] AAT-43 Asset Management Policy – text [applied] AST-01 Asset Governance – text [applied] AST-02 Standardized Naming Convention – text [applied] AST-03 … and 1391 more Sections no longer in the document (only marked, not deleted) (757) Publicly Accessible Content Reviews [applied] WEB-14 Unauthorized Code [applied] WEB-01.1 Independent Penetration Agent or Team [applied] VPM-07.1 Correlate Scanning Information [applied] VPM-06.9 Acceptable Discoverable Information [applied] VPM-06.8 Internal Vulnerability Assessment Scans [applied] VPM-06.7 External Vulnerability Assessment Scans [applied] VPM-06.6 Review Historical Event logs [applied] VPM-06.5 Trend Analysis [applied] VPM-06.4 Software Patch Integrity [applied] VPM-05.8 Out-of-Cycle Patching [applied] VPM-05.7 Pre-Deployment Patch Testing [applied] VPM-05.6 Removal of Previous Versions [applied] VPM-05.5 Automated Software & Firmware Updates [applied] VPM-05.4 Time To Remediate / Benchmarks For Corrective Action [applied] VPM-05.3 Automated Remediation Status [applied] VPM-05.2 Centralized Management of Flaw Remediation Processes [applied] VPM-05.1 Deferred Patching Decisions [applied] VPM-04.3 Flaw Remediation with Personal Data (PD) [applied] VPM-04.2 Stable Versions [applied] VPM-04.1 Vulnerability Exploitation Analysis [applied] VPM-03.1 Attack Surface Scope [applied] VPM-01.1 Security Disclosure Contact Information [applied] THR-06.1 Threat Intelligence Reporting [applied] THR-03.1 Third-Party Attestation (3PA) [applied] TPM-05.8 Break Clauses [applied] TPM-05.7 First-Party Declaration (1PD) [applied] TPM-05.6 Third-Party Scope Review [applied] TPM-05.5 Responsible, Accountable, Supportive, Consulted & Informed (RASCI) Matrix [applied] TPM-05.4 Third-Party Authentication Practices [applied] TPM-05.3 Contract Flow-Down Requirements [applied] TPM-05.2 Third-Party Processing, Storage and Service Locations [applied] TPM-04.4 Conflict of Interests [applied] TPM-04.3 Adequate Supply [applied] TPM-03.4 Processes To Address Weaknesses or Deficiencies [applied] TPM-03.3 Limit Potential Harm [applied] TPM-03.2 Acquisition Strategies, Tools & Methods [applied] TPM-03.1 Third-Party Inventories [applied] TPM-01.1 Product-Specific Risk Assessment Artifacts [applied] TDA-22.1 Technical Documentation Artifacts [applied] TDA-22 Hardware Integrity Verification [applied] TDA-14.2 Test Data Integrity [applied] TDA-10.1 Manual Code Review [applied] TDA-09.7 Secure Settings By Default [applied] TDA-09.6 Application Penetration Testing [applied] TDA-09.5 Malformed Input Testing [applied] TDA-09.4 Dynamic Code Analysis [applied] TDA-09.3 Static Code Analysis [applied] TDA-09.2 Continuous Monitoring Plan [applied] TDA-09.1 Software Bill of Materials (SBOM) [applied] TDA-04.2 Logging Syntax [applied] TDA-02.14 Reporting Exploitable Vulnerabilities [applied] TDA-02.13 Products With Digital Elements [applied] TDA-02.12 Disclosure of Vulnerabilities [applied] TDA-02.11 Product Testing & Reviews [applied] TDA-02.10 Ongoing Product Security Support [applied] TDA-02.9 Minimizing Attack Surfaces [applied] TDA-02.8 Security, Compliance & Resilience Representatives For Product Changes [applied] TDA-02.7 Insecure Ports, Protocols & Services [applied] TDA-02.6 Identification & Justification of Ports, Protocols & Services [applied] TDA-02.5 Pre-Established Secure Configurations [applied] TDA-02.4 Development Methods, Techniques & Processes [applied] TDA-02.3 Information Assurance Enabled Products [applied] TDA-02.2 Ports, Protocols & Services In Use [applied] TDA-02.1 DevSecOps [applied] TDA-01.4 Malware Testing Prior to Release [applied] TDA-01.3 Integrity Mechanisms for Software / Firmware Updates [applied] TDA-01.2 Product Management [applied] TDA-01.1 Counterintelligence Training [applied] SAT-03.9 Continuing Professional Education (CPE) - DevOps Personnel [applied] SAT-03.8 Continuing Professional Education (CPE) - Security, Compliance & Resilience Personnel [applied] SAT-03.7 Cyber Threat Environment [applied] SAT-03.6 Privileged Users [applied] SAT-03.5 Vendor Security, Compliance & Resilience Training [applied] SAT-03.4 Sensitive / Regulated Data Storage, Handling & Processing [applied] SAT-03.3 Suspicious Communications & Anomalous System Behavior [applied] SAT-03.2 Practical Exercises [applied] SAT-03.1 Social Engineering & Mining [applied] SAT-02.2 Simulated Cyber Attack Scenario Training [applied] SAT-02.1 Maintaining Workforce Development Relevancy [applied] SAT-01.1 Standardized Operating Procedures (SOP) [applied] OPS-01.1 Truncated Banner [applied] SEA-18.2 Standardized Microsoft Windows Banner [applied] SEA-18.1 Change Processing & Storage Locations [applied] SEA-14.2 Randomness [applied] SEA-14.1 Virtualization Techniques [applied] SEA-13.1 Limit Personal Data (PD) Dissemination [applied] SEA-09.1 Refresh from Trusted Sources [applied] SEA-08.1 Fail Safe [applied] SEA-07.3 Fail Secure [applied] SEA-07.2 Technology Lifecycle Management [applied] SEA-07.1 System Privileges Isolation [applied] SEA-04.4 Thread Separation [applied] SEA-04.3 Hardware Separation [applied] SEA-04.2 Security Function Isolation [applied] SEA-04.1 Application Partitioning [applied] SEA-03.2 System Partitioning [applied] SEA-03.1 Technical Debt Reviews [applied] SEA-02.3 Resilience Capabilities [applied] SEA-01.3 Achieving Resilience Requirements [applied] SEA-01.2 Centralized Management of Security, Compliance & Resilience Controls [applied] SEA-01.1 AI & Autonomous Technologies Supply Chain Impacts [applied] RSK-09.2 Supply Chain Risk Assessment [applied] RSK-09.1 Risk Treatment Plan (RTP) [applied] RSK-06.4 Risk Treatment Options [applied] RSK-06.3 Risk Assessment Stakeholder Involvement [applied] RSK-04.4 Instances Requiring A Risk Assessment [applied] RSK-04.3 Risk Assessment Methodology [applied] RSK-04.2 Risk Register [applied] RSK-04.1 Risk Catalog [applied] RSK-03.1 Impact-Level Prioritization [applied] RSK-02.1 Risk Appetite [applied] RSK-01.5 Risk Threshold [applied] RSK-01.4 Risk Tolerance [applied] RSK-01.3 Risk Management Resourcing [applied] RSK-01.2 Risk Framing [applied] RSK-01.1 Prioritization To Address Evolving Risks & Threats [applied] PRM-02.1 Targeted Capability Maturity Levels [applied] PRM-01.2 Strategic Plan & Objectives [applied] PRM-01.1 Automated Decision-Making Technology (ADMT) Transparency [applied] PRI-19.3 Automated Decision-Making Technology (ADMT) Opt-Out Consent [applied] PRI-19.2 Data Subject Communications Disclosure [applied] PRI-17.5 Data Subject Communications Metrics [applied] PRI-17.4 Data Subject Communications Documentation [applied] PRI-17.3 Notice of Financial Incentive [applied] PRI-17.2 Notification of Disclosure Request To Data Subject [applied] PRI-14.2 Accounting of Disclosures [applied] PRI-14.1 Enabling Data Subjects To Update Personal Data (PD) [applied] PRI-12.1 Data Analytics Bias [applied] PRI-10.2 Data Quality Automation [applied] PRI-10.1 Justification To Reject Disclosure Requests [applied] PRI-07.5 Reject Unauthenticated or Untrustworthy Disclosure Requests [applied] PRI-07.4 Obligation To Inform Third-Parties [applied] PRI-07.3 Joint Processing of Personal Data (PD) [applied] PRI-07.2 Data Subject Authentication [applied] PRI-06.8 Personal Data (PD) Exports [applied] PRI-06.7 Data Portability [applied] PRI-06.6 Right to Erasure [applied] PRI-06.5 User Feedback Management [applied] PRI-06.4 Appeal Adverse Decision [applied] PRI-06.3 Notice of Correction or Processing Change [applied] PRI-06.2 Correcting Inaccurate Personal Data (PD) [applied] PRI-06.1 Personal Data (PD) Formats [applied] PRI-05.8 Personal Data (PD) Categories [applied] PRI-05.7 Personal Data (PD) Inventory Automation Support [applied] PRI-05.6 Inventory of Personal Data (PD) [applied] PRI-05.5 Usage Restrictions of Personal Data (PD) [applied] PRI-05.4 Data Masking [applied] PRI-05.3 Personal Data (PD) Accuracy & Integrity [applied] PRI-05.2 Personal Data (PD) Collection Methods [applied] PRI-04.7 Re-Validate Collected Personal Data (PD) [applied] PRI-04.6 Validate Collected Personal Data (PD) [applied] PRI-04.5 Acquired Personal Data (PD) [applied] PRI-04.4 Identifiable Image Collection [applied] PRI-04.3 Primary Sources [applied] PRI-04.2 Authority To Collect, Process, Store & Share Personal Data (PD) [applied] PRI-04.1 Parent or Guardian Opt-In Consent For Minors [applied] PRI-03.13 Data Subject Opt-In Consent [applied] PRI-03.12 Communicating Processing Changes [applied] PRI-03.11 Cease Processing, Storing and/or Sharing Personal Data (PD) [applied] PRI-03.10 Continued Use of Personal Data (PD) [applied] PRI-03.9 Global Privacy Control (GPC) [applied] PRI-03.8 Active Participation By Data Subjects [applied] PRI-03.7 Authorized Agent [applied] PRI-03.6 Product or Service Delivery Restrictions [applied] PRI-03.5 Alternative Means To Deliver Privacy Notice [applied] PRI-02.14 Notice of Right To Limit [applied] PRI-02.13 Choice Architecture Testing [applied] PRI-02.12 Choice Architecture [applied] PRI-02.11 Symmetry In Choice [applied] PRI-02.10 Privacy Notice Formatting [applied] PRI-02.9 Purpose Compatibility [applied] PRI-02.8 Real-Time or Layered Notice [applied] PRI-02.7 Privacy Act Exemptions [applied] PRI-02.6 System of Records Notice (SORN) Review Process [applied] PRI-02.5 System of Records Notice (SORN) [applied] PRI-02.4 Computer Matching Agreements (CMA) [applied] PRI-02.3 Automated Data Management Processes [applied] PRI-02.2 Purpose Specification [applied] PRI-02.1 Reasonable Data Privacy Practices [applied] PRI-01.11 Financial Incentives For Personal Data (PD) [applied] PRI-01.10 Personal Data (PD) Process Manager [applied] PRI-01.9 Data Fiduciary [applied] PRI-01.8 Limiting Personal Data (PD) Disclosures [applied] PRI-01.7 Security of Personal Data (PD) [applied] PRI-01.6 Binding Corporate Rules (BCR) [applied] PRI-01.5 Data Protection Officer (DPO) [applied] PRI-01.4 Dissemination of Data Privacy Program Information [applied] PRI-01.3 Privacy Act Statements [applied] PRI-01.2 Chief Privacy Officer (CPO) [applied] PRI-01.1 Access Control for Output Devices [applied] PES-12.2 Automatic Fire Suppression [applied] PES-08.3 Fire Suppression Devices [applied] PES-08.2 Redundant Cabling [applied] PES-07.7 Automation Support for Water Damage Protection [applied] PES-07.6 Water Damage Protection [applied] PES-07.5 Emergency Lighting [applied] PES-07.4 Emergency Power [applied] PES-07.3 Emergency Shutoff [applied] PES-07.2 Visitor Access Revocation [applied] PES-06.6 … and 557 more New links (57494) Blocks → Failure to Achieve Strategic / Mission Objectives [applied] GOV-01 Blocks → Loss of Authorization / Certification / License [applied] GOV-01 Blocks → Inability to Demonstrate Due Diligence / Due Care [applied] GOV-01 Blocks → Unreliable Assurance / Decision Information [applied] GOV-01 Blocks → NT-1 [applied] GOV-01 Blocks → NT-2 [applied] GOV-01 Blocks → NT-3 [applied] GOV-01 Blocks → NT-4 [applied] GOV-01 Blocks → NT-5 [applied] GOV-01 Blocks → NT-6 [applied] GOV-01 Blocks → NT-7 [applied] GOV-01 Blocks → NT-8 [applied] GOV-01 Blocks → NT-9 [applied] GOV-01 Blocks → NT-10 [applied] GOV-01 Blocks → NT-11 [applied] GOV-01 Blocks → NT-12 [applied] GOV-01 Blocks → NT-13 [applied] GOV-01 Blocks → NT-14 [applied] GOV-01 Blocks → MT-2 [applied] GOV-01 Blocks → MT-8 [applied] GOV-01 Blocks → MT-9 [applied] GOV-01 Blocks → MT-11 [applied] GOV-01 Blocks → MT-14 [applied] GOV-01 Blocks → MT-15 [applied] GOV-01 Blocks → MT-25 [applied] GOV-01 Blocks → OIS-02.01B [applied] GOV-01 Blocks → Failure to Achieve Strategic / Mission Objectives [applied] GOV-02 Blocks → Loss of Authorization / Certification / License [applied] GOV-02 Blocks → Inability to Demonstrate Due Diligence / Due Care [applied] GOV-02 Blocks → Unreliable Assurance / Decision Information [applied] GOV-02 Blocks → Loss of Critical Knowledge / Capability [applied] GOV-02 Blocks → NT-1 [applied] GOV-02 Blocks → NT-2 [applied] GOV-02 Blocks → NT-3 [applied] GOV-02 Blocks → NT-4 [applied] GOV-02 Blocks → NT-5 [applied] GOV-02 Blocks → NT-6 [applied] GOV-02 Blocks → NT-7 [applied] GOV-02 Blocks → NT-8 [applied] GOV-02 Blocks → NT-9 [applied] GOV-02 Blocks → NT-10 [applied] GOV-02 Blocks → NT-11 [applied] GOV-02 Blocks → NT-12 [applied] GOV-02 Blocks → NT-13 [applied] GOV-02 Blocks → NT-14 [applied] GOV-02 Blocks → MT-2 [applied] GOV-02 Blocks → MT-8 [applied] GOV-02 Blocks → MT-9 [applied] GOV-02 Blocks → MT-10 [applied] GOV-02 Blocks → MT-11 [applied] GOV-02 Blocks → MT-12 [applied] GOV-02 Blocks → MT-14 [applied] GOV-02 Blocks → MT-15 [applied] GOV-02 Blocks → MT-16 [applied] GOV-02 Blocks → MT-25 [applied] GOV-02 Blocks → Article 5 Governance and organisation [applied] GOV-02 Blocks → Article 9 Protection and prevention [applied] GOV-02 Blocks → Article 16 Simplified ICT risk management framework [applied] GOV-02 Blocks → OIS-01.01B [applied] GOV-02 Blocks → OIS-01.02B [applied] GOV-02 Blocks → Failure to Achieve Strategic / Mission Objectives [applied] GOV-03 Blocks → Loss of Authorization / Certification / License [applied] GOV-03 Blocks → Inability to Demonstrate Due Diligence / Due Care [applied] GOV-03 Blocks → Unreliable Assurance / Decision Information [applied] GOV-03 Blocks → NT-1 [applied] GOV-03 Blocks → NT-2 [applied] GOV-03 Blocks → NT-3 [applied] GOV-03 Blocks → NT-4 [applied] GOV-03 Blocks → NT-5 [applied] GOV-03 Blocks → NT-6 [applied] GOV-03 Blocks → NT-7 [applied] GOV-03 Blocks → NT-8 [applied] GOV-03 Blocks → NT-9 [applied] GOV-03 Blocks → NT-10 [applied] GOV-03 Blocks → NT-11 [applied] GOV-03 Blocks → NT-12 [applied] GOV-03 Blocks → NT-13 [applied] GOV-03 Blocks → NT-14 [applied] GOV-03 Blocks → MT-2 [applied] GOV-03 Blocks → MT-8 [applied] GOV-03 Blocks → MT-9 [applied] GOV-03 Blocks → MT-10 [applied] GOV-03 Blocks → MT-11 [applied] GOV-03 Blocks → MT-12 [applied] GOV-03 Blocks → MT-14 [applied] GOV-03 Blocks → MT-15 [applied] GOV-03 Blocks → MT-16 [applied] GOV-03 Blocks → MT-25 [applied] GOV-03 Blocks → Contractual Default / Termination [applied] GOV-03.1 Blocks → Regulatory / Legal / Contractual Financial Liability [applied] GOV-03.1 Blocks → Failure to Achieve Strategic / Mission Objectives [applied] GOV-03.1 Blocks → Loss of Authorization / Certification / License [applied] GOV-03.1 Blocks → Failure to Support Business / Mission Objectives [applied] GOV-03.1 Blocks → Unaddressed Security / Compliance Exposure [applied] GOV-03.1 Blocks → Unperformed / Unowned Control Responsibilities [applied] GOV-03.1 Blocks → Uncontrolled Internal Security / Privacy Exposure [applied] GOV-03.1 Blocks → Uncontrolled Third-Party Security / Privacy Exposure [applied] GOV-03.1 Blocks → Lack of oversight of internal controls [applied] GOV-03.1 Blocks → Inability to Demonstrate Due Diligence / Due Care [applied] GOV-03.1 Blocks → Unreliable Assurance / Decision Information [applied] GOV-03.1 Blocks → NT-1 [applied] GOV-03.1 Blocks → NT-2 [applied] GOV-03.1 Blocks → NT-3 [applied] GOV-03.1 Blocks → NT-4 [applied] GOV-03.1 Blocks → NT-5 [applied] GOV-03.1 Blocks → NT-6 [applied] GOV-03.1 Blocks → NT-7 [applied] GOV-03.1 Blocks → NT-8 [applied] GOV-03.1 Blocks → NT-9 [applied] GOV-03.1 Blocks → NT-10 [applied] GOV-03.1 Blocks → NT-11 [applied] GOV-03.1 Blocks → NT-12 [applied] GOV-03.1 Blocks → NT-13 [applied] GOV-03.1 Blocks → NT-14 [applied] GOV-03.1 Blocks → MT-2 [applied] GOV-03.1 Blocks → MT-8 [applied] GOV-03.1 Blocks → MT-9 [applied] GOV-03.1 Blocks → MT-10 [applied] GOV-03.1 Blocks → MT-11 [applied] GOV-03.1 Blocks → MT-14 [applied] GOV-03.1 Blocks → MT-15 [applied] GOV-03.1 Blocks → MT-25 [applied] GOV-03.1 Blocks → OIS-01.01B [applied] GOV-03.1 Blocks → OIS-01.01AS [applied] GOV-03.1 Blocks → BCM-01.01B [applied] GOV-03.1 Blocks → Failure to Support Business / Mission Objectives [applied] GOV-03.2 Blocks → Unaddressed Security / Compliance Exposure [applied] GOV-03.2 Blocks → Unperformed / Unowned Control Responsibilities [applied] GOV-03.2 Blocks → Lack of oversight of internal controls [applied] GOV-03.2 Blocks → Inability to Demonstrate Due Diligence / Due Care [applied] GOV-03.2 Blocks → Unreliable Assurance / Decision Information [applied] GOV-03.2 Blocks → Lack of a security-minded workforce [applied] GOV-03.2 Blocks → NT-1 [applied] GOV-03.2 Blocks → NT-2 [applied] GOV-03.2 Blocks → NT-3 [applied] GOV-03.2 Blocks → NT-4 [applied] GOV-03.2 Blocks → NT-5 [applied] GOV-03.2 Blocks → NT-6 [applied] GOV-03.2 Blocks → NT-7 [applied] GOV-03.2 Blocks → NT-8 [applied] GOV-03.2 Blocks → NT-9 [applied] GOV-03.2 Blocks → NT-10 [applied] GOV-03.2 Blocks → NT-11 [applied] GOV-03.2 Blocks → NT-12 [applied] GOV-03.2 Blocks → NT-13 [applied] GOV-03.2 Blocks → NT-14 [applied] GOV-03.2 Blocks → MT-8 [applied] GOV-03.2 Blocks → MT-9 [applied] GOV-03.2 Blocks → MT-11 [applied] GOV-03.2 Blocks → MT-12 [applied] GOV-03.2 Blocks → MT-25 [applied] GOV-03.2 Blocks → Article 4 Definitions [applied] GOV-03.2 Blocks → Regulatory / Legal / Contractual Financial Liability [applied] GOV-03.3 Blocks → Loss of Authorization / Certification / License [applied] GOV-03.3 Blocks → Failure to Support Business / Mission Objectives [applied] GOV-03.3 Blocks → Unaddressed Security / Compliance Exposure [applied] GOV-03.3 Blocks → Unperformed / Unowned Control Responsibilities [applied] GOV-03.3 Blocks → Uncontrolled Internal Security / Privacy Exposure [applied] GOV-03.3 Blocks → Lack of oversight of internal controls [applied] GOV-03.3 Blocks → Inability to Demonstrate Due Diligence / Due Care [applied] GOV-03.3 Blocks → Unreliable Assurance / Decision Information [applied] GOV-03.3 Blocks → NT-1 [applied] GOV-03.3 Blocks → NT-2 [applied] GOV-03.3 Blocks → NT-3 [applied] GOV-03.3 Blocks → NT-4 [applied] GOV-03.3 Blocks → NT-5 [applied] GOV-03.3 Blocks → NT-6 [applied] GOV-03.3 Blocks → NT-7 [applied] GOV-03.3 Blocks → NT-8 [applied] GOV-03.3 Blocks → NT-9 [applied] GOV-03.3 Blocks → NT-10 [applied] GOV-03.3 Blocks → NT-11 [applied] GOV-03.3 Blocks → NT-12 [applied] GOV-03.3 Blocks → NT-13 [applied] GOV-03.3 Blocks → NT-14 [applied] GOV-03.3 Blocks → MT-2 [applied] GOV-03.3 Blocks → MT-8 [applied] GOV-03.3 Blocks → MT-9 [applied] GOV-03.3 Blocks → MT-10 [applied] GOV-03.3 Blocks → MT-11 [applied] GOV-03.3 Blocks → MT-14 [applied] GOV-03.3 Blocks → MT-15 [applied] GOV-03.3 Blocks → MT-25 [applied] GOV-03.3 Blocks → OIS-02.03B [applied] GOV-03.3 Blocks → Contractual Default / Termination [applied] GOV-03.4 