relative Control Weighting = 08

Susietos užduotys

Saitai
Saito tipas Užduotis
is related to Periodic Review & Update of Security, Compliance & Resilience Program
is related to Quality Management System (QMS)
is related to AI & Autonomous Technologies Mission and Goals Definition
is related to AI & Autonomous Technologies Value Sustainment
is related to AI & Autonomous Technologies Context Definition
is related to AI Model & Agent Inventory & Lifecycle Management
is related to AI & Autonomous Technologies Risk Response
is related to AI & Autonomous Technologies Business Case
is related to AI & Autonomous Technologies Potential Benefits Analysis
is related to AI & Autonomous Technologies Fairness & Bias
is related to Real World Testing of AI & Autonomous Technologies
is related to Standardized Naming Convention
is related to Updates During Installations / Removals
is related to Identify Critical Assets
is related to Technology Assets, Applications, Services and/or Data (TAASD) Criticality Ratings
is related to Stakeholder Identification & Involvement
is related to Approved Technologies
is related to Automated Unauthorized Component Detection
is related to Unattended End-User Equipment
is related to Kiosks & Point of Interaction (PoI) Devices
is related to Secure Disposal, Destruction or Re-Use of Equipment
is related to Return of Assets
is related to Removal of Assets
is related to Use of Personal Devices
is related to Defined Operational Resilience Requirements
is related to Recovery Operations Communications
is related to Alternate Communications Channels
is related to Primary Storage Site Accessibility
is related to Alternate Processing Site
is related to Capacity & Performance Planning Policy
is related to Capacity & Performance Management
is related to Capacity Planning
is related to Change Management Program
is related to Prohibition Of Changes
is related to Cloud Services
is related to Cloud Security Architecture
is related to Assessment Methods
is related to Assurance Levels (AL)
is related to Baseline Tailoring
is related to Physically Disable or Remove Capabilities
is related to Baseline Configuration Reviews & Updates
is related to Centralized Management of Event Log & Security-Relevant Telemetry Content
is related to Audit Level Adjustments
is related to System Generated Event Logs & Security-Relevant Telemetry
is related to Centralized Collection of Event Logs & Security-Relevant Telemetry
is related to Correlation with Physical Monitoring
is related to Content of Event Logs
is related to Time Stamps
is related to Unusual Transactions
is related to Use of Cryptographic Controls
is related to Transmission of Cybersecurity & Data Protection Attributes
is related to Sensitive / Regulated Data Governance
is related to Data Stewardship
is related to Sensitive / Regulated Media Records
is related to Media Marking
is related to Data Storage Location Reviews
is related to Digital & Non-Digital Media Disposal
is related to Digital Media Sanitization
is related to Sanitization of Sensitive / Regulated Data
is related to Digital Media Sanitization Documentation
is related to Portable Storage Devices
is related to Non-Organizationally Owned Technology Assets, Applications and/or Services (TAAS)
is related to Information Search & Retrieval
is related to Electronic Discovery (eDiscovery)
is related to Embedded Technology Maintenance
is related to Power Level Monitoring
is related to Embedded Technology Reviews
is related to Centralized Management of Endpoint Protection Mechanisms
is related to Automatic Endpoint Protection Mechanism Updates
is related to Documented Endpoint Security Protection Measures
is related to Human Resources Security Management
is related to Confidentiality Agreements
is related to Personnel Termination
is related to Separation of Duties (SoD)
is related to Periodic Review of Individual & Service Account Privileges
is related to Authenticator Management
is related to Use of Privileged Utility Programs
is related to Continuous Incident Response Improvements
is related to Incident Response Capabilities Testing
is related to Public Relations & Reputation Repair
is related to Chain of Custody & Forensics
is related to Assessor Independence
is related to Maintenance Validation
is related to Maintenance Monitoring
is related to Prevent Unauthorized Removal
is related to Personally-Owned Mobile Devices
is related to Organization-Owned Mobile Devices
is related to External System Connections
is related to Out-of-Band Channels
is related to Sensitive / Regulated Data Enclave (Secure Zone)
is related to Segregation From Enterprise Services
is related to Network Device Plane Segmentation
is related to Software Defined Networking (SDN)
is related to Network Access Control (NAC)
is related to DNS & Content Filtering
is related to Dual Authorization for Physical Access
is related to Physical Access Logs
