relative Control Weighting = 05

Ticket collegati

Collegamenti
Tipo di collegamento Ticket
is related to Defining Business Context & Mission
is related to High Value Assets (HVAs)
is related to Steering Committee & Program Oversight
is related to Operationalizing Security, Compliance & Resilience Capabilities
is related to Assigned Responsibilities for AI & Autonomous Technologies
is related to Social Scoring
is related to AI & Autonomous Technologies Knowledge Limits
is related to AI & Autonomous Technologies Development Practices
is related to AI & Autonomous Technologies Testing Techniques
is related to Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV)
is related to AI TEVV Trustworthiness Assessment
is related to AI TEVV Tools
is related to AI TEVV Trustworthiness Demonstration
is related to AI TEVV Results Evaluation
is related to AI TEVV Effectiveness
is related to AI TEVV Reporting
is related to AI & Autonomous Technologies Residual Risks
is related to AI & Autonomous Technologies Viability Decisions
is related to AI TEVV Post-Deployment Monitoring
is related to Updating AI & Autonomous Technologies
is related to Operational Resilience Capabilities
is related to Resume Essential Missions & Business Functions
is related to Automated Training Environments
is related to Contingency Plan Testing For Alternate Storage & Processing Sites
is related to Alternate Site Priority of Service
is related to Performance Monitoring
is related to Ability To Demonstrate Conformity
is related to Executive Leadership Oversight of Security, Compliance & Resilience Controls
is related to Internal Audit Function
is related to Assessment Team Subject Matter Expertise
is related to Assessor Access
is related to Assessment Rigor
is related to Event Log & Security-Relevant Telemetry Analysis & Triage
is related to Integration of Scanning & Other Monitoring Information
is related to Synchronization With Authoritative Time Source
is related to Account Creation and Modification Logging
is related to Individuals Posing Greater Risk
is related to Cryptographic Key Management
is related to Certificate Authorities
is related to Certificate Monitoring
is related to Digital Media Sanitization Equipment Testing
is related to Use of External Technology Assets, Applications and/or Services (TAAS)
is related to Restrict Communications
is related to Operating Environment Certification
is related to Collaborative Computing Capability Disabling / Removal In Secure Work Areas
is related to Explicitly Indicate Current Participants
is related to Participant Connection Management
is related to Social Media & Social Networking Restrictions
is related to Third-Party Personnel
is related to Change of Roles & Duties
is related to Termination of Employment
is related to In-Person or Trusted Third-Party Registration
is related to Privileged Command Execution
is related to User Identity (ID) Management
is related to Standardized Identifier Management (User Names)
is related to Automated Support For Password Strength
is related to Access To Sensitive / Regulated Data
is related to Revocation of Access Authorizations
is related to Integrated Security Incident Response Team (ISIRT)
is related to Regulatory & Law Enforcement Contacts
is related to Timely Maintenance
is related to Prevent Unauthorized Exfiltration
is related to Protocol Compliance Enforcement
is related to Domain Name Verification
is related to Bandwidth Control
is related to Human Reviews
is related to Route Privileged Network Access
is related to Monitoring Physical Access
is related to Personal Data Process Manager (PDPM)
is related to Reasonable Data Privacy Practices
is related to Security of Personal Data (PD)
is related to Security, Compliance & Resilience In Project Management
is related to System Partitioning
is related to Honeyclients
is related to Heterogeneity
is related to Secure Practices Guidelines
is related to Development Methods, Techniques & Processes
is related to Criticality Analysis During Development
is related to Information Assurance Enabled Products
is related to Behavioral Baselining
is related to Indicators of Exposure (IOE)
is related to Unauthorized Code On Web Pages
is related to Control Objectives
is related to Status Reporting To Governing Body
is related to Contacts With Authorities
is related to AI Model & Agent Inventory & Lifecycle Management
is related to Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization
is related to AI Threat Modeling & Risk Assessment
is related to Model & AI Agent Documentation
is related to AI & Autonomous Technologies Output Marking
is related to AI & Autonomous Technologies Output Filtering