Blocks → Regulatory / Legal / Contractual Financial Liability [applied] GOV-03.4 Blocks → Exposure from Unaddressed Vulnerabilities [applied] GOV-03.4 Blocks → Loss of Authorization / Certification / License [applied] GOV-03.4 Blocks → Failure to Support Business / Mission Objectives [applied] GOV-03.4 Blocks → Unaddressed Security / Compliance Exposure [applied] GOV-03.4 Blocks → Unperformed / Unowned Control Responsibilities [applied] GOV-03.4 Blocks → Uncontrolled Internal Security / Privacy Exposure [applied] GOV-03.4 Blocks → Uncontrolled Third-Party Security / Privacy Exposure [applied] GOV-03.4 Blocks → Lack of oversight of internal controls [applied] GOV-03.4 Blocks → Lack of oversight of third-party controls [applied] GOV-03.4 Blocks → Inability to Demonstrate Due Diligence / Due Care [applied] GOV-03.4 Blocks → Unreliable Assurance / Decision Information [applied] GOV-03.4 Blocks → NT-1 [applied] GOV-03.4 Blocks → NT-2 [applied] GOV-03.4 Blocks → NT-3 [applied] GOV-03.4 … and 57294 more Links not found (165) BCD-01 → Blocks C5:2026 C5:2026-5.14 BCD-02 → Blocks C5:2026 C5:2026-5.14 BCD-12 → Blocks MITREATTACK T1070.001 BCD-12 → Blocks MITREATTACK T1070.002 BCD-13 → Blocks MITREATTACK T1070.001 BCD-13 → Blocks MITREATTACK T1070.002 BCD-24 → Blocks MITREATTACK T1070.001 BCD-24 → Blocks MITREATTACK T1070.002 CHG-03 → Blocks MITREATTACK T1562.008 CHG-03 → Blocks MITREATTACK T1562.012 CHG-04.1 → Blocks MITREATTACK T1562 CHG-04.1 → Blocks MITREATTACK T1562.001 CHG-04.1 → Blocks MITREATTACK T1562.002 CHG-04.1 → Blocks MITREATTACK T1562.004 CHG-04.1 → Blocks MITREATTACK T1562.006 CHG-04.1 → Blocks MITREATTACK T1562.007 CHG-04.1 → Blocks MITREATTACK T1562.008 CHG-04.1 → Blocks MITREATTACK T1562.009 CHG-04.1 → Blocks MITREATTACK T1562.011 CHG-04.1 → Blocks MITREATTACK T1562.012 CPL-07 → Blocks MITREATTACK T1070.001 CPL-07 → Blocks MITREATTACK T1070.002 CPL-07 → Blocks MITREATTACK T1562 CPL-07 → Blocks MITREATTACK T1562.001 CPL-07 → Blocks MITREATTACK T1562.002 CPL-07 → Blocks MITREATTACK T1562.004 CPL-07 → Blocks MITREATTACK T1562.006 CFG-03 → Blocks MITREATTACK T1562 CFG-03 → Blocks MITREATTACK T1562.001 CFG-03 → Blocks MITREATTACK T1562.002 CFG-03 → Blocks MITREATTACK T1562.003 CFG-03 → Blocks MITREATTACK T1562.004 CFG-03 → Blocks MITREATTACK T1562.006 CFG-03 → Blocks MITREATTACK T1562.009 CFG-03 → Blocks MITREATTACK T1562.010 CFG-04 → Blocks MITREATTACK T1070.001 CFG-04 → Blocks MITREATTACK T1070.002 CFG-04 → Blocks MITREATTACK T1562 CFG-04 → Blocks MITREATTACK T1562.001 CFG-04 → Blocks MITREATTACK T1562.002 CFG-04 → Blocks MITREATTACK T1562.003 CFG-04 → Blocks MITREATTACK T1562.004 CFG-04 → Blocks MITREATTACK T1562.006 CFG-04 → Blocks MITREATTACK T1562.009 CFG-04 → Blocks MITREATTACK T1562.010 CFG-04 → Blocks MITREATTACK T1562.011 CFG-04 → Blocks MITREATTACK T1562.012 CFG-11 → Blocks MITREATTACK T1562.006 CFG-11 → Blocks MITREATTACK T1562.009 MON-02 → Blocks MITREATTACK T1070.001 MON-02 → Blocks MITREATTACK T1070.002 MON-02 → Blocks MITREATTACK T1562 MON-02 → Blocks MITREATTACK T1562.001 MON-02 → Blocks MITREATTACK T1562.002 MON-02 → Blocks MITREATTACK T1562.003 MON-02 → Blocks MITREATTACK T1562.004 MON-02 → Blocks MITREATTACK T1562.006 MON-02 → Blocks MITREATTACK T1562.010 MON-02 → Blocks MITREATTACK T1562.011 MON-02 → Blocks MITREATTACK T1562.012 CRY-05 → Blocks MITREATTACK T1562 CRY-05 → Blocks MITREATTACK T1562.010 CRY-06 → Blocks MITREATTACK T1562 CRY-06 → Blocks MITREATTACK T1562.006 CRY-06 → Blocks MITREATTACK T1562.010 CRY-09 → Blocks MITREATTACK T1521.003 DCH-27 → Blocks MITREATTACK T1070.001 DCH-27 → Blocks MITREATTACK T1070.002 DCH-37 → Blocks MITREATTACK T1070.001 DCH-37 → Blocks MITREATTACK T1070.002 END-04 → Blocks MITREATTACK T1070.001 END-04 → Blocks MITREATTACK T1070.002 END-04 → Blocks MITREATTACK T1562 END-04 → Blocks MITREATTACK T1562.001 END-04 → Blocks MITREATTACK T1562.002 END-04 → Blocks MITREATTACK T1562.004 END-04 → Blocks MITREATTACK T1562.006 END-04 → Blocks MITREATTACK T1562.011 END-11 → Blocks MITREATTACK T1070.001 END-11 → Blocks MITREATTACK T1070.002 END-11 → Blocks MITREATTACK T1562 END-11 → Blocks MITREATTACK T1562.001 END-11 → Blocks MITREATTACK T1562.002 END-11 → Blocks MITREATTACK T1562.004 END-11 → Blocks MITREATTACK T1562.006 END-11 → Blocks MITREATTACK T1562.009 END-11 → Blocks MITREATTACK T1562.010 END-11 → Blocks MITREATTACK T1562.011 END-11 → Blocks MITREATTACK T1562.012 HRS-14 → Blocks MITREATTACK T1070.001 HRS-14 → Blocks MITREATTACK T1070.002 HRS-14 → Blocks MITREATTACK T1562 HRS-14 → Blocks MITREATTACK T1562.001 HRS-14 → Blocks MITREATTACK T1562.002 HRS-14 → Blocks MITREATTACK T1562.004 HRS-14 → Blocks MITREATTACK T1562.006 HRS-14 → Blocks MITREATTACK T1562.007 HRS-14 → Blocks MITREATTACK T1562.008 HRS-14 → Blocks MITREATTACK T1562.009 IAC-02 → Blocks C5:2026 C5:2026-5.7 IAC-08 → Blocks MITREATTACK T1070.001 IAC-08 → Blocks MITREATTACK T1070.002 IAC-08 → Blocks MITREATTACK T1562 IAC-08 → Blocks MITREATTACK T1562.001 IAC-08 → Blocks MITREATTACK T1562.002 IAC-08 → Blocks MITREATTACK T1562.004 IAC-08 → Blocks MITREATTACK T1562.006 IAC-08 → Blocks MITREATTACK T1562.007 IAC-08 → Blocks MITREATTACK T1562.008 IAC-08 → Blocks MITREATTACK T1562.009 IAC-08 → Blocks MITREATTACK T1562.012 IAC-13.1 → Blocks MITREATTACK T1562 IAC-25 → Blocks MITREATTACK T1070.001 IAC-25 → Blocks MITREATTACK T1070.002 IAC-25 → Blocks MITREATTACK T1562 IAC-25 → Blocks MITREATTACK T1562.001 IAC-25 → Blocks MITREATTACK T1562.002 IAC-25 → Blocks MITREATTACK T1562.004 IAC-25 → Blocks MITREATTACK T1562.006 IAC-25 → Blocks MITREATTACK T1562.007 IAC-25 → Blocks MITREATTACK T1562.008 IAC-25 → Blocks MITREATTACK T1562.009 IAC-25 → Blocks MITREATTACK T1562.012 IAC-30 → Blocks MITREATTACK T1070.001 IAC-30 → Blocks MITREATTACK T1070.002 IAC-30 → Blocks MITREATTACK T1562 IAC-30 → Blocks MITREATTACK T1562.001 IAC-30 → Blocks MITREATTACK T1562.002 IAC-30 → Blocks MITREATTACK T1562.004 IAC-30 → Blocks MITREATTACK T1562.006 IAC-30 → Blocks MITREATTACK T1562.007 IAC-30 → Blocks MITREATTACK T1562.008 IAC-30 → Blocks MITREATTACK T1562.009 IAC-30 → Blocks MITREATTACK T1562.012 IAC-32 → Blocks MITREATTACK T1562 IAC-32 → Blocks MITREATTACK T1562.001 IAC-32 → Blocks MITREATTACK T1562.002 IAC-32 → Blocks MITREATTACK T1562.004 IAC-32 → Blocks MITREATTACK T1562.006 IAC-32 → Blocks MITREATTACK T1562.007 IAC-32 → Blocks MITREATTACK T1562.008 IAC-32 → Blocks MITREATTACK T1562.009 IAC-36 → Blocks MITREATTACK T1562.006 IAC-36 → Blocks MITREATTACK T1562.009 NET-24 → Blocks MITREATTACK T1070.001 NET-24 → Blocks MITREATTACK T1070.002 NET-26 → Blocks MITREATTACK T1070.001 NET-26 → Blocks MITREATTACK T1070.002 NET-29 → Blocks MITREATTACK T1562.006 NET-29 → Blocks MITREATTACK T1562.009 PRM-07 → Blocks MITREATTACK T1574.002 SEA-05 → Blocks MITREATTACK T1574.002 SEA-14 → Blocks MITREATTACK T1070.001 SEA-14 → Blocks MITREATTACK T1070.002 SEA-25 → Blocks MITREATTACK T1070.001 SEA-25 → Blocks MITREATTACK T1070.002 TDA-02 → Blocks MITREATTACK T1574.002 TDA-04 → Blocks MITREATTACK T1574.002 TDA-05 → Blocks MITREATTACK T1574.002 TDA-17 → Blocks MITREATTACK T1574.002 TDA-20 → Blocks MITREATTACK T1574.002 TDA-20.2 → Blocks MITREATTACK T1574.002 VPM-08 → Blocks MITREATTACK T1574.002 VPM-12 → Blocks MITREATTACK T1562 VPM-12 → Blocks MITREATTACK T1562.010 Links the source no longer names (they stay): 46757 GOV-01 → Blocks EULAW CELEX:32022R2554#art_5_1 GOV-01 → Blocks EULAW CELEX:32022R2554#art_9_4 GOV-01 → Blocks EULAW CELEX:32022R2554#art_16_1 GOV-01 → Blocks EULAW CELEX:32022R2554#art_16_2 GOV-01 → Relates SCF label_SCRMFocusTier3TACTICAL GOV-01 → Blocks SCF R-AC-1 GOV-01 → Blocks SCF R-AC-2 GOV-01 → Blocks SCF R-AC-3 GOV-01 → Blocks SCF R-AC-4 GOV-01 → Blocks SCF R-AM-1 GOV-01 → Blocks SCF R-AM-2 GOV-01 → Blocks SCF R-BC-1 GOV-01 → Blocks SCF R-BC-2 GOV-01 → Blocks SCF R-BC-3 GOV-01 → Blocks SCF R-BC-4 GOV-01 → Blocks SCF R-BC-5 GOV-01 → Blocks SCF R-EX-1 GOV-01 → Blocks SCF R-EX-3 GOV-01 → Blocks SCF R-EX-4 GOV-01 → Blocks SCF R-EX-6 GOV-01 → Blocks SCF R-EX-7 GOV-01 → Blocks SCF R-GV-8 GOV-01 → Blocks SCF R-IR-1 GOV-01 → Blocks SCF R-IR-2 GOV-01 → Blocks SCF R-IR-3 GOV-01 → Blocks SCF R-IR-4 GOV-01 → Blocks SCF R-SA-1 GOV-01 → Blocks SCF R-SC-1 GOV-01 → Blocks SCF R-SC-2 GOV-01 → Blocks SCF R-SC-3 GOV-01 → Blocks SCF R-SC-4 GOV-01 → Blocks SCF R-SC-5 GOV-01 → Blocks SCF R-SC-6 GOV-01 → Blocks EULAW CELEX:32022L2555#art_21 GOV-01.1 → Blocks EULAW CELEX:32022R2554#art_5_2 GOV-01.1 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-01.1 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-01.1 → Relates SCF label_cadence_Annual GOV-01.1 → Relates SCF label_PPTDFApplicability_Process GOV-01.1 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-01.1 → Blocks SCF R-AC-1 GOV-01.1 → Blocks SCF R-AC-2 GOV-01.1 → Blocks SCF R-AC-3 GOV-01.1 → Blocks SCF R-AC-4 GOV-01.1 → Blocks SCF R-AM-1 GOV-01.1 → Blocks SCF R-AM-2 GOV-01.1 → Blocks SCF R-BC-1 GOV-01.1 → Blocks SCF R-BC-2 GOV-01.1 → Blocks SCF R-BC-3 GOV-01.1 → Blocks SCF R-BC-4 GOV-01.1 → Blocks SCF R-BC-5 GOV-01.1 → Blocks SCF R-EX-1 GOV-01.1 → Blocks SCF R-EX-2 GOV-01.1 → Blocks SCF R-EX-3 GOV-01.1 → Blocks SCF R-EX-4 GOV-01.1 → Blocks SCF R-EX-5 GOV-01.1 → Blocks SCF R-EX-6 GOV-01.1 → Blocks SCF R-EX-7 GOV-01.1 → Blocks SCF R-GV-1 GOV-01.1 → Blocks SCF R-GV-2 GOV-01.1 → Blocks SCF R-GV-3 GOV-01.1 → Blocks SCF R-GV-4 GOV-01.1 → Blocks SCF R-GV-5 GOV-01.1 → Blocks SCF R-GV-6 GOV-01.1 → Blocks SCF R-GV-7 GOV-01.1 → Blocks SCF R-GV-8 GOV-01.1 → Blocks SCF R-IR-1 GOV-01.1 → Blocks SCF R-IR-2 GOV-01.1 → Blocks SCF R-IR-3 GOV-01.1 → Blocks SCF R-IR-4 GOV-01.1 → Blocks SCF R-SA-1 GOV-01.1 → Blocks SCF R-SA-2 GOV-01.1 → Blocks SCF R-SC-1 GOV-01.1 → Blocks SCF R-SC-2 GOV-01.1 → Blocks SCF R-SC-3 GOV-01.1 → Blocks SCF R-SC-4 GOV-01.1 → Blocks SCF R-SC-5 GOV-01.1 → Blocks SCF R-SC-6 GOV-01.1 → Relates SCF label_relativeControlWeighting_07 GOV-01.1 → Blocks EULAW CELEX:32022L2555#art_21 GOV-01.2 → Blocks EULAW CELEX:32022R2554#art_5_2 GOV-01.2 → Blocks EULAW CELEX:32022R2554#art_13_5 GOV-01.2 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-01.2 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-01.2 → Relates SCF label_cadence_Annual GOV-01.2 → Relates SCF label_PPTDFApplicability_Process GOV-01.2 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-01.2 → Blocks SCF R-AC-1 GOV-01.2 → Blocks SCF R-EX-3 GOV-01.2 → Blocks SCF R-EX-4 GOV-01.2 → Blocks SCF R-GV-1 GOV-01.2 → Blocks SCF R-GV-4 GOV-01.2 → Blocks SCF R-GV-5 GOV-01.2 → Blocks SCF R-GV-6 GOV-01.2 → Blocks SCF R-GV-7 GOV-01.2 → Blocks SCF R-SC-1 GOV-01.2 → Blocks SCF R-SC-2 GOV-01.2 → Blocks SCF R-SC-3 GOV-01.2 → Blocks SCF R-SC-4 GOV-01.2 → Blocks SCF R-SC-5 GOV-01.2 → Blocks SCF R-SC-6 GOV-01.2 → Relates SCF label_relativeControlWeighting_05 GOV-01.3 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-01.3 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-01.3 → Relates SCF label_cadence_Annual GOV-01.3 → Relates SCF label_PPTDFApplicability_Process GOV-01.3 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-01.3 → Blocks SCF R-AC-1 GOV-01.3 → Blocks SCF R-EX-3 GOV-01.3 → Blocks SCF R-EX-4 GOV-01.3 → Blocks SCF R-GV-1 GOV-01.3 → Blocks SCF R-GV-4 GOV-01.3 → Blocks SCF R-GV-5 GOV-01.3 → Blocks SCF R-GV-6 GOV-01.3 → Blocks SCF R-GV-7 GOV-01.3 → Blocks SCF R-SC-3 GOV-01.3 → Blocks SCF R-SC-4 GOV-01.3 → Blocks SCF R-SC-5 GOV-01.3 → Blocks SCF R-SC-6 GOV-01.3 → Relates SCF label_relativeControlWeighting_07 GOV-02 → Blocks EULAW CELEX:32022R2554#art_6_2 GOV-02 → Blocks EULAW CELEX:32022R2554#art_9_4 GOV-02 → Blocks SCF R-AC-1 GOV-02 → Blocks SCF R-AC-2 GOV-02 → Blocks SCF R-AC-3 GOV-02 → Blocks SCF R-AC-4 GOV-02 → Blocks SCF R-AM-1 GOV-02 → Blocks SCF R-AM-2 GOV-02 → Blocks SCF R-BC-1 GOV-02 → Blocks SCF R-BC-2 GOV-02 → Blocks SCF R-BC-3 GOV-02 → Blocks SCF R-BC-4 GOV-02 → Blocks SCF R-BC-5 GOV-02 → Blocks SCF R-EX-1 GOV-02 → Blocks SCF R-EX-3 GOV-02 → Blocks SCF R-EX-4 GOV-02 → Blocks SCF R-EX-6 GOV-02 → Blocks SCF R-EX-7 GOV-02 → Blocks SCF R-GV-8 GOV-02 → Blocks SCF R-IR-1 GOV-02 → Blocks SCF R-IR-2 GOV-02 → Blocks SCF R-IR-3 GOV-02 → Blocks SCF R-IR-4 GOV-02 → Blocks SCF R-SA-1 GOV-02 → Blocks SCF R-SC-1 GOV-02 → Blocks SCF R-SC-2 GOV-02 → Blocks SCF R-SC-3 GOV-02 → Blocks SCF R-SC-4 GOV-02 → Blocks SCF R-SC-5 GOV-02 → Blocks SCF R-SC-6 GOV-02 → Blocks EULAW CELEX:32016R0679#art_24 GOV-02.1 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-02.1 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-02.1 → Relates SCF label_SCRMFocusTier3TACTICAL GOV-02.1 → Relates SCF label_cadence_Annual GOV-02.1 → Relates SCF label_PPTDFApplicability_Process GOV-02.1 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-02.1 → Blocks SCF R-AC-1 GOV-02.1 → Blocks SCF R-AC-2 GOV-02.1 → Blocks SCF R-AC-3 GOV-02.1 → Blocks SCF R-AC-4 GOV-02.1 → Blocks SCF R-AM-1 GOV-02.1 → Blocks SCF R-AM-2 GOV-02.1 → Blocks SCF R-AM-3 GOV-02.1 → Blocks SCF R-BC-1 GOV-02.1 → Blocks SCF R-BC-2 GOV-02.1 → Blocks SCF R-BC-3 GOV-02.1 → Blocks SCF R-BC-4 GOV-02.1 → Blocks SCF R-BC-5 GOV-02.1 → Blocks SCF R-EX-1 GOV-02.1 → Blocks SCF R-EX-2 GOV-02.1 → Blocks SCF R-EX-3 GOV-02.1 → Blocks SCF R-EX-4 GOV-02.1 → Blocks SCF R-EX-5 GOV-02.1 → Blocks SCF R-EX-6 GOV-02.1 → Blocks SCF R-EX-7 GOV-02.1 → Blocks SCF R-GV-1 GOV-02.1 → Blocks SCF R-GV-2 GOV-02.1 → Blocks SCF R-GV-3 GOV-02.1 → Blocks SCF R-GV-4 GOV-02.1 → Blocks SCF R-GV-5 GOV-02.1 → Blocks SCF R-GV-6 GOV-02.1 → Blocks SCF R-GV-7 GOV-02.1 → Blocks SCF R-GV-8 GOV-02.1 → Blocks SCF R-IR-1 GOV-02.1 → Blocks SCF R-IR-2 GOV-02.1 → Blocks SCF R-IR-3 GOV-02.1 → Blocks SCF R-IR-4 GOV-02.1 → Blocks SCF R-SA-1 GOV-02.1 → Blocks SCF R-SA-2 GOV-02.1 → Blocks SCF R-SC-1 GOV-02.1 → Blocks SCF R-SC-2 GOV-02.1 → Blocks SCF R-SC-3 GOV-02.1 → Blocks SCF R-SC-4 GOV-02.1 → Blocks SCF R-SC-5 GOV-02.1 → Blocks SCF R-SC-6 GOV-02.1 → Relates SCF label_relativeControlWeighting_08 GOV-03 → Relates SCF label_SCRMFocusTier3TACTICAL GOV-03 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-03 → Blocks SCF R-AC-1 … and 46557 more
Assignments added: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 112 links	Assignments added: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 112 links Document: Secure Controls Framework (SCF) (https://raw.githubusercontent.com/securecontrolsframework/securecontrolsframework/main/secure-controls-framework-scf-2026-3.xlsx) Version: 2026.3-86f09c716a Project: SCF Import: #624, 20.10.2026 17:06, scf The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Review: 0 open, 112 applied, 0 rejected. New links (112) Blocks → BDSG § 64 Anforderungen an die Sicherheit der Datenverarbeitung [applied] BCD-02.1 Blocks → BDSG § 76 Protokollierung [applied] CPL-02 Blocks → BDSG § 77 Vertrauliche Meldung von Verstößen [applied] CPL-02 Blocks → BDSG § 79 Datenübermittlung bei geeigneten Garantien [applied] CPL-27 Blocks → BDSG § 48 Verarbeitung besonderer Kategorien personenbezogener Daten [applied] CRY-02 Blocks → BDSG § 64 Anforderungen an die Sicherheit der Datenverarbeitung [applied] DCH-16.2 Blocks → BDSG § 48 Verarbeitung besonderer Kategorien personenbezogener Daten [applied] DCH-36 Blocks → BDSG § 50 Verarbeitung zu archivarischen, wissenschaftlichen und statistischen Zwecken [applied] DCH-36 Blocks → BDSG § 64 Anforderungen an die Sicherheit der Datenverarbeitung [applied] DCH-36 Blocks → BDSG § 48 Verarbeitung besonderer Kategorien personenbezogener Daten [applied] HRS-06 Blocks → BDSG § 27 Datenverarbeitung zu wissenschaftlichen oder historischen Forschungszwecken und zu statistischen Zwecken [applied] IAC-06 Blocks → BDSG § 48 Verarbeitung besonderer Kategorien personenbezogener Daten [applied] IAC-06 Blocks → BDSG § 66 Benachrichtigung betroffener Personen bei Verletzungen des Schutzes personenbezogener Daten [applied] IRO-16 Blocks → BDSG § 65 Meldung von Verletzungen des Schutzes personenbezogener Daten an die oder den Bundesbeauftragten [applied] IRO-16.2 Blocks → BDSG § 65 Meldung von Verletzungen des Schutzes personenbezogener Daten an die oder den Bundesbeauftragten [applied] IRO-22 Blocks → BDSG § 26 Datenverarbeitung für Zwecke des Beschäftigungsverhältnisses [applied] PRI-02 Blocks → BDSG § 22 Verarbeitung besonderer Kategorien personenbezogener Daten [applied] PRI-03.2 Blocks → BDSG § 38 Datenschutzbeauftragte nichtöffentlicher Stellen [applied] PRI-03.2 Blocks → BDSG § 70 Verzeichnis von Verarbeitungstätigkeiten [applied] PRI-05 Blocks → BDSG § 76 Protokollierung [applied] PRI-05 Blocks → BDSG § 79 Datenübermittlung bei geeigneten Garantien [applied] PRI-05 Blocks → BDSG § 26 Datenverarbeitung für Zwecke des Beschäftigungsverhältnisses [applied] PRI-06 Blocks → BDSG § 48 Verarbeitung besonderer Kategorien personenbezogener Daten [applied] PRI-06 Blocks → BDSG § 51 Einwilligung [applied] PRI-06 Blocks → BDSG § 70 Verzeichnis von Verarbeitungstätigkeiten [applied] PRI-06 Blocks → BDSG § 72 Unterscheidung zwischen verschiedenen Kategorien betroffener Personen [applied] PRI-06 Blocks → BDSG § 73 Unterscheidung zwischen Tatsachen und persönlichen Einschätzungen [applied] PRI-06 Blocks → BDSG § 32 Informationspflicht bei Erhebung von personenbezogenen Daten bei der betroffenen Person [applied] PRI-09 Blocks → BDSG § 33 Informationspflicht, wenn die personenbezogenen Daten nicht bei der betroffenen Person erhoben wurden [applied] PRI-09 Blocks → BDSG § 35 Recht auf Löschung [applied] PRI-09 Blocks → BDSG § 36 Widerspruchsrecht [applied] PRI-09 Blocks → BDSG § 47 Allgemeine Grundsätze für die Verarbeitung personenbezogener Daten [applied] PRI-09 Blocks → BDSG § 48 Verarbeitung besonderer Kategorien personenbezogener Daten [applied] PRI-09 Blocks → BDSG § 57 Auskunftsrecht [applied] PRI-09 Blocks → BDSG § 58 Rechte auf Berichtigung und Löschung sowie Einschränkung der Verarbeitung [applied] PRI-09 Blocks → BDSG § 59 Verfahren für die Ausübung der Rechte der betroffenen Person [applied] PRI-09 Blocks → BDSG § 71 Datenschutz durch Technikgestaltung und datenschutzfreundliche Voreinstellungen [applied] PRI-09 Blocks → BDSG § 74 Verfahren bei Übermittlungen [applied] PRI-09 Blocks → BDSG § 80 Datenübermittlung ohne geeignete Garantien [applied] PRI-09 Blocks → BDSG § 83 Schadensersatz und Entschädigung [applied] PRI-09 Blocks → BDSG § 22 Verarbeitung besonderer Kategorien personenbezogener Daten [applied] PRI-10 Blocks → BDSG § 28 Datenverarbeitung zu im öffentlichen Interesse liegenden Archivzwecken [applied] PRI-10 Blocks → BDSG § 53 Datengeheimnis [applied] PRI-10 Blocks → BDSG § 62 Auftragsverarbeitung [applied] PRI-10 Blocks → BDSG § 64 Anforderungen an die Sicherheit der Datenverarbeitung [applied] PRI-10 Blocks → BDSG § 71 Datenschutz durch Technikgestaltung und datenschutzfreundliche Voreinstellungen [applied] PRI-10 Blocks → BDSG § 26 Datenverarbeitung für Zwecke des Beschäftigungsverhältnisses [applied] PRI-12 Blocks → BDSG § 49 Verarbeitung zu anderen Zwecken [applied] PRI-12 Blocks → BDSG § 50 Verarbeitung zu archivarischen, wissenschaftlichen und statistischen Zwecken [applied] PRI-12 Blocks → BDSG § 59 Verfahren für die Ausübung der Rechte der betroffenen Person [applied] PRI-13 Blocks → BDSG § 62 Auftragsverarbeitung [applied] PRI-15 Blocks → BDSG § 63 Gemeinsam Verantwortliche [applied] PRI-15 Blocks → BDSG § 78 Allgemeine Voraussetzungen [applied] PRI-15 Blocks → BDSG § 79 Datenübermittlung bei geeigneten Garantien [applied] PRI-15 Blocks → BDSG § 79 Datenübermittlung bei geeigneten Garantien [applied] PRI-16 Blocks → BDSG § 81 Sonstige Datenübermittlung an Empfänger in Drittstaaten [applied] PRI-16 Blocks → BDSG § 57 Auskunftsrecht [applied] PRI-17.1 Blocks → BDSG § 79 Datenübermittlung bei geeigneten Garantien [applied] PRI-17.1 Blocks → BDSG § 34 Auskunftsrecht der betroffenen Person [applied] PRI-18.2 Blocks → BDSG § 59 Verfahren für die Ausübung der Rechte der betroffenen Person [applied] PRI-18.2 Blocks → BDSG § 51 Einwilligung [applied] PRI-21 Blocks → BDSG § 55 Allgemeine Informationen zu Datenverarbeitungen [applied] PRI-21 Blocks → BDSG § 56 Benachrichtigung betroffener Personen [applied] PRI-21 Blocks → BDSG § 56 Benachrichtigung betroffener Personen [applied] PRI-22 Blocks → BDSG § 26 Datenverarbeitung für Zwecke des Beschäftigungsverhältnisses [applied] PRI-24 Blocks → BDSG § 27 Datenverarbeitung zu wissenschaftlichen oder historischen Forschungszwecken und zu statistischen Zwecken [applied] PRI-24 Blocks → BDSG § 51 Einwilligung [applied] PRI-24 Blocks → BDSG § 51 Einwilligung [applied] PRI-24.3 Blocks → BDSG § 22 Verarbeitung besonderer Kategorien personenbezogener Daten [applied] PRI-29 Blocks → BDSG § 24 Verarbeitung zu anderen Zwecken durch nichtöffentliche Stellen [applied] PRI-29 Blocks → BDSG § 33 Informationspflicht, wenn die personenbezogenen Daten nicht bei der betroffenen Person erhoben wurden [applied] PRI-29 Blocks → BDSG § 52 Verarbeitung auf Weisung des Verantwortlichen [applied] PRI-29 Blocks → BDSG § 27 Datenverarbeitung zu wissenschaftlichen oder historischen Forschungszwecken und zu statistischen Zwecken [applied] PRI-29.3 Blocks → BDSG § 47 Allgemeine Grundsätze für die Verarbeitung personenbezogener Daten [applied] PRI-30 Blocks → BDSG § 48 Verarbeitung besonderer Kategorien personenbezogener Daten [applied] PRI-30 Blocks → BDSG § 58 Rechte auf Berichtigung und Löschung sowie Einschränkung der Verarbeitung [applied] PRI-30 Blocks → BDSG § 62 Auftragsverarbeitung [applied] PRI-30 Blocks → BDSG § 75 Berichtigung und Löschung personenbezogener Daten sowie Einschränkung der Verarbeitung [applied] PRI-30 Blocks → BDSG § 56 Benachrichtigung betroffener Personen [applied] PRI-31 Blocks → BDSG § 47 Allgemeine Grundsätze für die Verarbeitung personenbezogener Daten [applied] PRI-31.1 Blocks → BDSG § 47 Allgemeine Grundsätze für die Verarbeitung personenbezogener Daten [applied] PRI-35 Blocks → BDSG § 74 Verfahren bei Übermittlungen [applied] PRI-35 Blocks → BDSG § 37 Automatisierte Entscheidungen im Einzelfall einschließlich Profiling [applied] PRI-36.1 Blocks → BDSG § 54 Automatisierte Einzelentscheidung [applied] PRI-36.1 Blocks → BDSG § 33 Informationspflicht, wenn die personenbezogenen Daten nicht bei der betroffenen Person erhoben wurden [applied] PRI-37 Blocks → BDSG § 34 Auskunftsrecht der betroffenen Person [applied] PRI-37 Blocks → BDSG § 57 Auskunftsrecht [applied] PRI-37 Blocks → BDSG § 58 Rechte auf Berichtigung und Löschung sowie Einschränkung der Verarbeitung [applied] PRI-37 Blocks → BDSG § 59 Verfahren für die Ausübung der Rechte der betroffenen Person [applied] PRI-37 Blocks → BDSG § 74 Verfahren bei Übermittlungen [applied] PRI-37 Blocks → BDSG § 75 Berichtigung und Löschung personenbezogener Daten sowie Einschränkung der Verarbeitung [applied] PRI-37.1 Blocks → BDSG § 57 Auskunftsrecht [applied] PRI-37.2 Blocks → BDSG § 57 Auskunftsrecht [applied] PRI-38 Blocks → BDSG § 59 Verfahren für die Ausübung der Rechte der betroffenen Person [applied] PRI-38 Blocks → BDSG § 34 Auskunftsrecht der betroffenen Person [applied] PRI-39 Blocks → BDSG § 35 Recht auf Löschung [applied] PRI-39 Blocks → BDSG § 57 Auskunftsrecht [applied] PRI-39 Blocks → BDSG § 59 Verfahren für die Ausübung der Rechte der betroffenen Person [applied] PRI-39 Blocks → BDSG § 57 Auskunftsrecht [applied] PRI-39.1 Blocks → BDSG § 58 Rechte auf Berichtigung und Löschung sowie Einschränkung der Verarbeitung [applied] PRI-39.1 Blocks → BDSG § 57 Auskunftsrecht [applied] PRI-39.3 Blocks → BDSG § 58 Rechte auf Berichtigung und Löschung sowie Einschränkung der Verarbeitung [applied] PRI-39.3 Blocks → BDSG § 75 Berichtigung und Löschung personenbezogener Daten sowie Einschränkung der Verarbeitung [applied] PRI-39.3 Blocks → BDSG § 58 Rechte auf Berichtigung und Löschung sowie Einschränkung der Verarbeitung [applied] PRI-39.4 Blocks → BDSG § 75 Berichtigung und Löschung personenbezogener Daten sowie Einschränkung der Verarbeitung [applied] PRI-39.4 Blocks → BDSG § 35 Recht auf Löschung [applied] PRI-40 Blocks → BDSG § 58 Rechte auf Berichtigung und Löschung sowie Einschränkung der Verarbeitung [applied] PRI-40 Blocks → BDSG § 58 Rechte auf Berichtigung und Löschung sowie Einschränkung der Verarbeitung [applied] PRI-42 Blocks → BDSG § 62 Auftragsverarbeitung [applied] PRI-43 Blocks → BDSG § 63 Gemeinsam Verantwortliche [applied] PRI-43 Blocks → BDSG § 67 Durchführung einer Datenschutz-Folgenabschätzung [applied] RSK-19 Blocks → BDSG § 48 Verarbeitung besonderer Kategorien personenbezogener Daten [applied] SAT-04 Links not found (165) BCD-01 → Blocks C5:2026 C5:2026-5.14 BCD-02 → Blocks C5:2026 C5:2026-5.14 BCD-12 → Blocks MITREATTACK T1070.001 BCD-12 → Blocks MITREATTACK T1070.002 BCD-13 → Blocks MITREATTACK T1070.001 BCD-13 → Blocks MITREATTACK T1070.002 BCD-24 → Blocks MITREATTACK T1070.001 BCD-24 → Blocks MITREATTACK T1070.002 CHG-03 → Blocks MITREATTACK T1562.008 CHG-03 → Blocks MITREATTACK T1562.012 CHG-04.1 → Blocks MITREATTACK T1562 CHG-04.1 → Blocks MITREATTACK T1562.001 CHG-04.1 → Blocks MITREATTACK T1562.002 CHG-04.1 → Blocks MITREATTACK T1562.004 CHG-04.1 → Blocks MITREATTACK T1562.006 CHG-04.1 → Blocks MITREATTACK T1562.007 CHG-04.1 → Blocks MITREATTACK T1562.008 CHG-04.1 → Blocks MITREATTACK T1562.009 CHG-04.1 → Blocks MITREATTACK T1562.011 CHG-04.1 → Blocks MITREATTACK T1562.012 CPL-07 → Blocks MITREATTACK T1070.001 CPL-07 → Blocks MITREATTACK T1070.002 CPL-07 → Blocks MITREATTACK T1562 CPL-07 → Blocks MITREATTACK T1562.001 CPL-07 → Blocks MITREATTACK T1562.002 CPL-07 → Blocks MITREATTACK T1562.004 CPL-07 → Blocks MITREATTACK T1562.006 CFG-03 → Blocks MITREATTACK T1562 CFG-03 → Blocks MITREATTACK T1562.001 CFG-03 → Blocks MITREATTACK T1562.002 CFG-03 → Blocks MITREATTACK T1562.003 CFG-03 → Blocks MITREATTACK T1562.004 CFG-03 → Blocks MITREATTACK T1562.006 CFG-03 → Blocks MITREATTACK T1562.009 CFG-03 → Blocks MITREATTACK T1562.010 CFG-04 → Blocks MITREATTACK T1070.001 CFG-04 → Blocks MITREATTACK T1070.002 CFG-04 → Blocks MITREATTACK T1562 CFG-04 → Blocks MITREATTACK T1562.001 CFG-04 → Blocks MITREATTACK T1562.002 CFG-04 → Blocks MITREATTACK T1562.003 CFG-04 → Blocks MITREATTACK T1562.004 CFG-04 → Blocks MITREATTACK T1562.006 CFG-04 → Blocks MITREATTACK T1562.009 CFG-04 → Blocks MITREATTACK T1562.010 CFG-04 → Blocks MITREATTACK T1562.011 CFG-04 → Blocks MITREATTACK T1562.012 CFG-11 → Blocks MITREATTACK T1562.006 CFG-11 → Blocks MITREATTACK T1562.009 MON-02 → Blocks MITREATTACK T1070.001 MON-02 → Blocks MITREATTACK T1070.002 MON-02 → Blocks MITREATTACK T1562 MON-02 → Blocks MITREATTACK T1562.001 MON-02 → Blocks MITREATTACK T1562.002 MON-02 → Blocks MITREATTACK T1562.003 MON-02 → Blocks MITREATTACK T1562.004 MON-02 → Blocks MITREATTACK T1562.006 MON-02 → Blocks MITREATTACK T1562.010 MON-02 → Blocks MITREATTACK T1562.011 MON-02 → Blocks MITREATTACK T1562.012 CRY-05 → Blocks MITREATTACK T1562 CRY-05 → Blocks MITREATTACK T1562.010 CRY-06 → Blocks MITREATTACK T1562 CRY-06 → Blocks MITREATTACK T1562.006 CRY-06 → Blocks MITREATTACK T1562.010 CRY-09 → Blocks MITREATTACK T1521.003 DCH-27 → Blocks MITREATTACK T1070.001 DCH-27 → Blocks MITREATTACK T1070.002 DCH-37 → Blocks MITREATTACK T1070.001 DCH-37 → Blocks MITREATTACK T1070.002 END-04 → Blocks MITREATTACK T1070.001 END-04 → Blocks MITREATTACK T1070.002 END-04 → Blocks MITREATTACK T1562 END-04 → Blocks MITREATTACK T1562.001 END-04 → Blocks MITREATTACK T1562.002 END-04 → Blocks MITREATTACK T1562.004 END-04 → Blocks MITREATTACK T1562.006 END-04 → Blocks MITREATTACK T1562.011 END-11 → Blocks MITREATTACK T1070.001 END-11 → Blocks MITREATTACK T1070.002 END-11 → Blocks MITREATTACK T1562 END-11 → Blocks MITREATTACK T1562.001 END-11 → Blocks MITREATTACK T1562.002 END-11 → Blocks MITREATTACK T1562.004 END-11 → Blocks MITREATTACK T1562.006 END-11 → Blocks MITREATTACK T1562.009 END-11 → Blocks MITREATTACK T1562.010 END-11 → Blocks MITREATTACK T1562.011 END-11 → Blocks MITREATTACK T1562.012 HRS-14 → Blocks MITREATTACK T1070.001 HRS-14 → Blocks MITREATTACK T1070.002 HRS-14 → Blocks MITREATTACK T1562 HRS-14 → Blocks MITREATTACK T1562.001 HRS-14 → Blocks MITREATTACK T1562.002 HRS-14 → Blocks MITREATTACK T1562.004 HRS-14 → Blocks MITREATTACK T1562.006 HRS-14 → Blocks MITREATTACK T1562.007 HRS-14 → Blocks MITREATTACK T1562.008 HRS-14 → Blocks MITREATTACK T1562.009 IAC-02 → Blocks C5:2026 C5:2026-5.7 IAC-08 → Blocks MITREATTACK T1070.001 IAC-08 → Blocks MITREATTACK T1070.002 IAC-08 → Blocks MITREATTACK T1562 IAC-08 → Blocks MITREATTACK T1562.001 IAC-08 → Blocks MITREATTACK T1562.002 IAC-08 → Blocks MITREATTACK T1562.004 IAC-08 → Blocks MITREATTACK T1562.006 IAC-08 → Blocks MITREATTACK T1562.007 IAC-08 → Blocks MITREATTACK T1562.008 IAC-08 → Blocks MITREATTACK T1562.009 IAC-08 → Blocks MITREATTACK T1562.012 IAC-13.1 → Blocks MITREATTACK T1562 IAC-25 → Blocks MITREATTACK T1070.001 IAC-25 → Blocks MITREATTACK T1070.002 IAC-25 → Blocks MITREATTACK T1562 IAC-25 → Blocks MITREATTACK T1562.001 IAC-25 → Blocks MITREATTACK T1562.002 IAC-25 → Blocks MITREATTACK T1562.004 IAC-25 → Blocks MITREATTACK T1562.006 IAC-25 → Blocks MITREATTACK T1562.007 IAC-25 → Blocks MITREATTACK T1562.008 IAC-25 → Blocks MITREATTACK T1562.009 IAC-25 → Blocks MITREATTACK T1562.012 IAC-30 → Blocks MITREATTACK T1070.001 IAC-30 → Blocks MITREATTACK T1070.002 IAC-30 → Blocks MITREATTACK T1562 IAC-30 → Blocks MITREATTACK T1562.001 IAC-30 → Blocks MITREATTACK T1562.002 IAC-30 → Blocks MITREATTACK T1562.004 IAC-30 → Blocks MITREATTACK T1562.006 IAC-30 → Blocks MITREATTACK T1562.007 IAC-30 → Blocks MITREATTACK T1562.008 IAC-30 → Blocks MITREATTACK T1562.009 IAC-30 → Blocks MITREATTACK T1562.012 IAC-32 → Blocks MITREATTACK T1562 IAC-32 → Blocks MITREATTACK T1562.001 IAC-32 → Blocks MITREATTACK T1562.002 IAC-32 → Blocks MITREATTACK T1562.004 IAC-32 → Blocks MITREATTACK T1562.006 IAC-32 → Blocks MITREATTACK T1562.007 IAC-32 → Blocks MITREATTACK T1562.008 IAC-32 → Blocks MITREATTACK T1562.009 IAC-36 → Blocks MITREATTACK T1562.006 IAC-36 → Blocks MITREATTACK T1562.009 NET-24 → Blocks MITREATTACK T1070.001 NET-24 → Blocks MITREATTACK T1070.002 NET-26 → Blocks MITREATTACK T1070.001 NET-26 → Blocks MITREATTACK T1070.002 NET-29 → Blocks MITREATTACK T1562.006 NET-29 → Blocks MITREATTACK T1562.009 PRM-07 → Blocks MITREATTACK T1574.002 SEA-05 → Blocks MITREATTACK T1574.002 SEA-14 → Blocks MITREATTACK T1070.001 SEA-14 → Blocks MITREATTACK T1070.002 SEA-25 → Blocks MITREATTACK T1070.001 SEA-25 → Blocks MITREATTACK T1070.002 TDA-02 → Blocks MITREATTACK T1574.002 TDA-04 → Blocks MITREATTACK T1574.002 TDA-05 → Blocks MITREATTACK T1574.002 TDA-17 → Blocks MITREATTACK T1574.002 TDA-20 → Blocks MITREATTACK T1574.002 TDA-20.2 → Blocks MITREATTACK T1574.002 VPM-08 → Blocks MITREATTACK T1574.002 VPM-12 → Blocks MITREATTACK T1562 VPM-12 → Blocks MITREATTACK T1562.010 Links the source no longer names (they stay): 46764 GOV-01 → Blocks EULAW CELEX:32022R2554#art_5_1 GOV-01 → Blocks EULAW CELEX:32022R2554#art_9_4 GOV-01 → Blocks EULAW CELEX:32022R2554#art_16_1 GOV-01 → Blocks EULAW CELEX:32022R2554#art_16_2 GOV-01 → Relates SCF label_SCRMFocusTier3TACTICAL GOV-01 → Blocks SCF R-AC-1 GOV-01 → Blocks SCF R-AC-2 GOV-01 → Blocks SCF R-AC-3 GOV-01 → Blocks SCF R-AC-4 GOV-01 → Blocks SCF R-AM-1 GOV-01 → Blocks SCF R-AM-2 GOV-01 → Blocks SCF R-BC-1 GOV-01 → Blocks SCF R-BC-2 GOV-01 → Blocks SCF R-BC-3 GOV-01 → Blocks SCF R-BC-4 GOV-01 → Blocks SCF R-BC-5 GOV-01 → Blocks SCF R-EX-1 GOV-01 → Blocks SCF R-EX-3 GOV-01 → Blocks SCF R-EX-4 GOV-01 → Blocks SCF R-EX-6 GOV-01 → Blocks SCF R-EX-7 GOV-01 → Blocks SCF R-GV-8 GOV-01 → Blocks SCF R-IR-1 GOV-01 → Blocks SCF R-IR-2 GOV-01 → Blocks SCF R-IR-3 GOV-01 → Blocks SCF R-IR-4 GOV-01 → Blocks SCF R-SA-1 GOV-01 → Blocks SCF R-SC-1 GOV-01 → Blocks SCF R-SC-2 GOV-01 → Blocks SCF R-SC-3 GOV-01 → Blocks SCF R-SC-4 GOV-01 → Blocks SCF R-SC-5 GOV-01 → Blocks SCF R-SC-6 GOV-01 → Blocks DELAW BDSG § 9 GOV-01 → Blocks EULAW CELEX:32022L2555#art_21 GOV-01.1 → Blocks EULAW CELEX:32022R2554#art_5_2 GOV-01.1 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-01.1 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-01.1 → Relates SCF label_cadence_Annual GOV-01.1 → Relates SCF label_PPTDFApplicability_Process GOV-01.1 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-01.1 → Blocks SCF R-AC-1 GOV-01.1 → Blocks SCF R-AC-2 GOV-01.1 → Blocks SCF R-AC-3 GOV-01.1 → Blocks SCF R-AC-4 GOV-01.1 → Blocks SCF R-AM-1 GOV-01.1 → Blocks SCF R-AM-2 GOV-01.1 → Blocks SCF R-BC-1 GOV-01.1 → Blocks SCF R-BC-2 GOV-01.1 → Blocks SCF R-BC-3 GOV-01.1 → Blocks SCF R-BC-4 GOV-01.1 → Blocks SCF R-BC-5 GOV-01.1 → Blocks SCF R-EX-1 GOV-01.1 → Blocks SCF R-EX-2 GOV-01.1 → Blocks SCF R-EX-3 GOV-01.1 → Blocks SCF R-EX-4 GOV-01.1 → Blocks SCF R-EX-5 GOV-01.1 → Blocks SCF R-EX-6 GOV-01.1 → Blocks SCF R-EX-7 GOV-01.1 → Blocks SCF R-GV-1 GOV-01.1 → Blocks SCF R-GV-2 GOV-01.1 → Blocks SCF R-GV-3 GOV-01.1 → Blocks SCF R-GV-4 GOV-01.1 → Blocks SCF R-GV-5 GOV-01.1 → Blocks SCF R-GV-6 GOV-01.1 → Blocks SCF R-GV-7 GOV-01.1 → Blocks SCF R-GV-8 GOV-01.1 → Blocks SCF R-IR-1 GOV-01.1 → Blocks SCF R-IR-2 GOV-01.1 → Blocks SCF R-IR-3 GOV-01.1 → Blocks SCF R-IR-4 GOV-01.1 → Blocks SCF R-SA-1 GOV-01.1 → Blocks SCF R-SA-2 GOV-01.1 → Blocks SCF R-SC-1 GOV-01.1 → Blocks SCF R-SC-2 GOV-01.1 → Blocks SCF R-SC-3 GOV-01.1 → Blocks SCF R-SC-4 GOV-01.1 → Blocks SCF R-SC-5 GOV-01.1 → Blocks SCF R-SC-6 GOV-01.1 → Relates SCF label_relativeControlWeighting_07 GOV-01.1 → Blocks EULAW CELEX:32022L2555#art_21 GOV-01.2 → Blocks EULAW CELEX:32022R2554#art_5_2 GOV-01.2 → Blocks EULAW CELEX:32022R2554#art_13_5 GOV-01.2 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-01.2 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-01.2 → Relates SCF label_cadence_Annual GOV-01.2 → Relates SCF label_PPTDFApplicability_Process GOV-01.2 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-01.2 → Blocks SCF R-AC-1 GOV-01.2 → Blocks SCF R-EX-3 GOV-01.2 → Blocks SCF R-EX-4 GOV-01.2 → Blocks SCF R-GV-1 GOV-01.2 → Blocks SCF R-GV-4 GOV-01.2 → Blocks SCF R-GV-5 GOV-01.2 → Blocks SCF R-GV-6 GOV-01.2 → Blocks SCF R-GV-7 GOV-01.2 → Blocks SCF R-SC-1 GOV-01.2 → Blocks SCF R-SC-2 GOV-01.2 → Blocks SCF R-SC-3 GOV-01.2 → Blocks SCF R-SC-4 GOV-01.2 → Blocks SCF R-SC-5 GOV-01.2 → Blocks SCF R-SC-6 GOV-01.2 → Relates SCF label_relativeControlWeighting_05 GOV-01.3 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-01.3 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-01.3 → Relates SCF label_cadence_Annual GOV-01.3 → Relates SCF label_PPTDFApplicability_Process GOV-01.3 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-01.3 → Blocks SCF R-AC-1 GOV-01.3 → Blocks SCF R-EX-3 GOV-01.3 → Blocks SCF R-EX-4 GOV-01.3 → Blocks SCF R-GV-1 GOV-01.3 → Blocks SCF R-GV-4 GOV-01.3 → Blocks SCF R-GV-5 GOV-01.3 → Blocks SCF R-GV-6 GOV-01.3 → Blocks SCF R-GV-7 GOV-01.3 → Blocks SCF R-SC-3 GOV-01.3 → Blocks SCF R-SC-4 GOV-01.3 → Blocks SCF R-SC-5 GOV-01.3 → Blocks SCF R-SC-6 GOV-01.3 → Relates SCF label_relativeControlWeighting_07 GOV-02 → Blocks EULAW CELEX:32022R2554#art_6_2 GOV-02 → Blocks EULAW CELEX:32022R2554#art_9_4 GOV-02 → Blocks SCF R-AC-1 GOV-02 → Blocks SCF R-AC-2 GOV-02 → Blocks SCF R-AC-3 GOV-02 → Blocks SCF R-AC-4 GOV-02 → Blocks SCF R-AM-1 GOV-02 → Blocks SCF R-AM-2 GOV-02 → Blocks SCF R-BC-1 GOV-02 → Blocks SCF R-BC-2 GOV-02 → Blocks SCF R-BC-3 GOV-02 → Blocks SCF R-BC-4 GOV-02 → Blocks SCF R-BC-5 GOV-02 → Blocks SCF R-EX-1 GOV-02 → Blocks SCF R-EX-3 GOV-02 → Blocks SCF R-EX-4 GOV-02 → Blocks SCF R-EX-6 GOV-02 → Blocks SCF R-EX-7 GOV-02 → Blocks SCF R-GV-8 GOV-02 → Blocks SCF R-IR-1 GOV-02 → Blocks SCF R-IR-2 GOV-02 → Blocks SCF R-IR-3 GOV-02 → Blocks SCF R-IR-4 GOV-02 → Blocks SCF R-SA-1 GOV-02 → Blocks SCF R-SC-1 GOV-02 → Blocks SCF R-SC-2 GOV-02 → Blocks SCF R-SC-3 GOV-02 → Blocks SCF R-SC-4 GOV-02 → Blocks SCF R-SC-5 GOV-02 → Blocks SCF R-SC-6 GOV-02 → Blocks EULAW CELEX:32016R0679#art_24 GOV-02.1 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-02.1 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-02.1 → Relates SCF label_SCRMFocusTier3TACTICAL GOV-02.1 → Relates SCF label_cadence_Annual GOV-02.1 → Relates SCF label_PPTDFApplicability_Process GOV-02.1 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-02.1 → Blocks SCF R-AC-1 GOV-02.1 → Blocks SCF R-AC-2 GOV-02.1 → Blocks SCF R-AC-3 GOV-02.1 → Blocks SCF R-AC-4 GOV-02.1 → Blocks SCF R-AM-1 GOV-02.1 → Blocks SCF R-AM-2 GOV-02.1 → Blocks SCF R-AM-3 GOV-02.1 → Blocks SCF R-BC-1 GOV-02.1 → Blocks SCF R-BC-2 GOV-02.1 → Blocks SCF R-BC-3 GOV-02.1 → Blocks SCF R-BC-4 GOV-02.1 → Blocks SCF R-BC-5 GOV-02.1 → Blocks SCF R-EX-1 GOV-02.1 → Blocks SCF R-EX-2 GOV-02.1 → Blocks SCF R-EX-3 GOV-02.1 → Blocks SCF R-EX-4 GOV-02.1 → Blocks SCF R-EX-5 GOV-02.1 → Blocks SCF R-EX-6 GOV-02.1 → Blocks SCF R-EX-7 GOV-02.1 → Blocks SCF R-GV-1 GOV-02.1 → Blocks SCF R-GV-2 GOV-02.1 → Blocks SCF R-GV-3 GOV-02.1 → Blocks SCF R-GV-4 GOV-02.1 → Blocks SCF R-GV-5 GOV-02.1 → Blocks SCF R-GV-6 GOV-02.1 → Blocks SCF R-GV-7 GOV-02.1 → Blocks SCF R-GV-8 GOV-02.1 → Blocks SCF R-IR-1 GOV-02.1 → Blocks SCF R-IR-2 GOV-02.1 → Blocks SCF R-IR-3 GOV-02.1 → Blocks SCF R-IR-4 GOV-02.1 → Blocks SCF R-SA-1 GOV-02.1 → Blocks SCF R-SA-2 GOV-02.1 → Blocks SCF R-SC-1 GOV-02.1 → Blocks SCF R-SC-2 GOV-02.1 → Blocks SCF R-SC-3 GOV-02.1 → Blocks SCF R-SC-4 GOV-02.1 → Blocks SCF R-SC-5 GOV-02.1 → Blocks SCF R-SC-6 GOV-02.1 → Relates SCF label_relativeControlWeighting_08 GOV-03 → Relates SCF label_SCRMFocusTier3TACTICAL GOV-03 → Relates SCF label_nISTCSFFunctionGrouping_Govern … and 46564 more