is related to Physical Security of Offices, Rooms & Facilities
is related to Working in Secure Areas
is related to Documenting Data Processing Activities
is related to Personal Data (PD) Lineage
is related to Updating Personal Data (PD) Process
is related to Data Privacy Requirements for Contractors & Service Providers
is related to Project & Resource Management Policy
is related to Strategic Plan & Objectives
is related to Targeted Capability Maturity Levels
is related to Business Impact Analysis (BIA)
is related to Secure Engineering Principles
is related to Defense-In-Depth (DiD) Architecture
is related to Process Isolation
is related to Security Function Isolation
is related to Non-Persistence
is related to Security Operations Policy
is related to Standardized Operating Procedures (SOP)
is related to Security Operations Center (SOC)
is related to Security Awareness & Training Policy
is related to Security, Compliance & Resilience-Minded Workforce
is related to Maintaining Workforce Development Relevancy
is related to Developer Architecture & Design
is related to Programming Language Selection
is related to Secure Software Development Practices (SSDP)
is related to Product-Specific Risk Assessment Artifacts
is related to Input Data Validation
is related to Security, Compliance & Resilience Representatives For Product Changes
is related to Static Code Analysis
is related to Developer-Provided Training
is related to Hardware Integrity Verification
is related to Adequate Supply
is related to Third-Party Risk Assessments & Approvals
is related to Responsible, Accountable, Supportive, Consulted & Informed (RASCI) Matrix
is related to Threat Management Policy
is related to Threat Intelligence Program
is related to Dynamic Threat Awareness
is related to Threat Intelligence Feeds
is related to Threat Intelligence Reporting
is related to Threat Catalog
is related to Attack Surface Scope
is related to Vulnerability Exploitation Analysis
is related to Centralized Management of Flaw Remediation Processes
is related to Continuous Vulnerability Remediation Activities
is related to Web Security Policy
is related to Web Security Standard
is related to Client-Facing Web Services
is related to Publicly Accessible Content Reviews
is related to Secure Practices Alignment Justification
is related to Exception Management
is related to Stakeholder Accountability Structure
is related to Select Controls
is related to Assess Controls
is related to Authorize Technology Assets, Applications and/or Services (TAAS)
is related to Monitor Controls
is related to AI & Autonomous Technologies-Related Legal Requirements Identification
is related to AI & Autonomous Technologies Continuous Improvements
is related to AI & Autonomous Technologies Impact Assessment
is related to AI & Autonomous Technologies Targeted Application Scope
is related to AI & Autonomous Technologies Requirements Definitions
is related to AI & Autonomous Technologies Implementation Tasks Definition
is related to AI & Autonomous Technologies Testing Techniques
is related to AI TEVV Model Collapse Mitigations
is related to AI & Autonomous Technologies Stakeholder Diversity
is related to AI & Autonomous Technologies Deployment
is related to AI & Autonomous Technologies Irregularity Reporting
is related to AI & Autonomous Technologies Measurement Approaches
is related to AI & Autonomous Technologies Domain Expert Reviews
is related to Pre-Trained AI & Autonomous Technologies Models
is related to Serious Incident Root Cause Analysis (RCA) For AI & Autonomous Technologies
is related to Technology Assets, Applications, Services and/or Data (TAASD) Ownership Assignment
is related to Comprehensive Asset Inventory Management
is related to Asset Discovery
is related to Software Licensing Restrictions
is related to Provenance
is related to Asset Scope Classification
is related to Security of Assets & Media
is related to Management Approval For External Media Transfer
is related to Technology Assets, Applications, Services and/or Data (TAASD) Storage
is related to Travel-Only Devices
is related to Re-Imaging Devices After Travel
is related to Stable Versions
is related to Alternate Sources for Continued Support
is related to Ongoing Contingency Planning
is related to Contingency Planning Components
is related to Resume All Missions & Business Functions
is related to Continue Essential Mission & Business Functions
is related to Resume Essential Missions & Business Functions
is related to Recovery Images
is related to Failover Capability
is related to Separate Storage for Critical Information
is related to Data Backup & Restoration Hardware Protection
is related to Resource Priority
is related to Configuration Change Control
is related to Access Restriction For Change
is related to Unauthorized Software Installation Alerts
is related to Customer Responsibility Matrix (CRM)
is related to Multi-Tenant Event Logging Capabilities
