SCRM Focus Tier 1 STRATEGIC

Kwistjonijiet marbuta

Links
Tip ta’ link Kwistjoni
is related to Security, Compliance & Resilience Governance Policy
is related to Security, Compliance & Resilience Program (SCRP)
is related to Centralized Management of Security, Compliance & Resilience Controls
is related to Publishing Security, Compliance & Resilience Documentation
is related to Periodic Review & Update of Security, Compliance & Resilience Program
is related to Exception Management
is related to Assigned Security, Compliance & Resilience Responsibilities
is related to Materiality Determination
is related to High Value Assets (HVAs)
is related to Steering Committee & Program Oversight
is related to Measures of Performance
is related to Forced Technology Transfer (FTT)
is related to Contacts With Authorities
is related to Contacts With Groups & Associations
is related to Quality Management System (QMS)
is related to Artificial Intelligence & Autonomous Technologies Policy
is related to Artificial Intelligence (AI) & Autonomous Technologies Governance
is related to AI & Autonomous Technologies Mission and Goals Definition
is related to AI & Autonomous Technologies Value Sustainment
is related to AI & Autonomous Technologies Context Definition
is related to AI & Autonomous Technologies-Related Legal Requirements Identification
is related to Situational Awareness of AI & Autonomous Technologies In Use
is related to AI Model & Agent Inventory & Lifecycle Management
is related to Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization
is related to AI & Autonomous Technologies Internal Controls
is related to AI & Autonomous Technologies Risk Profiling
is related to AI & Autonomous Technologies Risk Management Decisions
is related to AI Threat Modeling & Risk Assessment
is related to Novel Risk Assessment Methods & Technologies
is related to AI & Autonomous Technologies Risk Tracking Approaches
is related to AI & Autonomous Technologies Business Case
is related to AI & Autonomous Technologies Potential Costs Analysis
is related to Model & AI Agent Documentation
is related to Release Owner Gate (ROG) For AI-Augmented Content
is related to AI & Autonomous Technologies Output Filtering
is related to Human Moderation of AI & Autonomous Technologies-Generated Content
is related to AI & Autonomous Technologies Intellectual Property Infringement Protections
is related to Data Source Identification
is related to Asset Management Policy
is related to Asset Categorization
is related to Telecommunications Equipment
is related to Business Continuity & Disaster Recovery Policy
is related to Contingency Plan Root Cause Analysis (RCA) & Lessons Learned
is related to Alternate Storage Site
is related to Separation from Primary Storage Site
is related to Primary Storage Site Accessibility
is related to Alternate Processing Site
is related to Alternate Site Priority of Service
is related to Preparation for Use
is related to Inability to Return to Primary Site
is related to Cloud Security Policy
is related to Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Compliance Policy
is related to Statutory, Regulatory & Contractual Compliance
is related to Non-Conformity Oversight
is related to Assessment Rigor
is related to Configuration Management Policy
is related to Configuration Management Program
is related to Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas
is related to Continuous Monitoring Policy
is related to Continuous Monitoring
is related to Event Log & Security-Relevant Telemetry Monitoring
is related to Cryptographic Protections Policy
is related to Encrypting Data At Rest
is related to Database Encryption
is related to Public Key Infrastructure (PKI)
is related to Transmission of Cybersecurity & Data Protection Attributes
is related to Certificate Authorities
is related to Data Classification & Handling Policy
is related to Data Protection
is related to Data Stewardship
is related to Sensitive / Regulated Data Protection
is related to Masking Displayed Sensitive / Regulated Data
is related to Media Storage
is related to Physically Secure All Media Containing Sensitive / Regulated Data
is related to Removable Media Security
is related to Use of External Technology Assets, Applications and/or Services (TAAS)
is related to Transfer Authorizations
is related to Embedded Technology Policy
is related to Endpoint Security Policy
is related to Endpoint Protection Mechanisms
is related to Human Resources Security Policy
is related to Position Categorization
is related to Roles With Special Protection Measures
is related to Citizenship Requirements
is related to Access Agreements
is related to Confidentiality Agreements
is related to Third-Party Personnel
is related to Separation of Duties (SoD)
is related to Incompatible Roles
is related to Identification & Authentication Policy
is related to Identity & Access Management (IAM)
is related to User Provisioning & De-Provisioning
is related to Identity Evidence
is related to Incident Response Policy
is related to Incident Response Operations
is related to Incident Classification & Prioritization
is related to Incident Response Training
is related to Chain of Custody & Forensics
is related to Incident Stakeholder Reporting
is related to Information Assurance Policy
is related to Control Validation Testing (CVT)
is related to Third-Party Assessment Reciprocity
is related to Maintenance Policy