New version: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 1592 new, 0 changed, 0 removed, 1591 links	New version: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 1592 new, 0 changed, 0 removed, 1591 links Document: Secure Controls Framework (SCF) (https://raw.githubusercontent.com/securecontrolsframework/securecontrolsframework/main/secure-controls-framework-scf-2026-3.xlsx) Version: 2026.3-86f09c716a Project: SCF Import: #650, 20.10.2026 21:17, scf The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Review: 0 open, 3183 applied, 0 rejected. New sections (1592) SCF Assessment Objectives [applied] SCF_AO GOV-01 Security, Compliance & Resilience Governance Policy – Assessment Procedure [applied] GOV-01_AO GOV-02 Security, Compliance & Resilience Program (SCRP) – Assessment Procedure [applied] GOV-02_AO GOV-03 Centralized Management of Security, Compliance & Resilience Controls – Assessment Procedure [applied] GOV-03_AO GOV-03.1 Secure Practices Alignment Justification – Assessment Procedure [applied] GOV-03.1_AO GOV-03.2 Standardized Terminology – Assessment Procedure [applied] GOV-03.2_AO GOV-03.3 Control Objectives – Assessment Procedure [applied] GOV-03.3_AO GOV-03.4 Assessment Objectives (AO) – Assessment Procedure [applied] GOV-03.4_AO GOV-04 Publishing Security, Compliance & Resilience Documentation – Assessment Procedure [applied] GOV-04_AO GOV-04.1 Periodic Review & Update of Security, Compliance & Resilience Program – Assessment Procedure [applied] GOV-04.1_AO GOV-04.2 Exception Management – Assessment Procedure [applied] GOV-04.2_AO GOV-04.3 Periodic Review of Exceptions – Assessment Procedure [applied] GOV-04.3_AO GOV-05 Assigned Security, Compliance & Resilience Responsibilities – Assessment Procedure [applied] GOV-05_AO GOV-05.1 Stakeholder Accountability Structure – Assessment Procedure [applied] GOV-05.1_AO GOV-05.2 Authoritative Chain of Command – Assessment Procedure [applied] GOV-05.2_AO GOV-06 Defining Business Context & Mission – Assessment Procedure [applied] GOV-06_AO GOV-07 Materiality Determination – Assessment Procedure [applied] GOV-07_AO GOV-08 High Value Assets (HVAs) – Assessment Procedure [applied] GOV-08_AO GOV-09 Steering Committee & Program Oversight – Assessment Procedure [applied] GOV-09_AO GOV-09.1 Status Reporting To Governing Body – Assessment Procedure [applied] GOV-09.1_AO GOV-10 Business As Usual (BAU) Security, Compliance & Resilience Practices – Assessment Procedure [applied] GOV-10_AO GOV-11 Operationalizing Security, Compliance & Resilience Capabilities – Assessment Procedure [applied] GOV-11_AO GOV-11.1 Select Controls – Assessment Procedure [applied] GOV-11.1_AO GOV-11.2 Implement Controls – Assessment Procedure [applied] GOV-11.2_AO GOV-11.3 Assess Controls – Assessment Procedure [applied] GOV-11.3_AO GOV-11.4 Authorize Technology Assets, Applications and/or Services (TAAS) – Assessment Procedure [applied] GOV-11.4_AO GOV-11.5 Monitor Controls – Assessment Procedure [applied] GOV-11.5_AO GOV-12 Measures of Performance – Assessment Procedure [applied] GOV-12_AO GOV-12.1 Key Performance Indicators (KPIs) – Assessment Procedure [applied] GOV-12.1_AO GOV-12.2 Key Risk Indicators (KRIs) – Assessment Procedure [applied] GOV-12.2_AO GOV-13 Forced Technology Transfer (FTT) – Assessment Procedure [applied] GOV-13_AO GOV-14 State-Sponsored Espionage – Assessment Procedure [applied] GOV-14_AO GOV-15 Contacts With Authorities – Assessment Procedure [applied] GOV-15_AO GOV-16 Contacts With Groups & Associations – Assessment Procedure [applied] GOV-16_AO GOV-17 Quality Management System (QMS) – Assessment Procedure [applied] GOV-17_AO GOV-18 Assurance – Assessment Procedure [applied] GOV-18_AO GOV-19 Mergers, Acquisitions & Divestitures (MA&D) – Assessment Procedure [applied] GOV-19_AO GOV-19.1 Virtual Data Room (VDR) – Assessment Procedure [applied] GOV-19.1_AO AAT-01 Artificial Intelligence & Autonomous Technologies Policy – Assessment Procedure [applied] AAT-01_AO AAT-02 Artificial Intelligence (AI) & Autonomous Technologies Governance – Assessment Procedure [applied] AAT-02_AO AAT-03 AI & Autonomous Technologies Mission and Goals Definition – Assessment Procedure [applied] AAT-03_AO AAT-03.1 AI & Autonomous Technologies Value Sustainment – Assessment Procedure [applied] AAT-03.1_AO AAT-04 AI & Autonomous Technologies Context Definition – Assessment Procedure [applied] AAT-04_AO AAT-04.1 AI & Autonomous Technologies-Related Legal Requirements Identification – Assessment Procedure [applied] AAT-04.1_AO AAT-05 Assigned Responsibilities for AI & Autonomous Technologies – Assessment Procedure [applied] AAT-05_AO AAT-06 Trustworthy AI & Autonomous Technologies – Assessment Procedure [applied] AAT-06_AO AAT-06.1 AI & Autonomous Technologies Continuous Improvements – Assessment Procedure [applied] AAT-06.1_AO AAT-07 Situational Awareness of AI & Autonomous Technologies In Use – Assessment Procedure [applied] AAT-07_AO AAT-07.1 AI Model & Agent Inventory & Lifecycle Management – Assessment Procedure [applied] AAT-07.1_AO AAT-07.2 Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization – Assessment Procedure [applied] AAT-07.2_AO AAT-08 AI & Autonomous Technologies Internal Controls – Assessment Procedure [applied] AAT-08_AO AAT-08.1 Adequate Protections For AI & Autonomous Technologies – Assessment Procedure [applied] AAT-08.1_AO AAT-09 AI & Autonomous Technologies Impact Assessment – Assessment Procedure [applied] AAT-09_AO AAT-10 AI & Autonomous Technologies Risk Profiling – Assessment Procedure [applied] AAT-10_AO AAT-10.1 AI & Autonomous Technologies Risk Mapping – Assessment Procedure [applied] AAT-10.1_AO AAT-11 AI & Autonomous Technologies Risk Management Decisions – Assessment Procedure [applied] AAT-11_AO AAT-11.1 AI & Autonomous Technologies Likelihood & Impact Risk Analysis – Assessment Procedure [applied] AAT-11.1_AO AAT-11.2 AI & Autonomous Technologies High Risk Designations – Assessment Procedure [applied] AAT-11.2_AO AAT-12 AI Threat Modeling & Risk Assessment – Assessment Procedure [applied] AAT-12_AO AAT-12.1 Novel Risk Assessment Methods & Technologies – Assessment Procedure [applied] AAT-12.1_AO AAT-13 AI & Autonomous Technologies Risk Response – Assessment Procedure [applied] AAT-13_AO AAT-13.1 AI & Autonomous Technologies Risk Tracking Approaches – Assessment Procedure [applied] AAT-13.1_AO AAT-13.2 Fine Tuning Risk Mitigation – Assessment Procedure [applied] AAT-13.2_AO AAT-13.3 Responsibility To Supersede, Deactivate and/or Disengage AI & Autonomous Technologies – Assessment Procedure [applied] AAT-13.3_AO AAT-14 AI & Autonomous Technologies Business Case – Assessment Procedure [applied] AAT-14_AO AAT-14.1 AI & Autonomous Technologies Potential Benefits Analysis – Assessment Procedure [applied] AAT-14.1_AO AAT-14.2 AI & Autonomous Technologies Potential Costs Analysis – Assessment Procedure [applied] AAT-14.2_AO AAT-14.3 AI & Autonomous Technologies Targeted Application Scope – Assessment Procedure [applied] AAT-14.3_AO AAT-14.4 AI & Autonomous Technologies Cost / Benefit Mapping – Assessment Procedure [applied] AAT-14.4_AO AAT-15 Model & AI Agent Documentation – Assessment Procedure [applied] AAT-15_AO AAT-16 AI & Autonomous Technologies Output Marking – Assessment Procedure [applied] AAT-16_AO AAT-17 Release Owner Gate (ROG) For AI-Augmented Content – Assessment Procedure [applied] AAT-17_AO AAT-17.1 AI & Autonomous Technologies Output Filtering – Assessment Procedure [applied] AAT-17.1_AO AAT-17.2 Human Moderation of AI & Autonomous Technologies-Generated Content – Assessment Procedure [applied] AAT-17.2_AO AAT-18 AI & Autonomous Technologies Intellectual Property Infringement Protections – Assessment Procedure [applied] AAT-18_AO AAT-18.1 Data Source Identification – Assessment Procedure [applied] AAT-18.1_AO AAT-18.2 Data Source Integrity – Assessment Procedure [applied] AAT-18.2_AO AAT-18.3 Data Source Lineage & Origin Disclosure – Assessment Procedure [applied] AAT-18.3_AO AAT-18.4 Digital Content Modification Logging – Assessment Procedure [applied] AAT-18.4_AO AAT-18.5 Training Data Source & Integrity – Assessment Procedure [applied] AAT-18.5_AO AAT-18.6 Prohibit Training – Assessment Procedure [applied] AAT-18.6_AO AAT-19 AI & Autonomous Technologies Harm Prevention – Assessment Procedure [applied] AAT-19_AO AAT-19.1 AI & Autonomous Technologies Human Subject Protections – Assessment Procedure [applied] AAT-19.1_AO AAT-19.2 AI & Autonomous Technologies Environmental Impact & Sustainability – Assessment Procedure [applied] AAT-19.2_AO AAT-19.3 Previously Unknown AI & Autonomous Technologies Threats & Risks – Assessment Procedure [applied] AAT-19.3_AO AAT-20 AI & Autonomous Technologies Conformity – Assessment Procedure [applied] AAT-20_AO AAT-20.1 Manipulative or Deceptive Techniques – Assessment Procedure [applied] AAT-20.1_AO AAT-20.2 Materially Distorting Behaviors – Assessment Procedure [applied] AAT-20.2_AO AAT-20.3 Social Scoring – Assessment Procedure [applied] AAT-20.3_AO AAT-20.4 Detrimental or Unfavorable Treatment – Assessment Procedure [applied] AAT-20.4_AO AAT-20.5 Risk and Criminal Profiling – Assessment Procedure [applied] AAT-20.5_AO AAT-20.6 Populating Facial Recognition Databases – Assessment Procedure [applied] AAT-20.6_AO AAT-20.7 Emotion Inference – Assessment Procedure [applied] AAT-20.7_AO AAT-20.8 Biometric Categorization – Assessment Procedure [applied] AAT-20.8_AO AAT-21 AI & Autonomous Technologies Requirements Definitions – Assessment Procedure [applied] AAT-21_AO AAT-22 AI & Autonomous Technologies Fairness & Bias – Assessment Procedure [applied] AAT-22_AO AAT-23 AI & Autonomous Technologies Knowledge Limits – Assessment Procedure [applied] AAT-23_AO AAT-24 AI & Autonomous Technologies Development Practices – Assessment Procedure [applied] AAT-24_AO AAT-24.1 AI & Autonomous Technologies Transparency – Assessment Procedure [applied] AAT-24.1_AO AAT-24.2 AI & Autonomous Technologies Implementation Documentation – Assessment Procedure [applied] AAT-24.2_AO AAT-24.3 AI & Autonomous Technologies Human Domain Knowledge Reliance – Assessment Procedure [applied] AAT-24.3_AO AAT-25 AI & Autonomous Technologies Implementation Tasks Definition – Assessment Procedure [applied] AAT-25_AO AAT-26 Real World Testing of AI & Autonomous Technologies – Assessment Procedure [applied] AAT-26_AO AAT-27 AI & Autonomous Technologies Testing Techniques – Assessment Procedure [applied] AAT-27_AO AAT-27.1 Generative Artificial Intelligence (GAI) Identification – Assessment Procedure [applied] AAT-27.1_AO AAT-27.2 AI & Autonomous Technologies Capabilities Testing – Assessment Procedure [applied] AAT-27.2_AO AAT-27.3 Real-World Testing – Assessment Procedure [applied] AAT-27.3_AO AAT-27.4 Documenting Testing Guidance – Assessment Procedure [applied] AAT-27.4_AO AAT-28 Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV) – Assessment Procedure [applied] AAT-28_AO AAT-28.1 AI TEVV Trustworthiness Assessment – Assessment Procedure [applied] AAT-28.1_AO AAT-28.2 AI TEVV Tools – Assessment Procedure [applied] AAT-28.2_AO AAT-28.3 AI TEVV Trustworthiness Demonstration – Assessment Procedure [applied] AAT-28.3_AO AAT-28.4 AI TEVV Safety Demonstration – Assessment Procedure [applied] AAT-28.4_AO AAT-28.5 AI TEVV Security & Resiliency Assessment – Assessment Procedure [applied] AAT-28.5_AO AAT-28.6 AI TEVV Transparency & Accountability Assessment – Assessment Procedure [applied] AAT-28.6_AO AAT-28.7 AI TEVV Privacy Assessment – Assessment Procedure [applied] AAT-28.7_AO AAT-28.8 AI TEVV Fairness & Bias Assessment – Assessment Procedure [applied] AAT-28.8_AO AAT-28.9 AI & Autonomous Technologies Model Validation – Assessment Procedure [applied] AAT-28.9_AO AAT-28.10 AI TEVV Comparable Deployment Settings – Assessment Procedure [applied] AAT-28.10_AO AAT-28.11 AI TEVV Empirically Validated Methods – Assessment Procedure [applied] AAT-28.11_AO AAT-28.12 AI TEVV Benchmarking Content Provenance – Assessment Procedure [applied] AAT-28.12_AO AAT-28.13 AI TEVV Model Collapse Mitigations – Assessment Procedure [applied] AAT-28.13_AO AAT-28.14 AI TEVV Third-Party Risk Management – Assessment Procedure [applied] AAT-28.14_AO AAT-29 AI TEVV Results Evaluation – Assessment Procedure [applied] AAT-29_AO AAT-29.1 AI TEVV Effectiveness – Assessment Procedure [applied] AAT-29.1_AO AAT-30 AI TEVV Reporting – Assessment Procedure [applied] AAT-30_AO AAT-30.1 AI & Autonomous Technologies Residual Risks – Assessment Procedure [applied] AAT-30.1_AO AAT-30.2 AI & Autonomous Technologies Viability Decisions – Assessment Procedure [applied] AAT-30.2_AO AAT-31 AI TEVV Post-Deployment Monitoring – Assessment Procedure [applied] AAT-31_AO AAT-32 Updating AI & Autonomous Technologies – Assessment Procedure [applied] AAT-32_AO AAT-33 Robust Stakeholder Engagement for AI & Autonomous Technologies – Assessment Procedure [applied] AAT-33_AO AAT-33.1 AI & Autonomous Technologies Stakeholder Feedback Integration – Assessment Procedure [applied] AAT-33.1_AO AAT-33.2 AI & Autonomous Technologies Ongoing Assessments – Assessment Procedure [applied] AAT-33.2_AO AAT-33.3 AI & Autonomous Technologies End User Feedback – Assessment Procedure [applied] AAT-33.3_AO AAT-33.4 AI & Autonomous Technologies Incident & Error Reporting – Assessment Procedure [applied] AAT-33.4_AO AAT-34 AI & Autonomous Technologies Stakeholder Diversity – Assessment Procedure [applied] AAT-34_AO AAT-34.1 AI & Autonomous Technologies Stakeholder Competencies – Assessment Procedure [applied] AAT-34.1_AO AAT-35 AI & Autonomous Technologies Deployment – Assessment Procedure [applied] AAT-35_AO AAT-35.1 AI & Autonomous Technologies Human Oversight – Assessment Procedure [applied] AAT-35.1_AO AAT-35.2 AI & Autonomous Technologies Oversight Measures – Assessment Procedure [applied] AAT-35.2_AO AAT-35.3 AI & Autonomous Technologies Separate Verification – Assessment Procedure [applied] AAT-35.3_AO AAT-35.4 AI & Autonomous Technologies Oversight Functions Competency – Assessment Procedure [applied] AAT-35.4_AO AAT-35.5 AI & Autonomous Technologies Data Relevance – Assessment Procedure [applied] AAT-35.5_AO AAT-35.6 AI & Autonomous Technologies Irregularity Reporting – Assessment Procedure [applied] AAT-35.6_AO AAT-35.7 AI & Autonomous Technologies Use Notification To Employees – Assessment Procedure [applied] AAT-35.7_AO AAT-35.8 AI & Autonomous Technologies Use Notification To Users – Assessment Procedure [applied] AAT-35.8_AO AAT-36 AI & Autonomous Technologies Production Monitoring – Assessment Procedure [applied] AAT-36_AO AAT-36.1 AI & Autonomous Technologies Measurement Approaches – Assessment Procedure [applied] AAT-36.1_AO AAT-36.2 Measuring AI & Autonomous Technologies Effectiveness – Assessment Procedure [applied] AAT-36.2_AO AAT-36.3 Unmeasurable AI & Autonomous Technologies Risks – Assessment Procedure [applied] AAT-36.3_AO AAT-36.4 Efficacy of AI & Autonomous Technologies Measurement – Assessment Procedure [applied] AAT-36.4_AO AAT-36.5 AI & Autonomous Technologies Domain Expert Reviews – Assessment Procedure [applied] AAT-36.5_AO AAT-36.6 AI & Autonomous Technologies Performance Changes – Assessment Procedure [applied] AAT-36.6_AO AAT-36.7 Pre-Trained AI & Autonomous Technologies Models – Assessment Procedure [applied] AAT-36.7_AO AAT-36.8 AI & Autonomous Technologies Event Logging – Assessment Procedure [applied] AAT-36.8_AO AAT-36.9 Serious Incident Reporting For AI & Autonomous Technologies – Assessment Procedure [applied] AAT-36.9_AO AAT-36.10 Serious Incident Root Cause Analysis (RCA) For AI & Autonomous Technologies – Assessment Procedure [applied] AAT-36.10_AO AAT-36.11 Anomaly Detection & Human Oversight – Assessment Procedure [applied] AAT-36.11_AO AAT-36.12 Human-in-the-Loop & Escalation – Assessment Procedure [applied] AAT-36.12_AO AAT-36.13 Emergent Behavior & Collusion Protections – Assessment Procedure [applied] AAT-36.13_AO AAT-36.14 Multi-Agent Trust & Communication Validation – Assessment Procedure [applied] AAT-36.14_AO AAT-37 AI & Autonomous Technologies System Value Chain – Assessment Procedure [applied] AAT-37_AO AAT-37.1 AI & Autonomous Technologies System Value Chain Fallbacks – Assessment Procedure [applied] AAT-37.1_AO AAT-38 AI Model Resilience – Assessment Procedure [applied] AAT-38_AO AAT-38.1 AI Model Pollution – Assessment Procedure [applied] AAT-38.1_AO AAT-38.2 Cascading Hallucination Defense – Assessment Procedure [applied] AAT-38.2_AO AAT-38.3 Resource Exhaustion & Denial of Service (DoS) Resilience – Assessment Procedure [applied] AAT-38.3_AO AAT-39 AI Agent Governance – Assessment Procedure [applied] AAT-39_AO AAT-39.1 Infrastructure Hardening & Isolation – Assessment Procedure [applied] AAT-39.1_AO AAT-39.2 AI Agent Limitations – Assessment Procedure [applied] AAT-39.2_AO AAT-39.3 Tool & Application Programming Interface (API) Invocation Controls – Assessment Procedure [applied] AAT-39.3_AO AAT-39.4 AI Agent Orchestration Protocol Safeguards – Assessment Procedure [applied] AAT-39.4_AO AAT-39.5 AI Agent Data Pipeline & Input Integrity – Assessment Procedure [applied] AAT-39.5_AO AAT-39.6 AI Agent Privileged Role & Delegation Boundaries – Assessment Procedure [applied] AAT-39.6_AO AAT-39.7 AI Agent Data Access Restrictions – Assessment Procedure [applied] AAT-39.7_AO AAT-39.8 AI Agent Data Extraction – Assessment Procedure [applied] AAT-39.8_AO AAT-39.9 AI Agent Identity & Impersonation Defense – Assessment Procedure [applied] AAT-39.9_AO AAT-39.10 AI Agent Logic Integrity – Assessment Procedure [applied] AAT-39.10_AO AAT-39.11 Sandboxing AI Agents – Assessment Procedure [applied] AAT-39.11_AO AAT-39.12 AI Agent Prompt Injection Defense – Assessment Procedure [applied] AAT-39.12_AO AAT-39.13 AI Agent Kill Switch / User Control – Assessment Procedure [applied] AAT-39.13_AO AAT-39.14 AI Agent Adversarial & Red Team Testing – Assessment Procedure [applied] AAT-39.14_AO AAT-39.15 AI Agent Self-Modification Controls – Assessment Procedure [applied] AAT-39.15_AO AAT-39.16 Purging AI Agent Data – Assessment Procedure [applied] AAT-39.16_AO AAT-39.17 AI Agent Delegation and Chaining Control – Assessment Procedure [applied] AAT-39.17_AO AAT-39.18 AI Agent Behavioral Drift Detection – Assessment Procedure [applied] AAT-39.18_AO AAT-39.19 AI Agent Action Authentication & Authorization – Assessment Procedure [applied] AAT-39.19_AO AAT-39.20 AI Agent Transparency & Audit – Assessment Procedure [applied] AAT-39.20_AO AAT-39.21 AI Agent Explainability – Assessment Procedure [applied] AAT-39.21_AO AAT-39.22 AI Agent Ethics, Fairness & Bias Detection – Assessment Procedure [applied] AAT-39.22_AO AAT-39.23 AI Agent Output Integrity & Verification – Assessment Procedure [applied] AAT-39.23_AO AAT-39.24 AI Agent Resource Limiting – Assessment Procedure [applied] AAT-39.24_AO AAT-40 Agentic Output Traceability & Repudiation – Assessment Procedure [applied] AAT-40_AO AAT-40.1 AI Agent Logging – Assessment Procedure [applied] AAT-40.1_AO AAT-40.2 AI Agent Session Management – Assessment Procedure [applied] AAT-40.2_AO AAT-41 Human-in-the-Loop Workload & Manipulation – Assessment Procedure [applied] AAT-41_AO AAT-42 Robotic Process Automation (RPA) – Assessment Procedure [applied] AAT-42_AO AAT-43 Business Process Task Enumeration – Assessment Procedure [applied] AAT-43_AO AST-01 Asset Management Policy – Assessment Procedure [applied] AST-01_AO AST-02 Asset Governance – Assessment Procedure [applied] AST-02_AO … and 1392 more New links (1591) Blocks → Security, Compliance & Resilience Governance Policy [applied] GOV-01_AO Blocks → Security, Compliance & Resilience Program (SCRP) [applied] GOV-02_AO Blocks → Centralized Management of Security, Compliance & Resilience Controls [applied] GOV-03_AO Blocks → Secure Practices Alignment Justification [applied] GOV-03.1_AO Blocks → Standardized Terminology [applied] GOV-03.2_AO Blocks → Control Objectives [applied] GOV-03.3_AO Blocks → Assessment Objectives (AO) [applied] GOV-03.4_AO Blocks → Publishing Security, Compliance & Resilience Documentation [applied] GOV-04_AO Blocks → Periodic Review & Update of Security, Compliance & Resilience Program [applied] GOV-04.1_AO Blocks → Exception Management [applied] GOV-04.2_AO Blocks → Periodic Review of Exceptions [applied] GOV-04.3_AO Blocks → Assigned Security, Compliance & Resilience Responsibilities [applied] GOV-05_AO Blocks → Stakeholder Accountability Structure [applied] GOV-05.1_AO Blocks → Authoritative Chain of Command [applied] GOV-05.2_AO Blocks → Defining Business Context & Mission [applied] GOV-06_AO Blocks → Materiality Determination [applied] GOV-07_AO Blocks → High Value Assets (HVAs) [applied] GOV-08_AO Blocks → Steering Committee & Program Oversight [applied] GOV-09_AO Blocks → Status Reporting To Governing Body [applied] GOV-09.1_AO Blocks → Business As Usual (BAU) Security, Compliance & Resilience Practices [applied] GOV-10_AO Blocks → Operationalizing Security, Compliance & Resilience Capabilities [applied] GOV-11_AO Blocks → Select Controls [applied] GOV-11.1_AO Blocks → Implement Controls [applied] GOV-11.2_AO Blocks → Assess Controls [applied] GOV-11.3_AO Blocks → Authorize Technology Assets, Applications and/or Services (TAAS) [applied] GOV-11.4_AO Blocks → Monitor Controls [applied] GOV-11.5_AO Blocks → Measures of Performance [applied] GOV-12_AO Blocks → Key Performance Indicators (KPIs) [applied] GOV-12.1_AO Blocks → Key Risk Indicators (KRIs) [applied] GOV-12.2_AO Blocks → Forced Technology Transfer (FTT) [applied] GOV-13_AO Blocks → State-Sponsored Espionage [applied] GOV-14_AO Blocks → Contacts With Authorities [applied] GOV-15_AO Blocks → Contacts With Groups & Associations [applied] GOV-16_AO Blocks → Quality Management System (QMS) [applied] GOV-17_AO Blocks → Assurance [applied] GOV-18_AO Blocks → Mergers, Acquisitions & Divestitures (MA&D) [applied] GOV-19_AO Blocks → Virtual Data Room (VDR) [applied] GOV-19.1_AO Blocks → Artificial Intelligence & Autonomous Technologies Policy [applied] AAT-01_AO Blocks → Artificial Intelligence (AI) & Autonomous Technologies Governance [applied] AAT-02_AO Blocks → AI & Autonomous Technologies Mission and Goals Definition [applied] AAT-03_AO Blocks → AI & Autonomous Technologies Value Sustainment [applied] AAT-03.1_AO Blocks → AI & Autonomous Technologies Context Definition [applied] AAT-04_AO Blocks → AI & Autonomous Technologies-Related Legal Requirements Identification [applied] AAT-04.1_AO Blocks → Assigned Responsibilities for AI & Autonomous Technologies [applied] AAT-05_AO Blocks → Trustworthy AI & Autonomous Technologies [applied] AAT-06_AO Blocks → AI & Autonomous Technologies Continuous Improvements [applied] AAT-06.1_AO Blocks → Situational Awareness of AI & Autonomous Technologies In Use [applied] AAT-07_AO Blocks → AI Model & Agent Inventory & Lifecycle Management [applied] AAT-07.1_AO Blocks → Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization [applied] AAT-07.2_AO Blocks → AI & Autonomous Technologies Internal Controls [applied] AAT-08_AO Blocks → Adequate Protections For AI & Autonomous Technologies [applied] AAT-08.1_AO Blocks → AI & Autonomous Technologies Impact Assessment [applied] AAT-09_AO Blocks → AI & Autonomous Technologies Risk Profiling [applied] AAT-10_AO Blocks → AI & Autonomous Technologies Risk Mapping [applied] AAT-10.1_AO Blocks → AI & Autonomous Technologies Risk Management Decisions [applied] AAT-11_AO Blocks → AI & Autonomous Technologies Likelihood & Impact Risk Analysis [applied] AAT-11.1_AO Blocks → AI & Autonomous Technologies High Risk Designations [applied] AAT-11.2_AO Blocks → AI Threat Modeling & Risk Assessment [applied] AAT-12_AO Blocks → Novel Risk Assessment Methods & Technologies [applied] AAT-12.1_AO Blocks → AI & Autonomous Technologies Risk Response [applied] AAT-13_AO Blocks → AI & Autonomous Technologies Risk Tracking Approaches [applied] AAT-13.1_AO Blocks → Fine Tuning Risk Mitigation [applied] AAT-13.2_AO Blocks → Responsibility To Supersede, Deactivate and/or Disengage AI & Autonomous Technologies [applied] AAT-13.3_AO Blocks → AI & Autonomous Technologies Business Case [applied] AAT-14_AO Blocks → AI & Autonomous Technologies Potential Benefits Analysis [applied] AAT-14.1_AO Blocks → AI & Autonomous Technologies Potential Costs Analysis [applied] AAT-14.2_AO Blocks → AI & Autonomous Technologies Targeted Application Scope [applied] AAT-14.3_AO Blocks → AI & Autonomous Technologies Cost / Benefit Mapping [applied] AAT-14.4_AO Blocks → Model & AI Agent Documentation [applied] AAT-15_AO Blocks → AI & Autonomous Technologies Output Marking [applied] AAT-16_AO Blocks → Release Owner Gate (ROG) For AI-Augmented Content [applied] AAT-17_AO Blocks → AI & Autonomous Technologies Output Filtering [applied] AAT-17.1_AO Blocks → Human Moderation of AI & Autonomous Technologies-Generated Content [applied] AAT-17.2_AO Blocks → AI & Autonomous Technologies Intellectual Property Infringement Protections [applied] AAT-18_AO Blocks → Data Source Identification [applied] AAT-18.1_AO Blocks → Data Source Integrity [applied] AAT-18.2_AO Blocks → Data Source Lineage & Origin Disclosure [applied] AAT-18.3_AO Blocks → Digital Content Modification Logging [applied] AAT-18.4_AO Blocks → Training Data Source & Integrity [applied] AAT-18.5_AO Blocks → Prohibit Training [applied] AAT-18.6_AO Blocks → AI & Autonomous Technologies Harm Prevention [applied] AAT-19_AO Blocks → AI & Autonomous Technologies Human Subject Protections [applied] AAT-19.1_AO Blocks → AI & Autonomous Technologies Environmental Impact & Sustainability [applied] AAT-19.2_AO Blocks → Previously Unknown AI & Autonomous Technologies Threats & Risks [applied] AAT-19.3_AO Blocks → AI & Autonomous Technologies Conformity [applied] AAT-20_AO Blocks → Manipulative or Deceptive Techniques [applied] AAT-20.1_AO Blocks → Materially Distorting Behaviors [applied] AAT-20.2_AO Blocks → Social Scoring [applied] AAT-20.3_AO Blocks → Detrimental or Unfavorable Treatment [applied] AAT-20.4_AO Blocks → Risk and Criminal Profiling [applied] AAT-20.5_AO Blocks → Populating Facial Recognition Databases [applied] AAT-20.6_AO Blocks → Emotion Inference [applied] AAT-20.7_AO Blocks → Biometric Categorization [applied] AAT-20.8_AO Blocks → AI & Autonomous Technologies Requirements Definitions [applied] AAT-21_AO Blocks → AI & Autonomous Technologies Fairness & Bias [applied] AAT-22_AO Blocks → AI & Autonomous Technologies Knowledge Limits [applied] AAT-23_AO Blocks → AI & Autonomous Technologies Development Practices [applied] AAT-24_AO Blocks → AI & Autonomous Technologies Transparency [applied] AAT-24.1_AO Blocks → AI & Autonomous Technologies Implementation Documentation [applied] AAT-24.2_AO Blocks → AI & Autonomous Technologies Human Domain Knowledge Reliance [applied] AAT-24.3_AO Blocks → AI & Autonomous Technologies Implementation Tasks Definition [applied] AAT-25_AO Blocks → Real World Testing of AI & Autonomous Technologies [applied] AAT-26_AO Blocks → AI & Autonomous Technologies Testing Techniques [applied] AAT-27_AO Blocks → Generative Artificial Intelligence (GAI) Identification [applied] AAT-27.1_AO Blocks → AI & Autonomous Technologies Capabilities Testing [applied] AAT-27.2_AO Blocks → Real-World Testing [applied] AAT-27.3_AO Blocks → Documenting Testing Guidance [applied] AAT-27.4_AO Blocks → Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV) [applied] AAT-28_AO Blocks → AI TEVV Trustworthiness Assessment [applied] AAT-28.1_AO Blocks → AI TEVV Tools [applied] AAT-28.2_AO Blocks → AI TEVV Trustworthiness Demonstration [applied] AAT-28.3_AO Blocks → AI TEVV Safety Demonstration [applied] AAT-28.4_AO Blocks → AI TEVV Security & Resiliency Assessment [applied] AAT-28.5_AO Blocks → AI TEVV Transparency & Accountability Assessment [applied] AAT-28.6_AO Blocks → AI TEVV Privacy Assessment [applied] AAT-28.7_AO Blocks → AI TEVV Fairness & Bias Assessment [applied] AAT-28.8_AO Blocks → AI & Autonomous Technologies Model Validation [applied] AAT-28.9_AO Blocks → AI TEVV Comparable Deployment Settings [applied] AAT-28.10_AO Blocks → AI TEVV Empirically Validated Methods [applied] AAT-28.11_AO Blocks → AI TEVV Benchmarking Content Provenance [applied] AAT-28.12_AO Blocks → AI TEVV Model Collapse Mitigations [applied] AAT-28.13_AO Blocks → AI TEVV Third-Party Risk Management [applied] AAT-28.14_AO Blocks → AI TEVV Results Evaluation [applied] AAT-29_AO Blocks → AI TEVV Effectiveness [applied] AAT-29.1_AO Blocks → AI TEVV Reporting [applied] AAT-30_AO Blocks → AI & Autonomous Technologies Residual Risks [applied] AAT-30.1_AO Blocks → AI & Autonomous Technologies Viability Decisions [applied] AAT-30.2_AO Blocks → AI TEVV Post-Deployment Monitoring [applied] AAT-31_AO Blocks → Updating AI & Autonomous Technologies [applied] AAT-32_AO Blocks → Robust Stakeholder Engagement for AI & Autonomous Technologies [applied] AAT-33_AO Blocks → AI & Autonomous Technologies Stakeholder Feedback Integration [applied] AAT-33.1_AO Blocks → AI & Autonomous Technologies Ongoing Assessments [applied] AAT-33.2_AO Blocks → AI & Autonomous Technologies End User Feedback [applied] AAT-33.3_AO Blocks → AI & Autonomous Technologies Incident & Error Reporting [applied] AAT-33.4_AO Blocks → AI & Autonomous Technologies Stakeholder Diversity [applied] AAT-34_AO Blocks → AI & Autonomous Technologies Stakeholder Competencies [applied] AAT-34.1_AO Blocks → AI & Autonomous Technologies Deployment [applied] AAT-35_AO Blocks → AI & Autonomous Technologies Human Oversight [applied] AAT-35.1_AO Blocks → AI & Autonomous Technologies Oversight Measures [applied] AAT-35.2_AO Blocks → AI & Autonomous Technologies Separate Verification [applied] AAT-35.3_AO Blocks → AI & Autonomous Technologies Oversight Functions Competency [applied] AAT-35.4_AO Blocks → AI & Autonomous Technologies Data Relevance [applied] AAT-35.5_AO Blocks → AI & Autonomous Technologies Irregularity Reporting [applied] AAT-35.6_AO Blocks → AI & Autonomous Technologies Use Notification To Employees [applied] AAT-35.7_AO Blocks → AI & Autonomous Technologies Use Notification To Users [applied] AAT-35.8_AO Blocks → AI & Autonomous Technologies Production Monitoring [applied] AAT-36_AO Blocks → AI & Autonomous Technologies Measurement Approaches [applied] AAT-36.1_AO Blocks → Measuring AI & Autonomous Technologies Effectiveness [applied] AAT-36.2_AO Blocks → Unmeasurable AI & Autonomous Technologies Risks [applied] AAT-36.3_AO Blocks → Efficacy of AI & Autonomous Technologies Measurement [applied] AAT-36.4_AO Blocks → AI & Autonomous Technologies Domain Expert Reviews [applied] AAT-36.5_AO Blocks → AI & Autonomous Technologies Performance Changes [applied] AAT-36.6_AO Blocks → Pre-Trained AI & Autonomous Technologies Models [applied] AAT-36.7_AO Blocks → AI & Autonomous Technologies Event Logging [applied] AAT-36.8_AO Blocks → Serious Incident Reporting For AI & Autonomous Technologies [applied] AAT-36.9_AO Blocks → Serious Incident Root Cause Analysis (RCA) For AI & Autonomous Technologies [applied] AAT-36.10_AO Blocks → Anomaly Detection & Human Oversight [applied] AAT-36.11_AO Blocks → Human-in-the-Loop & Escalation [applied] AAT-36.12_AO Blocks → Emergent Behavior & Collusion Protections [applied] AAT-36.13_AO Blocks → Multi-Agent Trust & Communication Validation [applied] AAT-36.14_AO Blocks → AI & Autonomous Technologies System Value Chain [applied] AAT-37_AO Blocks → AI & Autonomous Technologies System Value Chain Fallbacks [applied] AAT-37.1_AO Blocks → AI Model Resilience [applied] AAT-38_AO Blocks → AI Model Pollution [applied] AAT-38.1_AO Blocks → Cascading Hallucination Defense [applied] AAT-38.2_AO Blocks → Resource Exhaustion & Denial of Service (DoS) Resilience [applied] AAT-38.3_AO Blocks → AI Agent Governance [applied] AAT-39_AO Blocks → Infrastructure Hardening & Isolation [applied] AAT-39.1_AO Blocks → AI Agent Limitations [applied] AAT-39.2_AO Blocks → Tool & Application Programming Interface (API) Invocation Controls [applied] AAT-39.3_AO Blocks → AI Agent Orchestration Protocol Safeguards [applied] AAT-39.4_AO Blocks → AI Agent Data Pipeline & Input Integrity [applied] AAT-39.5_AO Blocks → AI Agent Privileged Role & Delegation Boundaries [applied] AAT-39.6_AO Blocks → AI Agent Data Access Restrictions [applied] AAT-39.7_AO Blocks → AI Agent Data Extraction [applied] AAT-39.8_AO Blocks → AI Agent Identity & Impersonation Defense [applied] AAT-39.9_AO Blocks → AI Agent Logic Integrity [applied] AAT-39.10_AO Blocks → Sandboxing AI Agents [applied] AAT-39.11_AO Blocks → AI Agent Prompt Injection Defense [applied] AAT-39.12_AO Blocks → AI Agent Kill Switch / User Control [applied] AAT-39.13_AO Blocks → AI Agent Adversarial & Red Team Testing [applied] AAT-39.14_AO Blocks → AI Agent Self-Modification Controls [applied] AAT-39.15_AO Blocks → Purging AI Agent Data [applied] AAT-39.16_AO Blocks → AI Agent Delegation and Chaining Control [applied] AAT-39.17_AO Blocks → AI Agent Behavioral Drift Detection [applied] AAT-39.18_AO Blocks → AI Agent Action Authentication & Authorization [applied] AAT-39.19_AO Blocks → AI Agent Transparency & Audit [applied] AAT-39.20_AO Blocks → AI Agent Explainability [applied] AAT-39.21_AO Blocks → AI Agent Ethics, Fairness & Bias Detection [applied] AAT-39.22_AO Blocks → AI Agent Output Integrity & Verification [applied] AAT-39.23_AO Blocks → AI Agent Resource Limiting [applied] AAT-39.24_AO Blocks → Agentic Output Traceability & Repudiation [applied] AAT-40_AO Blocks → AI Agent Logging [applied] AAT-40.1_AO Blocks → AI Agent Session Management [applied] AAT-40.2_AO Blocks → Human-in-the-Loop Workload & Manipulation [applied] AAT-41_AO Blocks → Robotic Process Automation (RPA) [applied] AAT-42_AO Blocks → Business Process Task Enumeration [applied] AAT-43_AO Blocks → Asset Management Policy [applied] AST-01_AO Blocks → Asset Governance [applied] AST-02_AO Blocks → Standardized Naming Convention [applied] AST-03_AO … and 1391 more Links not found (165) BCD-01 → Blocks BSI C5:2026-5.14 BCD-02 → Blocks BSI C5:2026-5.14 BCD-12 → Blocks MITREATTACK T1070.001 BCD-12 → Blocks MITREATTACK T1070.002 BCD-13 → Blocks MITREATTACK T1070.001 BCD-13 → Blocks MITREATTACK T1070.002 BCD-24 → Blocks MITREATTACK T1070.001 BCD-24 → Blocks MITREATTACK T1070.002 CHG-03 → Blocks MITREATTACK T1562.008 CHG-03 → Blocks MITREATTACK T1562.012 CHG-04.1 → Blocks MITREATTACK T1562 CHG-04.1 → Blocks MITREATTACK T1562.001 CHG-04.1 → Blocks MITREATTACK T1562.002 CHG-04.1 → Blocks MITREATTACK T1562.004 CHG-04.1 → Blocks MITREATTACK T1562.006 CHG-04.1 → Blocks MITREATTACK T1562.007 CHG-04.1 → Blocks MITREATTACK T1562.008 CHG-04.1 → Blocks MITREATTACK T1562.009 CHG-04.1 → Blocks MITREATTACK T1562.011 CHG-04.1 → Blocks MITREATTACK T1562.012 CPL-07 → Blocks MITREATTACK T1070.001 CPL-07 → Blocks MITREATTACK T1070.002 CPL-07 → Blocks MITREATTACK T1562 CPL-07 → Blocks MITREATTACK T1562.001 CPL-07 → Blocks MITREATTACK T1562.002 CPL-07 → Blocks MITREATTACK T1562.004 CPL-07 → Blocks MITREATTACK T1562.006 CFG-03 → Blocks MITREATTACK T1562 CFG-03 → Blocks MITREATTACK T1562.001 CFG-03 → Blocks MITREATTACK T1562.002 CFG-03 → Blocks MITREATTACK T1562.003 CFG-03 → Blocks MITREATTACK T1562.004 CFG-03 → Blocks MITREATTACK T1562.006 CFG-03 → Blocks MITREATTACK T1562.009 CFG-03 → Blocks MITREATTACK T1562.010 CFG-04 → Blocks MITREATTACK T1070.001 CFG-04 → Blocks MITREATTACK T1070.002 CFG-04 → Blocks MITREATTACK T1562 CFG-04 → Blocks MITREATTACK T1562.001 CFG-04 → Blocks MITREATTACK T1562.002 CFG-04 → Blocks MITREATTACK T1562.003 CFG-04 → Blocks MITREATTACK T1562.004 CFG-04 → Blocks MITREATTACK T1562.006 CFG-04 → Blocks MITREATTACK T1562.009 CFG-04 → Blocks MITREATTACK T1562.010 CFG-04 → Blocks MITREATTACK T1562.011 CFG-04 → Blocks MITREATTACK T1562.012 CFG-11 → Blocks MITREATTACK T1562.006 CFG-11 → Blocks MITREATTACK T1562.009 MON-02 → Blocks MITREATTACK T1070.001 MON-02 → Blocks MITREATTACK T1070.002 MON-02 → Blocks MITREATTACK T1562 MON-02 → Blocks MITREATTACK T1562.001 MON-02 → Blocks MITREATTACK T1562.002 MON-02 → Blocks MITREATTACK T1562.003 MON-02 → Blocks MITREATTACK T1562.004 MON-02 → Blocks MITREATTACK T1562.006 MON-02 → Blocks MITREATTACK T1562.010 MON-02 → Blocks MITREATTACK T1562.011 MON-02 → Blocks MITREATTACK T1562.012 CRY-05 → Blocks MITREATTACK T1562 CRY-05 → Blocks MITREATTACK