is related to Emotion Inference
is related to Biometric Categorization
is related to AI & Autonomous Technologies Human Domain Knowledge Reliance
is related to Real World Testing of AI & Autonomous Technologies
is related to Generative Artificial Intelligence (GAI) Identification
is related to Documenting Testing Guidance
is related to AI & Autonomous Technologies Model Validation
is related to AI TEVV Comparable Deployment Settings
is related to AI TEVV Third-Party Risk Management
is related to AI & Autonomous Technologies Data Relevance
is related to AI & Autonomous Technologies Use Notification To Employees
is related to AI & Autonomous Technologies Use Notification To Users
is related to Measuring AI & Autonomous Technologies Effectiveness
is related to Efficacy of AI & Autonomous Technologies Measurement
is related to Serious Incident Reporting For AI & Autonomous Technologies
is related to Anomaly Detection & Human Oversight
is related to Human-in-the-Loop & Escalation
is related to Emergent Behavior & Collusion Protections
is related to Multi-Agent Trust & Communication Validation
is related to AI & Autonomous Technologies System Value Chain Fallbacks
is related to AI Model Resilience
is related to AI Model Pollution
is related to Cascading Hallucination Defense
is related to Resource Exhaustion & Denial of Service (DoS) Resilience
is related to AI Agent Governance
is related to Infrastructure Hardening & Isolation
is related to AI Agent Limitations
is related to Tool & Application Programming Interface (API) Invocation Controls
is related to AI Agent Orchestration Protocol Safeguards
is related to AI Agent Data Pipeline & Input Integrity
is related to AI Agent Privileged Role & Delegation Boundaries
is related to AI Agent Data Access Restrictions
is related to AI Agent Data Extraction
is related to AI Agent Identity & Impersonation Defense
is related to AI Agent Logic Integrity
is related to Sandboxing AI Agents
is related to AI Agent Prompt Injection Defense
is related to AI Agent Self-Modification Controls
is related to Purging AI Agent Data
is related to AI Agent Delegation and Chaining Control
is related to AI Agent Behavioral Drift Detection
is related to AI Agent Action Authentication & Authorization
is related to AI Agent Transparency & Audit
is related to AI Agent Explainability
is related to AI Agent Ethics, Fairness & Bias Detection
is related to AI Agent Output Integrity & Verification
is related to AI Agent Resource Limiting
is related to Agentic Output Traceability & Repudiation
is related to AI Agent Logging
is related to AI Agent Session Management
is related to Human-in-the-Loop Workload & Manipulation
is related to Robotic Process Automation (RPA)
is related to Business Process Task Enumeration
is related to Standardized Naming Convention
is related to Asset-Service Dependencies
is related to Stakeholder Identification & Involvement
is related to Accountability Information
is related to Configuration Management Database (CMDB)
is related to Automated Location Tracking
is related to Asset Attributes
is related to Removal of Previous Versions
is related to Predictable Failure Analysis
is related to Recovery Time / Point Objectives (RTO / RPO)
is related to Alternate Communications Channels
is related to Contingency Plan Update Notifications
is related to Coordinate with Related Plans
is related to Coordinate With External Service Providers
is related to Contingency Training
is related to Primary Storage Site Accessibility
is related to Alternate Processing Site Accessibility
is related to Preparation for Use
is related to Inability to Return to Primary Site
is related to Personnel Transfer to Alternate Processing / Storage Site
is related to Separation of Primary / Alternate Providers
is related to Restore Within Time Period
is related to Isolated Recovery Environment
is related to Redundant Secondary System
is related to Transfer to Alternate Storage Site
is related to Continuous Data Protection (CDP)
is related to Test Restoration Using Sampling
is related to Dual Authorization For Sensitive / Regulated Backup Media Destruction
is related to Elastic Expansion
is related to Report Verification Results
is related to Automated Security Response
is related to Designated Certifying Official
is related to Conformity Attestations
is related to Audit Planning Activities
is related to Control Reciprocity
is related to Control Inheritance
is related to Grievances
is related to Grievance Response
is related to Statement of Applicability (SOA)
is related to Development & Test Environment Configurations
is related to User-Initiated Logouts / Message Displays