is related to Maintenance Operations
is related to Mobile Device Management Policy
is related to Personally-Owned Mobile Devices
is related to Remote Purging
is related to Mobile Device Tampering
is related to Network Security Policy
is related to Software Defined Networking (SDN)
is related to Policy Decision Point (PDP)
is related to Physical & Environmental Security Policy
is related to Alternate Work Site
is related to Access To Critical Systems
is related to Component Marking
is related to Asset Monitoring and Tracking
is related to Data Privacy Policy
is related to Inventory of Personal Data (PD)
is related to Personal Data (PD) Inventory Automation Support
is related to Updating Personal Data (PD) Process
is related to Security of Personal Data (PD)
is related to Product or Service Delivery Restrictions
is related to Information Sharing With Third Parties
is related to Project & Resource Management Policy
is related to Strategic Plan & Objectives
is related to Targeted Capability Maturity Levels
is related to Security, Compliance & Resilience Resource Management
is related to Allocation of Resources
is related to Secure Development Life Cycle (SDLC) Management
is related to Security, Compliance & Resilience In Project Management
is related to Risk Management Policy
is related to Risk Management Program
is related to Risk Culture
is related to Material Risks
is related to Executive Leadership Approval For Managing Material Risk
is related to Risk Identification
is related to Risk Assessment Methodology
is related to Risk Assessment
is related to Instances Requiring A Risk Assessment
is related to Risk Assessment Update
is related to Secure Engineering & Architecture Policy
is related to Security, Compliance & Resilience Aware Design
is related to Secure Architecture Principles
is related to Operations Security
is related to Security Concept Of Operations (CONOPS)
is related to Secure Practices Guidelines
is related to Security Operations Center (SOC)
is related to Security Awareness & Training Policy
is related to Security, Compliance & Resilience-Minded Workforce
is related to Technology Development & Acquisition Policy
is related to Technology Development & Acquisition
is related to Product Management
is related to Disclosure of Vulnerabilities
is related to Product Tampering and Counterfeiting (PTC)
is related to DevSecOps
is related to Use of Live Data
is related to Software / Firmware Integrity Verification
is related to Bills of Material (BOMs)
is related to Third-Party Management Policy
is related to Third-Party Management
is related to Acquisition Strategies, Tools & Methods
is related to Supply Chain Risk Management (SCRM)
is related to Security, Compliance & Resilience Outsourcing Limitations
is related to Third-Party Risk Assessments & Approvals
is related to Third-Party Services
is related to Conflict of Interests
is related to Third-Party Processing, Storage and Service Locations
is related to Threat Management Policy
is related to Threat Intelligence Program
is related to Dynamic Threat Awareness
is related to Threat Intelligence Feeds
is related to Threat Catalog
is related to Material Threats
is related to Threat Analysis
is related to Behavioral Baselining
is related to Predictive Cyber Analytics
is related to Indicators of Exposure (IOE)
is related to Vulnerability & Patch Management Program (VPMP)
is related to Web Security Policy
is related to Secure Practices Alignment Justification
is related to Control Objectives
is related to Stakeholder Accountability Structure
is related to Authoritative Chain of Command
is related to Defining Business Context & Mission
is related to Status Reporting To Governing Body
is related to Operationalizing Security, Compliance & Resilience Capabilities
is related to State-Sponsored Espionage
is related to Mergers, Acquisitions & Divestitures (MA&D)
is related to Assigned Responsibilities for AI & Autonomous Technologies
is related to Trustworthy AI & Autonomous Technologies
is related to AI & Autonomous Technologies Continuous Improvements
is related to Adequate Protections For AI & Autonomous Technologies
is related to AI & Autonomous Technologies Impact Assessment
is related to AI & Autonomous Technologies Risk Mapping
is related to AI & Autonomous Technologies Likelihood & Impact Risk Analysis
is related to AI & Autonomous Technologies Risk Response
is related to Responsibility To Supersede, Deactivate and/or Disengage AI & Autonomous Technologies
is related to AI & Autonomous Technologies Potential Benefits Analysis
is related to AI & Autonomous Technologies Targeted Application Scope
is related to AI & Autonomous Technologies Cost / Benefit Mapping
is related to Data Source Integrity
is related to AI & Autonomous Technologies Harm Prevention
is related to AI & Autonomous Technologies Human Subject Protections
is related to AI & Autonomous Technologies Environmental Impact & Sustainability
is related to Previously Unknown AI & Autonomous Technologies Threats & Risks
is related to AI & Autonomous Technologies Requirements Definitions
is related to AI & Autonomous Technologies Knowledge Limits
is related to Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV)
is related to AI TEVV Trustworthiness Demonstration
is related to AI TEVV Safety Demonstration
is related to AI TEVV Security & Resiliency Assessment