is related to Multi-Tenant Forensics Capabilities
is related to Multi-Tenant Incident Response Capabilities
is related to Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Ability To Demonstrate Conformity
is related to Functional Review Of Security, Compliance & Resilience Controls
is related to Periodic Audits
is related to Dual Use Technology
is related to USML or CCL Identification
is related to Export-Controlled Access Restrictions
is related to Export Activities Documentation
is related to Work Products
is related to Defensible Evidence of Due Diligence
is related to Defensible Evidence of Due Care
is related to Security, Compliance & Resilience Status Reporting
is related to Control Assurance Automation (CAA) Evidence Integrity & Provenance
is related to Microphones & Web Cameras
is related to Multi-Function Devices (MFD)
is related to Video Teleconference (VTC) Security
is related to Voice Over Internet Protocol (VoIP) Security
is related to Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas
is related to Periodic Configuration Reviews
is related to Zero-Touch Provisioning (ZTP)
is related to Embedded Sensor Data Use Restrictions
is related to Embedded Sensor Data Collection Minimization
is related to Control Assurance Automation (CAA) Separation of Duties
is related to Event Log & Security-Relevant Telemetry Storage Capacity
is related to Synchronization With Authoritative Time Source
is related to Event Log & Security-Relevant Telemetry Access by Subset of Privileged Users
is related to Privileged Functions Logging
is related to Insider Threats
is related to Third-Party Threats
is related to Monitoring For Information Disclosure
is related to Monitoring for Third-Party Information Disclosure
is related to Unauthorized Activities
is related to Proxy Logging
is related to Host Intrusion Detection & Prevention Systems (HIDS & HIPS) Monitoring
is related to De-Militarized Zone (DMZ) Monitoring
is related to Sensitive Event Log & Security-Relevant Telemetry Data
is related to Limit Personal Data (PD) In Event Logs & Security-Relevant Telemetry
is related to Database Logging
is related to Response To Event Log Processing Failures
is related to Non-Repudiation
is related to Encrypting Storage Media
is related to Database Encryption
is related to Cryptographic Key Loss or Change
is related to Assigned Cryptographic Key Owners
is related to Certificate Authorities
is related to Highest Classification Level
is related to Data Reclassification
is related to Restrict Sensitive / Regulated Data Access To Authorized Individuals
is related to Sensitive / Regulated Data Release Sanitization
is related to Media Storage
is related to Digital Media Use Restrictions
is related to Limits of Authorized Use To Process, Store and/or Transmit Data
is related to Ad-Hoc Transfers
is related to Transfer Authorizations
is related to Media & Data Retention
is related to Minimize Sensitive / Regulated Data Exposure
is related to Archived Data Set Retention
is related to Archiving Sensitive / Regulated Data
is related to Limit Sensitive / Regulated Data In Testing, Training & Research
is related to De-Identification (Anonymization)
is related to De-Identify Dataset Upon Collection
is related to Removal, Masking, Encryption, Hashing or Replacement of Direct Identifiers
is related to Attribute Value Changes By Authorized Individuals
is related to Attribute Displays for Output Devices
is related to Attribute Configuration By Authorized Individuals
is related to Data Loss Prevention (DLP)
is related to Embedded Technology Inventory Management
is related to Remote Management of Embedded Technologies
is related to Restrict Communications
is related to Authorized Communications
is related to Safety Instrumented System (SIS)
is related to Heuristic / Nonsignature-Based Malware Detection
is related to Endpoint File Integrity Monitoring (FIM)
is related to Position Categorization
is related to Policy Familiarization & Acknowledgement
is related to Post-Employment Requirements Notification
is related to Workplace Investigations
is related to Incompatible Roles
is related to Identifying Authorized Work Locations
is related to Communicating Authorized Work Locations
is related to Password Managers
is related to Passkeys
is related to Dedicated Administrative Machines
is related to Permitted Actions Without Identification or Authorization
is related to Replay-Resistant Multi-Factor Authentication (MFA)
is related to Cryptographic Module Authentication
is related to Re-Authentication
is related to Compliance As Code (CAC) Least Privileges
is related to Compliance As Code (CAC) Credentials Management
is related to Indicators of Compromise (IOC)
is related to Incident Response Plan (IRP) Update
is related to Root Cause Analysis (RCA) & Lessons Learned
is related to Situational Awareness For Incidents
is related to Vulnerabilities Related To Incidents