T1562.010 CRY-06 → Blocks MITREATTACK T1562 CRY-06 → Blocks MITREATTACK T1562.006 CRY-06 → Blocks MITREATTACK T1562.010 CRY-09 → Blocks MITREATTACK T1521.003 DCH-27 → Blocks MITREATTACK T1070.001 DCH-27 → Blocks MITREATTACK T1070.002 DCH-37 → Blocks MITREATTACK T1070.001 DCH-37 → Blocks MITREATTACK T1070.002 END-04 → Blocks MITREATTACK T1070.001 END-04 → Blocks MITREATTACK T1070.002 END-04 → Blocks MITREATTACK T1562 END-04 → Blocks MITREATTACK T1562.001 END-04 → Blocks MITREATTACK T1562.002 END-04 → Blocks MITREATTACK T1562.004 END-04 → Blocks MITREATTACK T1562.006 END-04 → Blocks MITREATTACK T1562.011 END-11 → Blocks MITREATTACK T1070.001 END-11 → Blocks MITREATTACK T1070.002 END-11 → Blocks MITREATTACK T1562 END-11 → Blocks MITREATTACK T1562.001 END-11 → Blocks MITREATTACK T1562.002 END-11 → Blocks MITREATTACK T1562.004 END-11 → Blocks MITREATTACK T1562.006 END-11 → Blocks MITREATTACK T1562.009 END-11 → Blocks MITREATTACK T1562.010 END-11 → Blocks MITREATTACK T1562.011 END-11 → Blocks MITREATTACK T1562.012 HRS-14 → Blocks MITREATTACK T1070.001 HRS-14 → Blocks MITREATTACK T1070.002 HRS-14 → Blocks MITREATTACK T1562 HRS-14 → Blocks MITREATTACK T1562.001 HRS-14 → Blocks MITREATTACK T1562.002 HRS-14 → Blocks MITREATTACK T1562.004 HRS-14 → Blocks MITREATTACK T1562.006 HRS-14 → Blocks MITREATTACK T1562.007 HRS-14 → Blocks MITREATTACK T1562.008 HRS-14 → Blocks MITREATTACK T1562.009 IAC-02 → Blocks BSI C5:2026-5.7 IAC-08 → Blocks MITREATTACK T1070.001 IAC-08 → Blocks MITREATTACK T1070.002 IAC-08 → Blocks MITREATTACK T1562 IAC-08 → Blocks MITREATTACK T1562.001 IAC-08 → Blocks MITREATTACK T1562.002 IAC-08 → Blocks MITREATTACK T1562.004 IAC-08 → Blocks MITREATTACK T1562.006 IAC-08 → Blocks MITREATTACK T1562.007 IAC-08 → Blocks MITREATTACK T1562.008 IAC-08 → Blocks MITREATTACK T1562.009 IAC-08 → Blocks MITREATTACK T1562.012 IAC-13.1 → Blocks MITREATTACK T1562 IAC-25 → Blocks MITREATTACK T1070.001 IAC-25 → Blocks MITREATTACK T1070.002 IAC-25 → Blocks MITREATTACK T1562 IAC-25 → Blocks MITREATTACK T1562.001 IAC-25 → Blocks MITREATTACK T1562.002 IAC-25 → Blocks MITREATTACK T1562.004 IAC-25 → Blocks MITREATTACK T1562.006 IAC-25 → Blocks MITREATTACK T1562.007 IAC-25 → Blocks MITREATTACK T1562.008 IAC-25 → Blocks MITREATTACK T1562.009 IAC-25 → Blocks MITREATTACK T1562.012 IAC-30 → Blocks MITREATTACK T1070.001 IAC-30 → Blocks MITREATTACK T1070.002 IAC-30 → Blocks MITREATTACK T1562 IAC-30 → Blocks MITREATTACK T1562.001 IAC-30 → Blocks MITREATTACK T1562.002 IAC-30 → Blocks MITREATTACK T1562.004 IAC-30 → Blocks MITREATTACK T1562.006 IAC-30 → Blocks MITREATTACK T1562.007 IAC-30 → Blocks MITREATTACK T1562.008 IAC-30 → Blocks MITREATTACK T1562.009 IAC-30 → Blocks MITREATTACK T1562.012 IAC-32 → Blocks MITREATTACK T1562 IAC-32 → Blocks MITREATTACK T1562.001 IAC-32 → Blocks MITREATTACK T1562.002 IAC-32 → Blocks MITREATTACK T1562.004 IAC-32 → Blocks MITREATTACK T1562.006 IAC-32 → Blocks MITREATTACK T1562.007 IAC-32 → Blocks MITREATTACK T1562.008 IAC-32 → Blocks MITREATTACK T1562.009 IAC-36 → Blocks MITREATTACK T1562.006 IAC-36 → Blocks MITREATTACK T1562.009 NET-24 → Blocks MITREATTACK T1070.001 NET-24 → Blocks MITREATTACK T1070.002 NET-26 → Blocks MITREATTACK T1070.001 NET-26 → Blocks MITREATTACK T1070.002 NET-29 → Blocks MITREATTACK T1562.006 NET-29 → Blocks MITREATTACK T1562.009 PRM-07 → Blocks MITREATTACK T1574.002 SEA-05 → Blocks MITREATTACK T1574.002 SEA-14 → Blocks MITREATTACK T1070.001 SEA-14 → Blocks MITREATTACK T1070.002 SEA-25 → Blocks MITREATTACK T1070.001 SEA-25 → Blocks MITREATTACK T1070.002 TDA-02 → Blocks MITREATTACK T1574.002 TDA-04 → Blocks MITREATTACK T1574.002 TDA-05 → Blocks MITREATTACK T1574.002 TDA-17 → Blocks MITREATTACK T1574.002 TDA-20 → Blocks MITREATTACK T1574.002 TDA-20.2 → Blocks MITREATTACK T1574.002 VPM-08 → Blocks MITREATTACK T1574.002 VPM-12 → Blocks MITREATTACK T1562 VPM-12 → Blocks MITREATTACK T1562.010 Links the source no longer names (they stay): 46764 GOV-01 → Blocks EULAW CELEX:32022R2554#art_5_1 GOV-01 → Blocks EULAW CELEX:32022R2554#art_9_4 GOV-01 → Blocks EULAW CELEX:32022R2554#art_16_1 GOV-01 → Blocks EULAW CELEX:32022R2554#art_16_2 GOV-01 → Relates SCF label_SCRMFocusTier3TACTICAL GOV-01 → Blocks SCF R-AC-1 GOV-01 → Blocks SCF R-AC-2 GOV-01 → Blocks SCF R-AC-3 GOV-01 → Blocks SCF R-AC-4 GOV-01 → Blocks SCF R-AM-1 GOV-01 → Blocks SCF R-AM-2 GOV-01 → Blocks SCF R-BC-1 GOV-01 → Blocks SCF R-BC-2 GOV-01 → Blocks SCF R-BC-3 GOV-01 → Blocks SCF R-BC-4 GOV-01 → Blocks SCF R-BC-5 GOV-01 → Blocks SCF R-EX-1 GOV-01 → Blocks SCF R-EX-3 GOV-01 → Blocks SCF R-EX-4 GOV-01 → Blocks SCF R-EX-6 GOV-01 → Blocks SCF R-EX-7 GOV-01 → Blocks SCF R-GV-8 GOV-01 → Blocks SCF R-IR-1 GOV-01 → Blocks SCF R-IR-2 GOV-01 → Blocks SCF R-IR-3 GOV-01 → Blocks SCF R-IR-4 GOV-01 → Blocks SCF R-SA-1 GOV-01 → Blocks SCF R-SC-1 GOV-01 → Blocks SCF R-SC-2 GOV-01 → Blocks SCF R-SC-3 GOV-01 → Blocks SCF R-SC-4 GOV-01 → Blocks SCF R-SC-5 GOV-01 → Blocks SCF R-SC-6 GOV-01 → Blocks DELAW BDSG § 9 GOV-01 → Blocks EULAW CELEX:32022L2555#art_21 GOV-01.1 → Blocks EULAW CELEX:32022R2554#art_5_2 GOV-01.1 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-01.1 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-01.1 → Relates SCF label_cadence_Annual GOV-01.1 → Relates SCF label_PPTDFApplicability_Process GOV-01.1 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-01.1 → Blocks SCF R-AC-1 GOV-01.1 → Blocks SCF R-AC-2 GOV-01.1 → Blocks SCF R-AC-3 GOV-01.1 → Blocks SCF R-AC-4 GOV-01.1 → Blocks SCF R-AM-1 GOV-01.1 → Blocks SCF R-AM-2 GOV-01.1 → Blocks SCF R-BC-1 GOV-01.1 → Blocks SCF R-BC-2 GOV-01.1 → Blocks SCF R-BC-3 GOV-01.1 → Blocks SCF R-BC-4 GOV-01.1 → Blocks SCF R-BC-5 GOV-01.1 → Blocks SCF R-EX-1 GOV-01.1 → Blocks SCF R-EX-2 GOV-01.1 → Blocks SCF R-EX-3 GOV-01.1 → Blocks SCF R-EX-4 GOV-01.1 → Blocks SCF R-EX-5 GOV-01.1 → Blocks SCF R-EX-6 GOV-01.1 → Blocks SCF R-EX-7 GOV-01.1 → Blocks SCF R-GV-1 GOV-01.1 → Blocks SCF R-GV-2 GOV-01.1 → Blocks SCF R-GV-3 GOV-01.1 → Blocks SCF R-GV-4 GOV-01.1 → Blocks SCF R-GV-5 GOV-01.1 → Blocks SCF R-GV-6 GOV-01.1 → Blocks SCF R-GV-7 GOV-01.1 → Blocks SCF R-GV-8 GOV-01.1 → Blocks SCF R-IR-1 GOV-01.1 → Blocks SCF R-IR-2 GOV-01.1 → Blocks SCF R-IR-3 GOV-01.1 → Blocks SCF R-IR-4 GOV-01.1 → Blocks SCF R-SA-1 GOV-01.1 → Blocks SCF R-SA-2 GOV-01.1 → Blocks SCF R-SC-1 GOV-01.1 → Blocks SCF R-SC-2 GOV-01.1 → Blocks SCF R-SC-3 GOV-01.1 → Blocks SCF R-SC-4 GOV-01.1 → Blocks SCF R-SC-5 GOV-01.1 → Blocks SCF R-SC-6 GOV-01.1 → Relates SCF label_relativeControlWeighting_07 GOV-01.1 → Blocks EULAW CELEX:32022L2555#art_21 GOV-01.2 → Blocks EULAW CELEX:32022R2554#art_5_2 GOV-01.2 → Blocks EULAW CELEX:32022R2554#art_13_5 GOV-01.2 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-01.2 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-01.2 → Relates SCF label_cadence_Annual GOV-01.2 → Relates SCF label_PPTDFApplicability_Process GOV-01.2 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-01.2 → Blocks SCF R-AC-1 GOV-01.2 → Blocks SCF R-EX-3 GOV-01.2 → Blocks SCF R-EX-4 GOV-01.2 → Blocks SCF R-GV-1 GOV-01.2 → Blocks SCF R-GV-4 GOV-01.2 → Blocks SCF R-GV-5 GOV-01.2 → Blocks SCF R-GV-6 GOV-01.2 → Blocks SCF R-GV-7 GOV-01.2 → Blocks SCF R-SC-1 GOV-01.2 → Blocks SCF R-SC-2 GOV-01.2 → Blocks SCF R-SC-3 GOV-01.2 → Blocks SCF R-SC-4 GOV-01.2 → Blocks SCF R-SC-5 GOV-01.2 → Blocks SCF R-SC-6 GOV-01.2 → Relates SCF label_relativeControlWeighting_05 GOV-01.3 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-01.3 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-01.3 → Relates SCF label_cadence_Annual GOV-01.3 → Relates SCF label_PPTDFApplicability_Process GOV-01.3 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-01.3 → Blocks SCF R-AC-1 GOV-01.3 → Blocks SCF R-EX-3 GOV-01.3 → Blocks SCF R-EX-4 GOV-01.3 → Blocks SCF R-GV-1 GOV-01.3 → Blocks SCF R-GV-4 GOV-01.3 → Blocks SCF R-GV-5 GOV-01.3 → Blocks SCF R-GV-6 GOV-01.3 → Blocks SCF R-GV-7 GOV-01.3 → Blocks SCF R-SC-3 GOV-01.3 → Blocks SCF R-SC-4 GOV-01.3 → Blocks SCF R-SC-5 GOV-01.3 → Blocks SCF R-SC-6 GOV-01.3 → Relates SCF label_relativeControlWeighting_07 GOV-02 → Blocks EULAW CELEX:32022R2554#art_6_2 GOV-02 → Blocks EULAW CELEX:32022R2554#art_9_4 GOV-02 → Blocks SCF R-AC-1 GOV-02 → Blocks SCF R-AC-2 GOV-02 → Blocks SCF R-AC-3 GOV-02 → Blocks SCF R-AC-4 GOV-02 → Blocks SCF R-AM-1 GOV-02 → Blocks SCF R-AM-2 GOV-02 → Blocks SCF R-BC-1 GOV-02 → Blocks SCF R-BC-2 GOV-02 → Blocks SCF R-BC-3 GOV-02 → Blocks SCF R-BC-4 GOV-02 → Blocks SCF R-BC-5 GOV-02 → Blocks SCF R-EX-1 GOV-02 → Blocks SCF R-EX-3 GOV-02 → Blocks SCF R-EX-4 GOV-02 → Blocks SCF R-EX-6 GOV-02 → Blocks SCF R-EX-7 GOV-02 → Blocks SCF R-GV-8 GOV-02 → Blocks SCF R-IR-1 GOV-02 → Blocks SCF R-IR-2 GOV-02 → Blocks SCF R-IR-3 GOV-02 → Blocks SCF R-IR-4 GOV-02 → Blocks SCF R-SA-1 GOV-02 → Blocks SCF R-SC-1 GOV-02 → Blocks SCF R-SC-2 GOV-02 → Blocks SCF R-SC-3 GOV-02 → Blocks SCF R-SC-4 GOV-02 → Blocks SCF R-SC-5 GOV-02 → Blocks SCF R-SC-6 GOV-02 → Blocks EULAW CELEX:32016R0679#art_24 GOV-02.1 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-02.1 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-02.1 → Relates SCF label_SCRMFocusTier3TACTICAL GOV-02.1 → Relates SCF label_cadence_Annual GOV-02.1 → Relates SCF label_PPTDFApplicability_Process GOV-02.1 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-02.1 → Blocks SCF R-AC-1 GOV-02.1 → Blocks SCF R-AC-2 GOV-02.1 → Blocks SCF R-AC-3 GOV-02.1 → Blocks SCF R-AC-4 GOV-02.1 → Blocks SCF R-AM-1 GOV-02.1 → Blocks SCF R-AM-2 GOV-02.1 → Blocks SCF R-AM-3 GOV-02.1 → Blocks SCF R-BC-1 GOV-02.1 → Blocks SCF R-BC-2 GOV-02.1 → Blocks SCF R-BC-3 GOV-02.1 → Blocks SCF R-BC-4 GOV-02.1 → Blocks SCF R-BC-5 GOV-02.1 → Blocks SCF R-EX-1 GOV-02.1 → Blocks SCF R-EX-2 GOV-02.1 → Blocks SCF R-EX-3 GOV-02.1 → Blocks SCF R-EX-4 GOV-02.1 → Blocks SCF R-EX-5 GOV-02.1 → Blocks SCF R-EX-6 GOV-02.1 → Blocks SCF R-EX-7 GOV-02.1 → Blocks SCF R-GV-1 GOV-02.1 → Blocks SCF R-GV-2 GOV-02.1 → Blocks SCF R-GV-3 GOV-02.1 → Blocks SCF R-GV-4 GOV-02.1 → Blocks SCF R-GV-5 GOV-02.1 → Blocks SCF R-GV-6 GOV-02.1 → Blocks SCF R-GV-7 GOV-02.1 → Blocks SCF R-GV-8 GOV-02.1 → Blocks SCF R-IR-1 GOV-02.1 → Blocks SCF R-IR-2 GOV-02.1 → Blocks SCF R-IR-3 GOV-02.1 → Blocks SCF R-IR-4 GOV-02.1 → Blocks SCF R-SA-1 GOV-02.1 → Blocks SCF R-SA-2 GOV-02.1 → Blocks SCF R-SC-1 GOV-02.1 → Blocks SCF R-SC-2 GOV-02.1 → Blocks SCF R-SC-3 GOV-02.1 → Blocks SCF R-SC-4 GOV-02.1 → Blocks SCF R-SC-5 GOV-02.1 → Blocks SCF R-SC-6 GOV-02.1 → Relates SCF label_relativeControlWeighting_08 GOV-03 → Relates SCF label_SCRMFocusTier3TACTICAL GOV-03 → Relates SCF label_nISTCSFFunctionGrouping_Govern … and 46564 more
Assignments added: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 5131 links	Assignments added: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 5131 links Document: Secure Controls Framework (SCF) (https://raw.githubusercontent.com/securecontrolsframework/securecontrolsframework/main/secure-controls-framework-scf-2026-3.xlsx) Version: 2026.3-86f09c716a Project: SCF Import: #655, 23.10.2026 16:17, scf The new version was compared with the existing issues. Changes are only applied once approved in the administration (Importer › Proposed changes). Review: 0 open, 5131 applied, 0 rejected. New links (5131) Blocks → Governance Program Policy and Procedures [applied] GOV-01 Blocks → Article 5 1 [applied] GOV-02 Blocks → Article 16 1 [applied] GOV-02 Blocks → Article 16 2 [applied] GOV-02 Blocks → Article 95 Management of operational and security risks [applied] GOV-02 Blocks → Article 97 Authentication [applied] GOV-02 Blocks → PM-01 Information Security Program Plan [applied] GOV-02 Blocks → 03.15.01 Policy and Procedures [applied] GOV-02 Blocks → GV GOVERN [applied] GOV-02 Blocks → GV.RM-01 Risk management objectives are established and agreed to by organizational stakeholders [applied] GOV-02 Blocks → GV.RM-03 Cybersecurity risk management activities and outcomes are included in enterprise risk management processes [applied] GOV-02 Blocks → GV.RR-01 Organizational leadership is responsible and accountable for cybersecurity risk and fosters a culture that is risk-aware, ethical, … [applied] GOV-02 Blocks → GV.SC Cybersecurity Supply Chain Risk Management [applied] GOV-02 Blocks → GV.SC-01 A cybersecurity supply chain risk management program, strategy, objectives, policies, and processes are established and agreed to b… [applied] GOV-02 Blocks → GV.SC-03 Cybersecurity supply chain risk management is integrated into cybersecurity and enterprise risk management, risk assessment, and im… [applied] GOV-02 Blocks → GV.SC-09 Supply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is… [applied] GOV-02 Blocks → ID.RA Risk Assessment [applied] GOV-02 Blocks → PR PROTECT [applied] GOV-02 Blocks → PR.IR Technology Infrastructure Resilience [applied] GOV-02 Blocks → Governance Program Policy and Procedures [applied] GOV-02 Blocks → Information Security Program [applied] GOV-02 Blocks → PL-09 Central Management [applied] GOV-03 Blocks → PL-09 [P] Central Management [applied] GOV-03 Blocks → PR.IR Technology Infrastructure Resilience [applied] GOV-03 Blocks → Article 98 Regulatory technical standards on authentication and communication [applied] GOV-03.1 Blocks → GV.SC-03 Cybersecurity supply chain risk management is integrated into cybersecurity and enterprise risk management, risk assessment, and im… [applied] GOV-03.3 Blocks → Article 6 2 [applied] GOV-04 Blocks → Article 9 4 [applied] GOV-04 Blocks → AC-01 Policy and Procedures [applied] GOV-04 Blocks → AT-01 Policy and Procedures [applied] GOV-04 Blocks → AU-01 Policy and Procedures [applied] GOV-04 Blocks → CA-01 Policy and Procedures [applied] GOV-04 Blocks → CM-01 Policy and Procedures [applied] GOV-04 Blocks → CP-01 Policy and Procedures [applied] GOV-04 Blocks → IA-01 Policy and Procedures [applied] GOV-04 Blocks → IR-01 Policy and Procedures [applied] GOV-04 Blocks → MA-01 Policy and Procedures [applied] GOV-04 Blocks → MP-01 Policy and Procedures [applied] GOV-04 Blocks → PE-01 Policy and Procedures [applied] GOV-04 Blocks → PL-01 Policy and Procedures [applied] GOV-04 Blocks → PM-01 Information Security Program Plan [applied] GOV-04 Blocks → PS-01 Policy and Procedures [applied] GOV-04 Blocks → PT-01 Policy and Procedures [applied] GOV-04 Blocks → RA-01 Policy and Procedures [applied] GOV-04 Blocks → SA-01 Policy and Procedures [applied] GOV-04 Blocks → SC-01 Policy and Procedures [applied] GOV-04 Blocks → SI-01 Policy and Procedures [applied] GOV-04 Blocks → SR-01 Policy and Procedures [applied] GOV-04 Blocks → AC-01 [L] Policy and Procedures [applied] GOV-04 Blocks → AT-01 [L] Policy and Procedures [applied] GOV-04 Blocks → AU-01 [L] Policy and Procedures [applied] GOV-04 Blocks → CA-01 [L] Policy and Procedures [applied] GOV-04 Blocks → CM-01 [L] Policy and Procedures [applied] GOV-04 Blocks → CP-01 [L] Policy and Procedures [applied] GOV-04 Blocks → IA-01 [L] Policy and Procedures [applied] GOV-04 Blocks → IR-01 [L] Policy and Procedures [applied] GOV-04 Blocks → MA-01 [L] Policy and Procedures [applied] GOV-04 Blocks → MP-01 [L] Policy and Procedures [applied] GOV-04 Blocks → PE-01 [L] Policy and Procedures [applied] GOV-04 Blocks → PL-01 [L] Policy and Procedures [applied] GOV-04 Blocks → PS-01 [L] Policy and Procedures [applied] GOV-04 Blocks → RA-01 [L] Policy and Procedures [applied] GOV-04 Blocks → SA-01 [L] Policy and Procedures [applied] GOV-04 Blocks → SC-01 [L] Policy and Procedures [applied] GOV-04 Blocks → SI-01 [L] Policy and Procedures [applied] GOV-04 Blocks → SR-01 [L] Policy and Procedures [applied] GOV-04 Blocks → AC-01 [M] Policy and Procedures [applied] GOV-04 Blocks → AT-01 [M] Policy and Procedures [applied] GOV-04 Blocks → AU-01 [M] Policy and Procedures [applied] GOV-04 Blocks → CA-01 [M] Policy and Procedures [applied] GOV-04 Blocks → CM-01 [M] Policy and Procedures [applied] GOV-04 Blocks → CP-01 [M] Policy and Procedures [applied] GOV-04 Blocks → IA-01 [M] Policy and Procedures [applied] GOV-04 Blocks → IR-01 [M] Policy and Procedures [applied] GOV-04 Blocks → MA-01 [M] Policy and Procedures [applied] GOV-04 Blocks → MP-01 [M] Policy and Procedures [applied] GOV-04 Blocks → PE-01 [M] Policy and Procedures [applied] GOV-04 Blocks → PL-01 [M] Policy and Procedures [applied] GOV-04 Blocks → PS-01 [M] Policy and Procedures [applied] GOV-04 Blocks → RA-01 [M] Policy and Procedures [applied] GOV-04 Blocks → SA-01 [M] Policy and Procedures [applied] GOV-04 Blocks → SC-01 [M] Policy and Procedures [applied] GOV-04 Blocks → SI-01 [M] Policy and Procedures [applied] GOV-04 Blocks → SR-01 [M] Policy and Procedures [applied] GOV-04 Blocks → AC-01 [H] Policy and Procedures [applied] GOV-04 Blocks → AT-01 [H] Policy and Procedures [applied] GOV-04 Blocks → AU-01 [H] Policy and Procedures [applied] GOV-04 Blocks → CA-01 [H] Policy and Procedures [applied] GOV-04 Blocks → CM-01 [H] Policy and Procedures [applied] GOV-04 Blocks → CP-01 [H] Policy and Procedures [applied] GOV-04 Blocks → IA-01 [H] Policy and Procedures [applied] GOV-04 Blocks → IR-01 [H] Policy and Procedures [applied] GOV-04 Blocks → MA-01 [H] Policy and Procedures [applied] GOV-04 Blocks → MP-01 [H] Policy and Procedures [applied] GOV-04 Blocks → PL-01 [H] Policy and Procedures [applied] GOV-04 Blocks → PS-01 [H] Policy and Procedures [applied] GOV-04 Blocks → RA-01 [H] Policy and Procedures [applied] GOV-04 Blocks → SA-01 [H] Policy and Procedures [applied] GOV-04 Blocks → SC-01 [H] Policy and Procedures [applied] GOV-04 Blocks → SI-01 [H] Policy and Procedures [applied] GOV-04 Blocks → SR-01 [H] Policy and Procedures [applied] GOV-04 Blocks → AC-01 [P] Policy and Procedures [applied] GOV-04 Blocks → AT-01 [P] Policy and Procedures [applied] GOV-04 Blocks → AU-01 [P] Policy and Procedures [applied] GOV-04 Blocks → CA-01 [P] Policy and Procedures [applied] GOV-04 Blocks → CM-01 [P] Policy and Procedures [applied] GOV-04 Blocks → IR-01 [P] Policy and Procedures [applied] GOV-04 Blocks → MP-01 [P] Policy and Procedures [applied] GOV-04 Blocks → PL-01 [P] Policy and Procedures [applied] GOV-04 Blocks → PT-01 [P] Policy and Procedures [applied] GOV-04 Blocks → RA-01 [P] Policy and Procedures [applied] GOV-04 Blocks → SA-01 [P] Policy and Procedures [applied] GOV-04 Blocks → SI-01 [P] Policy and Procedures [applied] GOV-04 Blocks → 03.15.01 Policy and Procedures [applied] GOV-04 Blocks → 03.01.17E Detection of Unsanctioned CUI [applied] GOV-04 Blocks → 