is related to AI TEVV Transparency & Accountability Assessment
is related to AI TEVV Privacy Assessment
is related to AI TEVV Fairness & Bias Assessment
is related to AI & Autonomous Technologies Model Validation
is related to AI TEVV Results Evaluation
is related to AI & Autonomous Technologies Residual Risks
is related to AI & Autonomous Technologies Viability Decisions
is related to AI TEVV Post-Deployment Monitoring
is related to Robust Stakeholder Engagement for AI & Autonomous Technologies
is related to AI & Autonomous Technologies Stakeholder Competencies
is related to Unmeasurable AI & Autonomous Technologies Risks
is related to Efficacy of AI & Autonomous Technologies Measurement
is related to AI & Autonomous Technologies Performance Changes
is related to Asset Governance
is related to Categorize Artificial Intelligence (AI)-Related Technology Assets, Applications and/or Services (TAAS)
is related to Logical Tampering Protection
is related to Technology Lifecycle Management
is related to Business Continuity Management System (BCMS)
is related to Defined Operational Resilience Requirements
is related to Business Continuity & Disaster Recovery (BC/DR) Plans
is related to Alternate Communications Channels
is related to Technology Assets, Applications and/or Services (TAAS) Recovery & Reconstitution
is related to Restore Within Time Period
is related to Isolated Recovery Environment
is related to Reserve Hardware
is related to Redundant Secondary System
is related to Failover Capability
is related to Resilient Data Backup Architecture
is related to Data Backups
is related to Redundant Copies of Business-Critical Data
is related to Transaction Recovery
is related to Data Replication
is related to Data Archiving
is related to Continuous Data Protection (CDP)
is related to Data Backup & Restoration Hardware Protection
is related to Testing for Reliability & Integrity
is related to Capacity & Performance Planning Policy
is related to Resiliency Planning For Alternate Sites
is related to Change Management Policy
is related to Cloud Services
is related to Cloud Infrastructure Onboarding
is related to Customer Responsibility Matrix (CRM)
is related to Cloud Infrastructure Offboarding
is related to Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Authorized Individuals For Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Sensitive / Regulated Data On Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Compliance Scope
is related to Ability To Demonstrate Conformity
is related to Functional Review Of Security, Compliance & Resilience Controls
is related to Executive Leadership Oversight of Security, Compliance & Resilience Controls
is related to Assessment Team Subject Matter Expertise
is related to Government Surveillance
is related to Potential Human Rights Abuses
is related to Statement of Applicability (SOA)
is related to Security, Compliance & Resilience Status Reporting
is related to Secure Baseline Configurations
is related to Wireless Access Authentication & Encryption
is related to Centralized Management of Event Log & Security-Relevant Telemetry Content
is related to Centralized Collection of Event Logs & Security-Relevant Telemetry
is related to Centralized Event Log & Security-Relevant Telemetry Review & Analysis
is related to Content of Event Logs
is related to Use of Cryptographic Controls
is related to Cryptographic Cipher Suites and Protocols Inventory
is related to Public Key Infrastructure (PKI) Availability
is related to Cryptographic Key Management
is related to Cryptographic Key Loss or Change
is related to Control & Distribution of Cryptographic Keys
is related to Certificate Monitoring
is related to Data & Asset Classification
is related to Highest Classification Level
is related to Sensitive / Regulated Data Sharing Decisions
is related to Sensitive / Regulated Data Access Mapping
is related to Media Transportation
is related to Protecting Sensitive / Regulated Data on External Technology Assets, Applications and/or Services (TAAS)
is related to Electronic Discovery (eDiscovery)
is related to Data Localization
is related to Data Quality Operations
is related to Data Management Board
is related to Data Quality Management
is related to Embedded Technology Security Program
is related to Endpoint Device Management (EDM)
is related to Centralized Management of Endpoint Protection Mechanisms
is related to Human Resources Security Management
is related to Defined Roles & Responsibilities
is related to Rules of Behavior
is related to Social Media & Social Networking Restrictions
is related to Onboarding, Transferring & Offboarding Personnel
is related to Personnel Sanctions
is related to Workplace Investigations
is related to High-Risk Terminations
is related to Identify Critical Skills & Gaps
is related to Remediate Identified Skills Deficiencies
is related to Identify Vital Security, Compliance & Resilience Staff
is related to Establish Redundancy for Vital Security, Compliance & Resilience Staff
is related to Perform Succession Planning
is related to Identifying Authorized Work Locations
is related to Communicating Authorized Work Locations
is related to Reporting Suspicious Activities
is related to Management Approval For New or Changed Accounts
is related to Cross-Organization Management
is related to Identification & Authentication for Organizational Users
is related to Identification & Authentication for Devices