is related to Sensitive / Regulated Data Spill Response
is related to Sensitive / Regulated Data Spill Responsible Personnel
is related to Sensitive / Regulated Data Spill Training
is related to Post-Sensitive / Regulated Data Spill Operations
is related to Sensitive / Regulated Data Exposure to Unauthorized Personnel
is related to Data Breach
is related to Post-Incident Technology Assets, Applications and Services (TAAS) Validation
is related to Technical Verification
is related to Maintain Configuration Control During Maintenance
is related to Field Maintenance
is related to Off-Site Maintenance
is related to Restricting Access To Authorized Technology Assets, Applications and/or Services (TAAS)
is related to Domain Name Verification
is related to Internet Address Denylisting
is related to Split Tunneling
is related to Zero Trust Architecture (ZTA)
is related to Intranets
is related to Rogue Wireless Detection
is related to Expeditious Remote Access Disconnect / Disable Capability
is related to Remote Access Privileged Commands & Sensitive Data Access
is related to Network Connection Termination
is related to Session Integrity
is related to Third-Party Remote Access Governance
is related to Wireless Intrusion Detection / Prevention Systems (WIDS / WIPS) Deployment
is related to Web Application Firewall (WAF)
is related to Safeguarding Data Over Open Networks
is related to Wireless Link Protection
is related to Sender Policy Framework (SPF)
is related to Alternate Work Site
is related to Distinguish Visitors from On-Site Personnel
is related to Identification Requirement
is related to Delivery & Removal
is related to Access Control for Output Devices
is related to Automatic Voltage Controls
is related to Emergency Shutoff
is related to Emergency Power
is related to Water Damage Protection
is related to Temperature & Humidity Controls Alerting
is related to Data Privacy Accountability Structure
is related to Inventory of Personal Data (PD)
is related to Flaw Remediation with Personal Data (PD)
is related to Personal Data (PD) Control Testing, Training & Monitoring
is related to Accounting of Disclosures
is related to Usage Restrictions of Personal Data (PD)
is related to Internal Use of Personal Data (PD) For Testing, Training and Research
is related to Personal Data (PD) Retention & Disposal
is related to Security, Compliance & Resilience Protection Portfolio Management
is related to Security, Compliance & Resilience Resource Management
is related to Allocation of Resources
is related to Risk Management Resourcing
is related to Risk Assessment Methodology
is related to Risk Assessment Stakeholder Involvement
is related to AI & Autonomous Technologies Supply Chain Impacts
is related to System Partitioning
is related to Application Partitioning
is related to Information In Shared Resources
is related to Fail Secure
is related to Fail Safe
is related to Information Output Filtering
is related to Memory Protection
is related to Virtual Machine Images
is related to Secure Log-On Procedures (Trusted Path)
is related to Operations Security
is related to Shadow Information Technology Detection
is related to Security, Compliance & Resilience Awareness Training
is related to Role-Based Security, Compliance & Resilience Training
is related to Cyber Threat Environment Situational Awareness
is related to Continuing Professional Education (CPE) - Security, Compliance & Resilience Personnel
is related to Continuing Professional Education (CPE) - DevOps Personnel
is related to Reporting Exploitable Vulnerabilities
is related to Functional Properties
is related to Administrator Documentation
is related to Identification & Justification of Ports, Protocols & Services
is related to Customized Development of Critical Components
is related to Logging Syntax
is related to Pre-Established Secure Configurations
is related to Secure Migration Practices
is related to Library Privileges
is related to Approved Code
is related to Archiving Software Releases
is related to Test Data Integrity
is related to Software / Firmware Integrity Verification
is related to Third-Party Inventories
is related to Conflict of Interests
is related to Third-Party Authentication Practices
is related to Managing Changes To Third-Party Services
is related to Third-Party Incident Response & Recovery Capabilities
is related to Terminating Third-Party Relationships
is related to Technology Assets, Applications, Services and Data (TAASD) Disposition
is related to Indicators of Exposure (IOE)
is related to Vulnerability Disclosure Program (VDP)
is related to Insider Threat Program
is related to Insider Threat Awareness
is related to Vulnerability Ranking
is related to Update Vulnerability Scanning Tools
is related to Breadth / Depth of Coverage For Vulnerability Scanning
is related to Web Security
is related to Strong Customer Authentication (SCA)
is related to Website Change Detection