is related to Infrared Communications
is related to Disable Wireless Networking
is related to Configuration Management Role Assignment
is related to Explicitly Allow / Deny Applications
is related to Refresh from Trusted Sources
is related to Centralized Management of Event Log & Security-Relevant Telemetry Content
is related to Analyze and Prioritize Monitoring Requirements
is related to Audit Level Adjustments
is related to System-Wide / Time-Correlated Audit Trail
is related to Centralized Event Log & Security-Relevant Telemetry Review & Analysis
is related to Automated Incident Responder Alerting
is related to Trend Analysis Reporting
is related to Alert Threshold Tuning
is related to Correlation with Physical Monitoring
is related to Event Log & Security-Relevant Telemetry Storage Capacity Alerting
is related to Event Log & Security-Relevant Telemetry Backup on Separate Physical Systems / Components
is related to Cryptographic Protection of Event Logs & Security-Relevant Telemetry
is related to Dual Authorization for Event Log & Security-Relevant Telemetry Movement
is related to Privileged User Oversight
is related to Monitoring for Indicators of Compromise (IOC)
is related to Automated Response to Suspicious Events
is related to Analyze Traffic for Covert Exfiltration
is related to Unauthorized Network Services
is related to Wireless Network Monitoring
is related to File Activity Monitoring (FAM)
is related to Permitted Monitoring Actions
is related to Changes by Authorized Individuals
is related to Verbosity Logging for Boundary Devices
is related to Sharing of Event Logs & Security-Relevant Telemetry
is related to Cryptographic Management
is related to Alternate Physical Protection
is related to Pre/Post Transmission Handling
is related to Encrypting Offline Storage
is related to External System Cryptographic Key Control
is related to Transmission of Cybersecurity & Data Protection Attributes
is related to Cryptographic Hash
is related to Export-Controlled Cryptography
is related to Storing Authentication Data
is related to Encrypting Data Outside of Controlled Areas
is related to Dual Authorization for Sensitive / Regulated Data Destruction
is related to First Time Use Sanitization
is related to Prohibit Portable Storage Devices Use Without Owner
is related to Non-Organizationally Owned Technology Assets, Applications and/or Services (TAAS)
is related to Information Search & Retrieval
is related to Data Quality Operations
is related to Data Quality Management
is related to Data Analytics Bias
is related to Certificate-Based Authentication
is related to Real-Time Operating System (RTOS) Security
is related to Binary or Machine-Executable Code
is related to Antimalware Protection Mechanism Testing
is related to Extended Detection & Response (XDR)
is related to Automated Notifications of Integrity Violations
is related to Automated Response to Integrity Violations
is related to Boot Process Integrity
is related to Protection of Boot Firmware
is related to Citizenship Requirements
is related to Post-Employment Requirements Awareness
is related to Preventative Access Restriction
is related to Automated Employment Status Notifications
is related to Identify Critical Skills & Gaps
is related to Remediate Identified Skills Deficiencies
is related to Identify Vital Security, Compliance & Resilience Staff
is related to Establish Redundancy for Vital Security, Compliance & Resilience Staff
is related to Perform Succession Planning
is related to Identity Evidence
is related to Identity Evidence Validation & Verification
is related to In-Person Validation & Verification
is related to Attribute-Based Access Control (ABAC)
is related to Access Profile Rules
is related to Automated System Account Management (Directory Services)
is related to Automated Audit Actions
is related to Multiple System Accounts
is related to Emergency Accounts
is related to Dynamic Management
is related to Cross-Organization Management
is related to Expiration of Cached Authenticators
is related to Biometric Authentication
is related to Dual Authorization for Privileged Commands
is related to Network Access to Privileged Commands
is related to Privilege Levels for Code Execution
is related to Out-of-Band Authentication (OOBA)
is related to Device Attestation
is related to Device Authorization Enforcement
is related to Sharing Identification & Authentication Information
is related to Out-of-Band (OOB) Multi-Factor Authentication (MFA)
is related to Alternative Multi-Factor Authentication (MFA)
is related to Multi-Factor Authentication (MFA) For Local Access to Privileged Accounts
