|
is blocked by
|
Security, Compliance & Resilience Governance Policy |
|
is blocked by
|
Security, Compliance & Resilience Program (SCRP) |
|
is blocked by
|
Centralized Management of Security, Compliance & Resilience Controls |
|
is blocked by
|
Publishing Security, Compliance & Resilience Documentation |
|
is blocked by
|
Periodic Review & Update of Security, Compliance & Resilience Program |
|
is blocked by
|
Exception Management |
|
is blocked by
|
Defining Business Context & Mission |
|
is blocked by
|
Materiality Determination |
|
is blocked by
|
High Value Assets (HVAs) |
|
is blocked by
|
Steering Committee & Program Oversight |
|
is blocked by
|
Business As Usual (BAU) Security, Compliance & Resilience Practices |
|
is blocked by
|
Operationalizing Security, Compliance & Resilience Capabilities |
|
is blocked by
|
Measures of Performance |
|
is blocked by
|
Forced Technology Transfer (FTT) |
|
is blocked by
|
State-Sponsored Espionage |
|
is blocked by
|
Contacts With Authorities |
|
is blocked by
|
Assurance |
|
is blocked by
|
Mergers, Acquisitions & Divestitures (MA&D) |
|
is blocked by
|
Virtual Data Room (VDR) |
|
is blocked by
|
Artificial Intelligence & Autonomous Technologies Policy |
|
is blocked by
|
Artificial Intelligence (AI) & Autonomous Technologies Governance |
|
is blocked by
|
AI & Autonomous Technologies Mission and Goals Definition |
|
is blocked by
|
AI & Autonomous Technologies Value Sustainment |
|
is blocked by
|
AI & Autonomous Technologies Context Definition |
|
is blocked by
|
AI & Autonomous Technologies-Related Legal Requirements Identification |
|
is blocked by
|
Assigned Responsibilities for AI & Autonomous Technologies |
|
is blocked by
|
Trustworthy AI & Autonomous Technologies |
|
is blocked by
|
Situational Awareness of AI & Autonomous Technologies In Use |
|
is blocked by
|
AI Model & Agent Inventory & Lifecycle Management |
|
is blocked by
|
Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization |
|
is blocked by
|
AI & Autonomous Technologies Internal Controls |
|
is blocked by
|
AI & Autonomous Technologies Impact Assessment |
|
is blocked by
|
AI & Autonomous Technologies Risk Profiling |
|
is blocked by
|
AI & Autonomous Technologies Risk Mapping |
|
is blocked by
|
AI & Autonomous Technologies Risk Management Decisions |
|
is blocked by
|
AI & Autonomous Technologies Likelihood & Impact Risk Analysis |
|
is blocked by
|
AI & Autonomous Technologies High Risk Designations |
|
is blocked by
|
AI Threat Modeling & Risk Assessment |
|
is blocked by
|
AI & Autonomous Technologies Risk Response |
|
is blocked by
|
AI & Autonomous Technologies Risk Tracking Approaches |
|
is blocked by
|
AI & Autonomous Technologies Business Case |
|
is blocked by
|
AI & Autonomous Technologies Potential Benefits Analysis |
|
is blocked by
|
AI & Autonomous Technologies Potential Costs Analysis |
|
is blocked by
|
Model & AI Agent Documentation |
|
is blocked by
|
AI & Autonomous Technologies Output Marking |
|
is blocked by
|
Release Owner Gate (ROG) For AI-Augmented Content |
|
is blocked by
|
AI & Autonomous Technologies Output Filtering |
|
is blocked by
|
Human Moderation of AI & Autonomous Technologies-Generated Content |
|
is blocked by
|
AI & Autonomous Technologies Intellectual Property Infringement Protections |
|
is blocked by
|
Data Source Identification |
|
is blocked by
|
AI & Autonomous Technologies Harm Prevention |
|
is blocked by
|
AI & Autonomous Technologies Human Subject Protections |
|
is blocked by
|
AI & Autonomous Technologies Environmental Impact & Sustainability |
|
is blocked by
|
Previously Unknown AI & Autonomous Technologies Threats & Risks |
|
is blocked by
|
AI & Autonomous Technologies Conformity |
|
is blocked by
|
Manipulative or Deceptive Techniques |
|
is blocked by
|
Materially Distorting Behaviors |
|
is blocked by
|
Social Scoring |
|
is blocked by
|
AI & Autonomous Technologies Requirements Definitions |
|
is blocked by