03.05.07E Identity Providers and Authorization Servers [applied] GOV-04 Blocks → 03.17.03E Component Authenticity [applied] GOV-04 Blocks → GV.PO Policy [applied] GOV-04 Blocks → GV.PO-01 Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and … [applied] GOV-04 Blocks → GV.SC-01 A cybersecurity supply chain risk management program, strategy, objectives, policies, and processes are established and agreed to b… [applied] GOV-04 Blocks → GV.SC-03 Cybersecurity supply chain risk management is integrated into cybersecurity and enterprise risk management, risk assessment, and im… [applied] GOV-04 Blocks → ID.RA Risk Assessment [applied] GOV-04 Blocks → Audit and Assurance Policy and Procedures [applied] GOV-04 Blocks → Application and Interface Security Policy and Procedures [applied] GOV-04 Blocks → Business Continuity Management Policy and Procedures [applied] GOV-04 Blocks → Change Management Policy and Procedures [applied] GOV-04 Blocks → Encryption and Key Management Policy and Procedures [applied] GOV-04 Blocks → Physical and Environmental Security Policy and Procedures [applied] GOV-04 Blocks → Security and Privacy Policy and Procedures [applied] GOV-04 Blocks → Governance Program Policy and Procedures [applied] GOV-04 Blocks → Identity and Access Management Policy and Procedures [applied] GOV-04 Blocks → Credentials Management Policy and Procedures [applied] GOV-04 Blocks → Interoperability and Portability Policy and Procedures [applied] GOV-04 Blocks → Infrastructure and Virtualization Security Policy and Procedures [applied] GOV-04 Blocks → Logging and Monitoring Policy and Procedures [applied] GOV-04 Blocks → Security Incident Management Policy and Procedures [applied] GOV-04 Blocks → Service Management Policy and Procedures [applied] GOV-04 Blocks → Supply Chain Risk Management Policies and Procedures [applied] GOV-04 Blocks → Threat and Vulnerability Management Policy and Procedures [applied] GOV-04 Blocks → Malware and Malicious Instructions Protection Policy and Procedures [applied] GOV-04 Blocks → Threat Analysis and Modelling [applied] GOV-04 Blocks → Endpoint Devices Policy and Procedures [applied] GOV-04 Blocks → AC-01 Policy and Procedures [applied] GOV-04.1 Blocks → AT-01 Policy and Procedures [applied] GOV-04.1 Blocks → AU-01 Policy and Procedures [applied] GOV-04.1 Blocks → CA-01 Policy and Procedures [applied] GOV-04.1 Blocks → CM-01 Policy and Procedures [applied] GOV-04.1 Blocks → CP-01 Policy and Procedures [applied] GOV-04.1 Blocks → IA-01 Policy and Procedures [applied] GOV-04.1 Blocks → IR-01 Policy and Procedures [applied] GOV-04.1 Blocks → MA-01 Policy and Procedures [applied] GOV-04.1 Blocks → MP-01 Policy and Procedures [applied] GOV-04.1 Blocks → PE-01 Policy and Procedures [applied] GOV-04.1 Blocks → PL-01 Policy and Procedures [applied] GOV-04.1 Blocks → PM-01 Information Security Program Plan [applied] GOV-04.1 Blocks → PS-01 Policy and Procedures [applied] GOV-04.1 Blocks → PT-01 Policy and Procedures [applied] GOV-04.1 Blocks → RA-01 Policy and Procedures [applied] GOV-04.1 Blocks → SA-01 Policy and Procedures [applied] GOV-04.1 Blocks → SC-01 Policy and Procedures [applied] GOV-04.1 Blocks → SI-01 Policy and Procedures [applied] GOV-04.1 Blocks → SR-01 Policy and Procedures [applied] GOV-04.1 Blocks → AC-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → AT-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → AU-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → CA-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → CM-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → CP-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → IA-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → IR-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → MA-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → MP-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → PE-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → PL-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → PS-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → RA-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → SA-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → SC-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → SI-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → SR-01 [L] Policy and Procedures [applied] GOV-04.1 Blocks → AC-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → AT-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → AU-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → CA-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → CM-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → CP-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → IA-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → IR-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → MA-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → MP-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → PE-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → PL-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → PS-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → RA-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → SA-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → SC-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → SI-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → SR-01 [M] Policy and Procedures [applied] GOV-04.1 Blocks → AC-01 [H] Policy and Procedures [applied] GOV-04.1 Blocks → AT-01 [H] Policy and Procedures [applied] GOV-04.1 … and 4931 more Links not found (165) BCD-01 → Blocks BSI C5:2026-5.14 BCD-02 → Blocks BSI C5:2026-5.14 BCD-12 → Blocks MITREATTACK T1070.001 BCD-12 → Blocks MITREATTACK T1070.002 BCD-13 → Blocks MITREATTACK T1070.001 BCD-13 → Blocks MITREATTACK T1070.002 BCD-24 → Blocks MITREATTACK T1070.001 BCD-24 → Blocks MITREATTACK T1070.002 CHG-03 → Blocks MITREATTACK T1562.008 CHG-03 → Blocks MITREATTACK T1562.012 CHG-04.1 → Blocks MITREATTACK T1562 CHG-04.1 → Blocks MITREATTACK T1562.001 CHG-04.1 → Blocks MITREATTACK T1562.002 CHG-04.1 → Blocks MITREATTACK T1562.004 CHG-04.1 → Blocks MITREATTACK T1562.006 CHG-04.1 → Blocks MITREATTACK T1562.007 CHG-04.1 → Blocks MITREATTACK T1562.008 CHG-04.1 → Blocks MITREATTACK T1562.009 CHG-04.1 → Blocks MITREATTACK T1562.011 CHG-04.1 → Blocks MITREATTACK T1562.012 CPL-07 → Blocks MITREATTACK T1070.001 CPL-07 → Blocks MITREATTACK T1070.002 CPL-07 → Blocks MITREATTACK T1562 CPL-07 → Blocks MITREATTACK T1562.001 CPL-07 → Blocks MITREATTACK T1562.002 CPL-07 → Blocks MITREATTACK T1562.004 CPL-07 → Blocks MITREATTACK T1562.006 CFG-03 → Blocks MITREATTACK T1562 CFG-03 → Blocks MITREATTACK T1562.001 CFG-03 → Blocks MITREATTACK T1562.002 CFG-03 → Blocks MITREATTACK T1562.003 CFG-03 → Blocks MITREATTACK T1562.004 CFG-03 → Blocks MITREATTACK T1562.006 CFG-03 → Blocks MITREATTACK T1562.009 CFG-03 → Blocks MITREATTACK T1562.010 CFG-04 → Blocks MITREATTACK T1070.001 CFG-04 → Blocks MITREATTACK T1070.002 CFG-04 → Blocks MITREATTACK T1562 CFG-04 → Blocks MITREATTACK T1562.001 CFG-04 → Blocks MITREATTACK T1562.002 CFG-04 → Blocks MITREATTACK T1562.003 CFG-04 → Blocks MITREATTACK T1562.004 CFG-04 → Blocks MITREATTACK T1562.006 CFG-04 → Blocks MITREATTACK T1562.009 CFG-04 → Blocks MITREATTACK T1562.010 CFG-04 → Blocks MITREATTACK T1562.011 CFG-04 → Blocks MITREATTACK T1562.012 CFG-11 → Blocks MITREATTACK T1562.006 CFG-11 → Blocks MITREATTACK T1562.009 MON-02 → Blocks MITREATTACK T1070.001 MON-02 → Blocks MITREATTACK T1070.002 MON-02 → Blocks MITREATTACK T1562 MON-02 → Blocks MITREATTACK T1562.001 MON-02 → Blocks MITREATTACK T1562.002 MON-02 → Blocks MITREATTACK T1562.003 MON-02 → Blocks MITREATTACK T1562.004 MON-02 → Blocks MITREATTACK T1562.006 MON-02 → Blocks MITREATTACK T1562.010 MON-02 → Blocks MITREATTACK T1562.011 MON-02 → Blocks MITREATTACK T1562.012 CRY-05 → Blocks MITREATTACK T1562 CRY-05 → Blocks MITREATTACK T1562.010 CRY-06 → Blocks MITREATTACK T1562 CRY-06 → Blocks MITREATTACK T1562.006 CRY-06 → Blocks MITREATTACK T1562.010 CRY-09 → Blocks MITREATTACK T1521.003 DCH-27 → Blocks MITREATTACK T1070.001 DCH-27 → Blocks MITREATTACK T1070.002 DCH-37 → Blocks MITREATTACK T1070.001 DCH-37 → Blocks MITREATTACK T1070.002 END-04 → Blocks MITREATTACK T1070.001 END-04 → Blocks MITREATTACK T1070.002 END-04 → Blocks MITREATTACK T1562 END-04 → Blocks MITREATTACK T1562.001 END-04 → Blocks MITREATTACK T1562.002 END-04 → Blocks MITREATTACK T1562.004 END-04 → Blocks MITREATTACK T1562.006 END-04 → Blocks MITREATTACK T1562.011 END-11 → Blocks MITREATTACK T1070.001 END-11 → Blocks MITREATTACK T1070.002 END-11 → Blocks MITREATTACK T1562 END-11 → Blocks MITREATTACK T1562.001 END-11 → Blocks MITREATTACK T1562.002 END-11 → Blocks MITREATTACK T1562.004 END-11 → Blocks MITREATTACK T1562.006 END-11 → Blocks MITREATTACK T1562.009 END-11 → Blocks MITREATTACK T1562.010 END-11 → Blocks MITREATTACK T1562.011 END-11 → Blocks MITREATTACK T1562.012 HRS-14 → Blocks MITREATTACK T1070.001 HRS-14 → Blocks MITREATTACK T1070.002 HRS-14 → Blocks MITREATTACK T1562 HRS-14 → Blocks MITREATTACK T1562.001 HRS-14 → Blocks MITREATTACK T1562.002 HRS-14 → Blocks MITREATTACK T1562.004 HRS-14 → Blocks MITREATTACK T1562.006 HRS-14 → Blocks MITREATTACK T1562.007 HRS-14 → Blocks MITREATTACK T1562.008 HRS-14 → Blocks MITREATTACK T1562.009 IAC-02 → Blocks BSI C5:2026-5.7 IAC-08 → Blocks MITREATTACK T1070.001 IAC-08 → Blocks MITREATTACK T1070.002 IAC-08 → Blocks MITREATTACK T1562 IAC-08 → Blocks MITREATTACK T1562.001 IAC-08 → Blocks MITREATTACK T1562.002 IAC-08 → Blocks MITREATTACK T1562.004 IAC-08 → Blocks MITREATTACK T1562.006 IAC-08 → Blocks MITREATTACK T1562.007 IAC-08 → Blocks MITREATTACK T1562.008 IAC-08 → Blocks MITREATTACK T1562.009 IAC-08 → Blocks MITREATTACK T1562.012 IAC-13.1 → Blocks MITREATTACK T1562 IAC-25 → Blocks MITREATTACK T1070.001 IAC-25 → Blocks MITREATTACK T1070.002 IAC-25 → Blocks MITREATTACK T1562 IAC-25 → Blocks MITREATTACK T1562.001 IAC-25 → Blocks MITREATTACK T1562.002 IAC-25 → Blocks MITREATTACK T1562.004 IAC-25 → Blocks MITREATTACK T1562.006 IAC-25 → Blocks MITREATTACK T1562.007 IAC-25 → Blocks MITREATTACK T1562.008 IAC-25 → Blocks MITREATTACK T1562.009 IAC-25 → Blocks MITREATTACK T1562.012 IAC-30 → Blocks MITREATTACK T1070.001 IAC-30 → Blocks MITREATTACK T1070.002 IAC-30 → Blocks MITREATTACK T1562 IAC-30 → Blocks MITREATTACK T1562.001 IAC-30 → Blocks MITREATTACK T1562.002 IAC-30 → Blocks MITREATTACK T1562.004 IAC-30 → Blocks MITREATTACK T1562.006 IAC-30 → Blocks MITREATTACK T1562.007 IAC-30 → Blocks MITREATTACK T1562.008 IAC-30 → Blocks MITREATTACK T1562.009 IAC-30 → Blocks MITREATTACK T1562.012 IAC-32 → Blocks MITREATTACK T1562 IAC-32 → Blocks MITREATTACK T1562.001 IAC-32 → Blocks MITREATTACK T1562.002 IAC-32 → Blocks MITREATTACK T1562.004 IAC-32 → Blocks MITREATTACK T1562.006 IAC-32 → Blocks MITREATTACK T1562.007 IAC-32 → Blocks MITREATTACK T1562.008 IAC-32 → Blocks MITREATTACK T1562.009 IAC-36 → Blocks MITREATTACK T1562.006 IAC-36 → Blocks MITREATTACK T1562.009 NET-24 → Blocks MITREATTACK T1070.001 NET-24 → Blocks MITREATTACK T1070.002 NET-26 → Blocks MITREATTACK T1070.001 NET-26 → Blocks MITREATTACK T1070.002 NET-29 → Blocks MITREATTACK T1562.006 NET-29 → Blocks MITREATTACK T1562.009 PRM-07 → Blocks MITREATTACK T1574.002 SEA-05 → Blocks MITREATTACK T1574.002 SEA-14 → Blocks MITREATTACK T1070.001 SEA-14 → Blocks MITREATTACK T1070.002 SEA-25 → Blocks MITREATTACK T1070.001 SEA-25 → Blocks MITREATTACK T1070.002 TDA-02 → Blocks MITREATTACK T1574.002 TDA-04 → Blocks MITREATTACK T1574.002 TDA-05 → Blocks MITREATTACK T1574.002 TDA-17 → Blocks MITREATTACK T1574.002 TDA-20 → Blocks MITREATTACK T1574.002 TDA-20.2 → Blocks MITREATTACK T1574.002 VPM-08 → Blocks MITREATTACK T1574.002 VPM-12 → Blocks MITREATTACK T1562 VPM-12 → Blocks MITREATTACK T1562.010 Links the source no longer names (they stay): 46861 GOV-01 → Blocks EULAW CELEX:32022R2554#art_5_1 GOV-01 → Blocks EULAW CELEX:32022R2554#art_9_4 GOV-01 → Blocks EULAW CELEX:32022R2554#art_16_1 GOV-01 → Blocks EULAW CELEX:32022R2554#art_16_2 GOV-01 → Relates SCF label_SCRMFocusTier3TACTICAL GOV-01 → Blocks SCF R-AC-1 GOV-01 → Blocks SCF R-AC-2 GOV-01 → Blocks SCF R-AC-3 GOV-01 → Blocks SCF R-AC-4 GOV-01 → Blocks SCF R-AM-1 GOV-01 → Blocks SCF R-AM-2 GOV-01 → Blocks SCF R-BC-1 GOV-01 → Blocks SCF R-BC-2 GOV-01 → Blocks SCF R-BC-3 GOV-01 → Blocks SCF R-BC-4 GOV-01 → Blocks SCF R-BC-5 GOV-01 → Blocks SCF R-EX-1 GOV-01 → Blocks SCF R-EX-3 GOV-01 → Blocks SCF R-EX-4 GOV-01 → Blocks SCF R-EX-6 GOV-01 → Blocks SCF R-EX-7 GOV-01 → Blocks SCF R-GV-8 GOV-01 → Blocks SCF R-IR-1 GOV-01 → Blocks SCF R-IR-2 GOV-01 → Blocks SCF R-IR-3 GOV-01 → Blocks SCF R-IR-4 GOV-01 → Blocks SCF R-SA-1 GOV-01 → Blocks SCF R-SC-1 GOV-01 → Blocks SCF R-SC-2 GOV-01 → Blocks SCF R-SC-3 GOV-01 → Blocks SCF R-SC-4 GOV-01 → Blocks SCF R-SC-5 GOV-01 → Blocks SCF R-SC-6 GOV-01 → Blocks DELAW BDSG § 9 GOV-01 → Blocks EULAW CELEX:32022L2555#art_21 GOV-01.1 → Blocks EULAW CELEX:32022R2554#art_5_2 GOV-01.1 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-01.1 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-01.1 → Relates SCF label_cadence_Annual GOV-01.1 → Relates SCF label_PPTDFApplicability_Process GOV-01.1 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-01.1 → Blocks SCF R-AC-1 GOV-01.1 → Blocks SCF R-AC-2 GOV-01.1 → Blocks SCF R-AC-3 GOV-01.1 → Blocks SCF R-AC-4 GOV-01.1 → Blocks SCF R-AM-1 GOV-01.1 → Blocks SCF R-AM-2 GOV-01.1 → Blocks SCF R-BC-1 GOV-01.1 → Blocks SCF R-BC-2 GOV-01.1 → Blocks SCF R-BC-3 GOV-01.1 → Blocks SCF R-BC-4 GOV-01.1 → Blocks SCF R-BC-5 GOV-01.1 → Blocks SCF R-EX-1 GOV-01.1 → Blocks SCF R-EX-2 GOV-01.1 → Blocks SCF R-EX-3 GOV-01.1 → Blocks SCF R-EX-4 GOV-01.1 → Blocks SCF R-EX-5 GOV-01.1 → Blocks SCF R-EX-6 GOV-01.1 → Blocks SCF R-EX-7 GOV-01.1 → Blocks SCF R-GV-1 GOV-01.1 → Blocks SCF R-GV-2 GOV-01.1 → Blocks SCF R-GV-3 GOV-01.1 → Blocks SCF R-GV-4 GOV-01.1 → Blocks SCF R-GV-5 GOV-01.1 → Blocks SCF R-GV-6 GOV-01.1 → Blocks SCF R-GV-7 GOV-01.1 → Blocks SCF R-GV-8 GOV-01.1 → Blocks SCF R-IR-1 GOV-01.1 → Blocks SCF R-IR-2 GOV-01.1 → Blocks SCF R-IR-3 GOV-01.1 → Blocks SCF R-IR-4 GOV-01.1 → Blocks SCF R-SA-1 GOV-01.1 → Blocks SCF R-SA-2 GOV-01.1 → Blocks SCF R-SC-1 GOV-01.1 → Blocks SCF R-SC-2 GOV-01.1 → Blocks SCF R-SC-3 GOV-01.1 → Blocks SCF R-SC-4 GOV-01.1 → Blocks SCF R-SC-5 GOV-01.1 → Blocks SCF R-SC-6 GOV-01.1 → Relates SCF label_relativeControlWeighting_07 GOV-01.1 → Blocks EULAW CELEX:32022L2555#art_21 GOV-01.2 → Blocks EULAW CELEX:32022R2554#art_5_2 GOV-01.2 → Blocks EULAW CELEX:32022R2554#art_13_5 GOV-01.2 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-01.2 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-01.2 → Relates SCF label_cadence_Annual GOV-01.2 → Relates SCF label_PPTDFApplicability_Process GOV-01.2 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-01.2 → Blocks SCF R-AC-1 GOV-01.2 → Blocks SCF R-EX-3 GOV-01.2 → Blocks SCF R-EX-4 GOV-01.2 → Blocks SCF R-GV-1 GOV-01.2 → Blocks SCF R-GV-4 GOV-01.2 → Blocks SCF R-GV-5 GOV-01.2 → Blocks SCF R-GV-6 GOV-01.2 → Blocks SCF R-GV-7 GOV-01.2 → Blocks SCF R-SC-1 GOV-01.2 → Blocks SCF R-SC-2 GOV-01.2 → Blocks SCF R-SC-3 GOV-01.2 → Blocks SCF R-SC-4 GOV-01.2 → Blocks SCF R-SC-5 GOV-01.2 → Blocks SCF R-SC-6 GOV-01.2 → Relates SCF label_relativeControlWeighting_05 GOV-01.3 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-01.3 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-01.3 → Relates SCF label_cadence_Annual GOV-01.3 → Relates SCF label_PPTDFApplicability_Process GOV-01.3 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-01.3 → Blocks SCF R-AC-1 GOV-01.3 → Blocks SCF R-EX-3 GOV-01.3 → Blocks SCF R-EX-4 GOV-01.3 → Blocks SCF R-GV-1 GOV-01.3 → Blocks SCF R-GV-4 GOV-01.3 → Blocks SCF R-GV-5 GOV-01.3 → Blocks SCF R-GV-6 GOV-01.3 → Blocks SCF R-GV-7 GOV-01.3 → Blocks SCF R-SC-3 GOV-01.3 → Blocks SCF R-SC-4 GOV-01.3 → Blocks SCF R-SC-5 GOV-01.3 → Blocks SCF R-SC-6 GOV-01.3 → Relates SCF label_relativeControlWeighting_07 GOV-02 → Blocks EULAW CELEX:32022R2554#art_5 GOV-02 → Blocks EULAW CELEX:32022R2554#art_6_2 GOV-02 → Blocks EULAW CELEX:32022R2554#art_9 GOV-02 → Blocks EULAW CELEX:32022R2554#art_16 GOV-02 → Blocks SCF R-AC-1 GOV-02 → Blocks SCF R-AC-2 GOV-02 → Blocks SCF R-AC-3 GOV-02 → Blocks SCF R-AC-4 GOV-02 → Blocks SCF R-AM-1 GOV-02 → Blocks SCF R-AM-2 GOV-02 → Blocks SCF R-BC-1 GOV-02 → Blocks SCF R-BC-2 GOV-02 → Blocks SCF R-BC-3 GOV-02 → Blocks SCF R-BC-4 GOV-02 → Blocks SCF R-BC-5 GOV-02 → Blocks SCF R-EX-1 GOV-02 → Blocks SCF R-EX-3 GOV-02 → Blocks SCF R-EX-4 GOV-02 → Blocks SCF R-EX-6 GOV-02 → Blocks SCF R-EX-7 GOV-02 → Blocks SCF R-GV-8 GOV-02 → Blocks SCF R-IR-1 GOV-02 → Blocks SCF R-IR-2 GOV-02 → Blocks SCF R-IR-3 GOV-02 → Blocks SCF R-IR-4 GOV-02 → Blocks SCF R-SA-1 GOV-02 → Blocks SCF R-SC-1 GOV-02 → Blocks SCF R-SC-2 GOV-02 → Blocks SCF R-SC-3 GOV-02 → Blocks SCF R-SC-4 GOV-02 → Blocks SCF R-SC-5 GOV-02 → Blocks SCF R-SC-6 GOV-02 → Blocks EULAW CELEX:32016R0679#art_24 GOV-02.1 → Relates SCF label_SCRMFocusTier1STRATEGIC GOV-02.1 → Relates SCF label_SCRMFocusTier2OPERATIONAL GOV-02.1 → Relates SCF label_SCRMFocusTier3TACTICAL GOV-02.1 → Relates SCF label_cadence_Annual GOV-02.1 → Relates SCF label_PPTDFApplicability_Process GOV-02.1 → Relates SCF label_nISTCSFFunctionGrouping_Govern GOV-02.1 → Blocks SCF R-AC-1 GOV-02.1 → Blocks SCF R-AC-2 GOV-02.1 → Blocks SCF R-AC-3 GOV-02.1 → Blocks SCF R-AC-4 GOV-02.1 → Blocks SCF R-AM-1 GOV-02.1 → Blocks SCF R-AM-2 GOV-02.1 → Blocks SCF R-AM-3 GOV-02.1 → Blocks SCF R-BC-1 GOV-02.1 → Blocks SCF R-BC-2 GOV-02.1 → Blocks SCF R-BC-3 GOV-02.1 → Blocks SCF R-BC-4 GOV-02.1 → Blocks SCF R-BC-5 GOV-02.1 → Blocks SCF R-EX-1 GOV-02.1 → Blocks SCF R-EX-2 GOV-02.1 → Blocks SCF R-EX-3 GOV-02.1 → Blocks SCF R-EX-4 GOV-02.1 → Blocks SCF R-EX-5 GOV-02.1 → Blocks SCF R-EX-6 GOV-02.1 → Blocks SCF R-EX-7 GOV-02.1 → Blocks SCF R-GV-1 GOV-02.1 → Blocks SCF R-GV-2 GOV-02.1 → Blocks SCF R-GV-3 GOV-02.1 → Blocks SCF R-GV-4 GOV-02.1 → Blocks SCF R-GV-5 GOV-02.1 → Blocks SCF R-GV-6 GOV-02.1 → Blocks SCF R-GV-7 GOV-02.1 → Blocks SCF R-GV-8 GOV-02.1 → Blocks SCF R-IR-1 GOV-02.1 → Blocks SCF R-IR-2 GOV-02.1 → Blocks SCF R-IR-3 GOV-02.1 → Blocks SCF R-IR-4 GOV-02.1 → Blocks SCF R-SA-1 GOV-02.1 → Blocks SCF R-SA-2 GOV-02.1 → Blocks SCF R-SC-1 GOV-02.1 → Blocks SCF R-SC-2 GOV-02.1 → Blocks SCF R-SC-3 GOV-02.1 → Blocks SCF R-SC-4 GOV-02.1 → Blocks SCF R-SC-5 GOV-02.1 → Blocks SCF R-SC-6 GOV-02.1 → Relates SCF label_relativeControlWeighting_08 … and 46661 more