is related to Privileged Access by Non-Organizational Users
is related to Incident Handling
is related to Incident Response Plan (IRP)
is related to Incident Response Plan (IRP) Update
is related to Public Relations & Reputation Repair
is related to Root Cause Analysis (RCA) & Lessons Learned
is related to Data Breach
is related to Artificial Intelligence (AI) & Autonomous Technologies (AAT) Incidents
is related to Information Assurance (IA) Operations
is related to Assessment Boundaries
is related to Assessor Independence
is related to Adequate Security for Sensitive / Regulated Data In Support of Contracts
is related to Threat Analysis & Flaw Remediation During Development
is related to Security Authorization
is related to Controlled Maintenance
is related to Remote Maintenance Notifications
is related to Auditing Remote Maintenance
is related to Centralized Management Of Mobile Devices
is related to Separate Mobile Device Profiles
is related to Mobile Device Geofencing
is related to Network Security Controls (NSC)
is related to Domain Registrar Security
is related to Zero Trust Architecture (ZTA)
is related to Wireless Networking
is related to Work From Anywhere (WFA) - Telecommuting Security
is related to Safeguarding Data Over Open Networks
is related to Physical & Environmental Protections
is related to Physical Security Plan (PSP)
is related to Physical Access Device Inventories
is related to On-Site Client Segregation
is related to Monitoring Physical Access
is related to Equipment Siting & Protection
is related to Data Privacy Program
is related to Chief Privacy Officer (CPO)
is related to Data Protection Officer (DPO)
is related to Reasonable Data Privacy Practices
is related to Personal Data (PD) Control Testing, Training & Monitoring
is related to Data Privacy Requirements for Contractors & Service Providers
is related to Binding Corporate Rules (BCR)
is related to Accounting of Disclosures
is related to Dissemination of Data Privacy Program Information
is related to Security, Compliance & Resilience Protection Portfolio Management
is related to Commitment To Continual Improvements
is related to Prioritization To Address Evolving Risks & Threats
is related to Security, Compliance & Resilience Requirements Definition
is related to Business Process Definition
is related to Manage Organizational Knowledge
is related to Quantum Security Policy
is related to Quantum Risk Governance
is related to Data Shelf-Life Classification for Post-Quantum Cryptography (PQC) Prioritization
is related to Long-Lived Data Identification
is related to Harvest Now, Decrypt Later (HNDL) Mitigation
is related to Risk Management Resourcing
is related to Risk Framing
is related to Risk Tolerance
is related to Risk Threshold
is related to Risk Appetite
is related to Documented Justification For Material Risk Management Decisions
is related to Risk-Based Security Categorization
is related to Impact-Level Prioritization
is related to Risk Catalog
is related to Risk Owner
is related to Risk Response
is related to Risk Treatment Options
is related to Risk Remediation
is related to Risk Treatment Plan (RTP)
is related to Documented Alternatives
is related to Supply Chain Risk Management (SCRM) Plan
is related to AI & Autonomous Technologies Supply Chain Impacts
is related to Supply Chain Risk Assessment (SCRA)
is related to Achieving Security, Compliance & Resilience Requirements
is related to Alignment With Enterprise Architecture
is related to Secure Engineering Principles
is related to Defense-In-Depth (DiD) Architecture
is related to Security Operations Policy
is related to Service Delivery (Business Process Support)
is related to Security Orchestration, Automation, and Response (SOAR)
is related to Shadow Information Technology Detection
is related to Security, Compliance & Resilience Awareness Training
is related to Development Methods, Techniques & Processes
is related to Secure Settings By Default
is related to Secure Software Development Practices (SSDP)
is related to Product Conformity Governance
is related to Minimum Viable Product (MVP) Security Requirements
is related to Input Data Validation
is related to Security, Compliance & Resilience Representatives For Product Changes
is related to Secure Development Environments
is related to Software Escrow
is related to Security, Compliance & Resilience Testing Throughout Development
is related to Processes To Address Weaknesses or Deficiencies
is related to Adequate Supply
is related to Third-Party Criticality Assessments
is related to Responsible, Accountable, Supportive, Consulted & Informed (RASCI) Matrix
is related to Third-Party Contract Requirements
is related to Third-Party Scope Review
is related to Managing Changes To Third-Party Services
is related to Break Clauses
is related to Foreign Ownership, Control or Influence (FOCI)
is related to Ownership Change Monitoring
is related to Ownership Change Provisions
is related to Third-Party Attestation (3PA)
is related to Threat Intelligence Reporting
is related to Vulnerability Disclosure Program (VDP)
is related to Threat Hunting
is related to Tainting
is related to Insider Threat Program
is related to Vulnerability & Patch Management Policy
is related to Attack Surface Scope
is related to Vulnerability Remediation Process
is related to Centralized Management of Flaw Remediation Processes
is related to Web Security