is related to Single Sign-On (SSO) Transparent Authentication
is related to Adaptive Identification & Authentication
is related to Invalidate Session Identifiers at Logout
is related to Incident Classification & Prioritization
is related to Correlation with External Organizations
is related to Dynamic Reconfiguration
is related to Simulated Incidents
is related to Automated Incident Response Training Environments
is related to Serious Incident Reporting
is related to Incident Pattern Analysis
is related to Recurring Incident Analysis
is related to Incident Reporting Assistance
is related to Coordination With External Providers
is related to Detonation Chambers (Sandboxes)
is related to Plan / Coordinate with Other Organizational Entities
is related to Preventative Maintenance
is related to Predictive Maintenance
is related to Automated Maintenance Activities
is related to Automated Support For Predictive Maintenance
is related to Maintenance Tools
is related to Inspect Tools
is related to Inspect Media
is related to Restrict Tool Usage
is related to Remote Maintenance Comparable Security & Sanitization
is related to Non-System Related Maintenance
is related to Software Defined Networking (SDN)
is related to Policy Decision Point (PDP)
is related to Visibility of Encrypted Communications
is related to Wireless Boundaries
is related to Email Labeling
is related to Separate Subnet for Connecting to Different Security Domains
is related to Cross Domain Authentication
is related to Data Type Identifiers
is related to Decomposition Into Policy-Related Subcomponents
is related to Detection of Unsanctioned Information
is related to Cross Domain Content Transfer
is related to Isolation of System Components
is related to Dynamic Isolation & Segregation (Sandboxing)
is related to Conceal / Randomize Communications
is related to Object Security Attributes
is related to Access To Critical Systems
is related to Lockable Physical Casings
is related to Monitoring Physical Access To Critical Systems
is related to Automated Records Management & Review
is related to Automation Support for Water Damage Protection
is related to Automatic Fire Suppression
is related to Information Leakage Due To Electromagnetic Signals Emanations
is related to Personal Data (PD) Lineage
is related to Personal Data (PD) Categories
is related to Binding Corporate Rules (BCR)
is related to Notification of Disclosure Requests To Data Subject
is related to Disclosure Request Rejections
is related to Justification To Reject Disclosure Requests
is related to Dissemination of Data Privacy Program Information
is related to Prohibition of Selling, Processing and/or Sharing Personal Data (PD)
is related to Cookie Management
is related to Global Privacy Control (GPC)
is related to Continued Use of Personal Data (PD)
is related to Temporary Files Containing Personal Data (PD)
is related to Personal Data (PD) Accuracy & Integrity
is related to Communicating Processing Changes
is related to Data Subject Communications Documentation
is related to Data Subject Rights Management
is related to Correcting Inaccurate Personal Data (PD)
is related to Right to Erasure
is related to Personal Data (PD) Exports
is related to Obligation To Inform Third-Parties
is related to Joint Processing of Personal Data (PD)
is related to Strategic Plan & Objectives
is related to Targeted Capability Maturity Levels
is related to Purpose Validation
is related to Prioritization To Address Evolving Risks & Threats
is related to Manage Organizational Knowledge
is related to Risk Catalog
is related to Flexible Technology Stack
is related to System Privileges Isolation
is related to Randomness
is related to Change Processing & Storage Locations
is related to Application Container
is related to Privileged Environments
is related to Security Orchestration, Automation, and Response (SOAR)
is related to AI & Autonomous Technologies Risk Management Training
is related to Social Engineering & Mining
is related to Software Design Root Cause Analysis (RCA)
is related to Integrity Mechanisms for Software / Firmware Updates
is related to Disclosure of Vulnerabilities
is related to Commercial Off-The-Shelf (COTS) Security Solutions
is related to Physical Diagnostic & Test Interfaces
is related to Manual Code Review
is related to Hardware Integrity Verification
is related to Provider Contingency Plan
is related to Third-Party Attestation (3PA)
is related to Threat Catalog
is related to Attack Surface Scope
is related to Vulnerability Exploitation Analysis
is related to Automated Software & Firmware Updates
is related to Acceptable Discoverable Information
is related to Correlate Scanning Information