|
AI & Autonomous Technologies Fairness & Bias |
|
is blocked by
|
AI & Autonomous Technologies Knowledge Limits |
|
is blocked by
|
AI & Autonomous Technologies Development Practices |
|
is blocked by
|
AI & Autonomous Technologies Implementation Tasks Definition |
|
is blocked by
|
Real World Testing of AI & Autonomous Technologies |
|
is blocked by
|
AI & Autonomous Technologies Testing Techniques |
|
is blocked by
|
Generative Artificial Intelligence (GAI) Identification |
|
is blocked by
|
Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV) |
|
is blocked by
|
AI TEVV Trustworthiness Assessment |
|
is blocked by
|
AI TEVV Tools |
|
is blocked by
|
AI TEVV Trustworthiness Demonstration |
|
is blocked by
|
AI TEVV Results Evaluation |
|
is blocked by
|
AI TEVV Effectiveness |
|
is blocked by
|
AI TEVV Reporting |
|
is blocked by
|
AI & Autonomous Technologies Residual Risks |
|
is blocked by
|
AI & Autonomous Technologies Viability Decisions |
|
is blocked by
|
AI TEVV Post-Deployment Monitoring |
|
is blocked by
|
Updating AI & Autonomous Technologies |
|
is blocked by
|
Asset Governance |
|
is blocked by
|
Standardized Naming Convention |
|
is blocked by
|
Asset Inventories |
|
is blocked by
|
Updates During Installations / Removals |
|
is blocked by
|
Identify Critical Assets |
|
is blocked by
|
Technology Assets, Applications, Services and/or Data (TAASD) Criticality Ratings |
|
is blocked by
|
Asset-Service Dependencies |
|
is blocked by
|
Stakeholder Identification & Involvement |
|
is blocked by
|
Comprehensive Asset Inventory Management |
|
is blocked by
|
Asset Discovery |
|
is blocked by
|
Approved Technologies |
|
is blocked by
|
Automated Unauthorized Component Detection |
|
is blocked by
|
Prohibited Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Software Licensing Restrictions |
|
is blocked by
|
Provenance |
|
is blocked by
|
Asset Categorization |
|
is blocked by
|
High-Risk Technology Assets, Applications and/or Services (TAAS) Categorization |
|
is blocked by
|
Asset Scope Classification |
|
is blocked by
|
Network Diagrams & Data Flow Diagrams (DFDs) |
|
is blocked by
|
Security of Assets & Media |
|
is blocked by
|
Technology Assets, Applications, Services and/or Data (TAASD) Storage |
|
is blocked by
|
Unattended End-User Equipment |
|
is blocked by
|
Kiosks & Point of Interaction (PoI) Devices |
|
is blocked by
|
Secure Disposal, Destruction or Re-Use of Equipment |
|
is blocked by
|
Return of Assets |
|
is blocked by
|
Use of Third-Party Devices |
|
is blocked by
|
Bring Your Own Device (BYOD) Usage |
|
is blocked by
|
Usage Parameters |
|
is blocked by
|
Technology Asset Inspections |
|
is blocked by
|
Physical Tampering Detection |
|
is blocked by
|
Roots of Trust Protection |
|
is blocked by
|
Telecommunications Equipment |
|
is blocked by
|
Business Continuity & Disaster Recovery Policy |
|
is blocked by
|
Business Continuity Management System (BCMS) |
|
is blocked by
|
Defined Operational Resilience Requirements |
|
is blocked by
|
Operational Resilience Capabilities |
|
is blocked by
|
Business Continuity & Disaster Recovery (BC/DR) Plans |
|
is blocked by
|
Recovery Time / Point Objectives (RTO / RPO) |
|
is blocked by
|
Recovery Operations Criteria |
|
is blocked by
|
Recovery Operations Communications |
|
is blocked by
|
Alternate Communications Channels |
|
is blocked by
|
Alternate Storage Site |
|
is blocked by
|
Separation from Primary Storage Site |
|
is blocked by
|
Primary Storage Site Accessibility |
|
is blocked by
|
Alternate Processing Site |
|
is blocked by
|
Separation from Primary Processing Site |
|
is blocked by
|
Alternate Site Priority of Service |
|
is blocked by
|
Preparation for Use |
|
is blocked by
|
Inability to Return to Primary Site |
|
is blocked by
|
Capacity & Performance Planning Policy |
|
is blocked by
|
Capacity & Performance Management |
|
is blocked by
|
Capacity Planning |
|
is blocked by
|
Resource Priority |