Tickets liés

Liens
Type de lien	Ticket
is related to	English

Secure Controls Framework -
The Secure Controls Framework® (SCF)

"The SCF is the Common Controls Framework™ (CCF), the world's most comprehensive cybersecurity and data privacy metaframework - it is also free to use. The entire concept is building secure, compliant and resilient capabilities in the most efficient and cost-effective manner possible.

The SCF is more than just a unified control catalog, since its included content creates a playbook for Governance, Risk & Compliance (GRC) capabilities. Used globally by organizations of every size, the SCF is a robust and scalable solution for security, compliance and resilience controls. As a comprehensive security framework, the SCF maps 1,400+ controls across 200+ laws, regulations, and industry frameworks so you can implement once and comply everywhere.

Like it or not, cybersecurity is a protracted war on an asymmetric battlefield, where the threats are everywhere and as defenders we have to make the effort to work together to help improve cybersecurity and data privacy practices, since we all suffer when massive data breaches occur or when cyber attacks have physical impacts. Hackers share information on attack methods with other hackers, so why shouldn’t the good guys share information on how to best protect an organization? We decided to take action and make a difference, since we feel it is too important to wait for someone else to fix the problems that exist.

The SCF is made up of volunteers, mainly specialists within the cybersecurity profession, who focus on GRC and the cybersecurity side of data privacy. These are auditors, engineers, architects, incident responders, consultants and other specialists who live and breathe these topics on a daily basis. The end product is "expert-derived content" that makes up the SCF." https://securecontrolsframework.com/

Terms & Conditions

The SCF End User License Agreement (EULA) governs the use of the Secure Controls Framework® (SCF) under the Creative Commons Attribution-No Derivatives 4.0 International Public License.

Sous-tickets

New version: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 47 new, 1591 changed, 757 removed, 57494 links

New sections (47)

Changed sections (1591)

Sections no longer in the document (only marked, not deleted) (757)

New links (57494)

Links not found (165)

Links the source no longer names (they stay): 46757

Assignments added: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 112 links

New links (112)

Links not found (165)

Links the source no longer names (they stay): 46764

New version: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 1592 new, 0 changed, 0 removed, 1591 links

New sections (1592)

New links (1591)

Links not found (165)

Links the source no longer names (they stay): 46764

Assignments added: Secure Controls Framework (SCF) (2026.3-86f09c716a) – 5131 links

New links (5131)

Links not found (165)

Links the source no longer names (they stay): 46861

Tickets liés

The Secure Controls Framework® (SCF)

Terms & Conditions