|
is blocked by
|
Change Management Policy |
|
is blocked by
|
Change Management Program |
|
is blocked by
|
Configuration Change Control |
|
is blocked by
|
Access Restriction For Change |
|
is blocked by
|
Security Impact Analysis for Changes |
|
is blocked by
|
Test, Validate & Document Changes |
|
is blocked by
|
Cloud Security Policy |
|
is blocked by
|
Cloud Services |
|
is blocked by
|
Cloud Infrastructure Onboarding |
|
is blocked by
|
Cloud Infrastructure Offboarding |
|
is blocked by
|
Cloud Infrastructure Security Subnet |
|
is blocked by
|
Standardized Virtualization Formats |
|
is blocked by
|
Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Compliance Policy |
|
is blocked by
|
Statutory, Regulatory & Contractual Compliance |
|
is blocked by
|
Compliance Scope |
|
is blocked by
|
Ability To Demonstrate Conformity |
|
is blocked by
|
Conformity Monitoring |
|
is blocked by
|
Functional Review Of Security, Compliance & Resilience Controls |
|
is blocked by
|
Non-Conformity Oversight |
|
is blocked by
|
Executive Leadership Oversight of Security, Compliance & Resilience Controls |
|
is blocked by
|
Internal Audit Function |
|
is blocked by
|
Independent Assessors |
|
is blocked by
|
Assessment Methods |
|
is blocked by
|
Configuration Management Policy |
|
is blocked by
|
Configuration Management Program |
|
is blocked by
|
Least Functionality |
|
is blocked by
|
Baseline Tailoring |
|
is blocked by
|
Development & Test Environment Configurations |
|
is blocked by
|
Secure Baseline Configurations |
|
is blocked by
|
Account Lockout |
|
is blocked by
|
Concurrent Session Control |
|
is blocked by
|
Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas |
|
is blocked by
|
Physically Disable or Remove Capabilities |
|
is blocked by
|
Approved Configuration Deviations |
|
is blocked by
|
Periodic Configuration Reviews |
|
is blocked by
|
Respond To Unauthorized Changes |
|
is blocked by
|
Continuous Monitoring Policy |
|
is blocked by
|
Continuous Monitoring |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Monitoring |
|
is blocked by
|
Centralized Management of Event Log & Security-Relevant Telemetry Content |
|
is blocked by
|
Analyze and Prioritize Monitoring Requirements |
|
is blocked by
|
Audit Level Adjustments |
|
is blocked by
|
System Generated Event Logs & Security-Relevant Telemetry |
|
is blocked by
|
Centralized Collection of Event Logs & Security-Relevant Telemetry |
|
is blocked by
|
Centralized Event Log & Security-Relevant Telemetry Review & Analysis |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Analysis & Triage |
|
is blocked by
|
Monitoring Reporting |
|
is blocked by
|
Alert Threshold Tuning |
|
is blocked by
|
Correlate Monitoring Information |
|
is blocked by
|
Integration of Scanning & Other Monitoring Information |
|
is blocked by
|
Correlation with Physical Monitoring |
|
is blocked by
|
Content of Event Logs |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Storage Capacity |
|
is blocked by
|
Time Stamps |
|
is blocked by
|
Synchronization With Authoritative Time Source |
|
is blocked by
|
Protection of Event Logs & Security-Relevant Telemetry |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Retention |
|
is blocked by
|
Privileged Functions Logging |
|
is blocked by
|
Account Creation and Modification Logging |
|
is blocked by
|
Inventory of Technology Asset Event Logging |
|
is blocked by
|
Anomalous Behavior |
|
is blocked by
|
Unusual Transactions |
|
is blocked by
|
Monitoring for Indicators of Compromise (IOC) |
|
is blocked by
|
Deactivated Account Activity |
|
is blocked by
|
Individuals Posing Greater Risk |
|
is blocked by
|
Cryptographic Protections Policy |
|
is blocked by
|
Use of Cryptographic Controls |
|
is blocked by
|
Cryptographic Management |
|
is blocked by
|
Cryptographic Cipher Suites and Protocols Inventory |
|
is blocked by
|
Encrypting Data In Transit |
|
is blocked by
|
Integrity of Data In Transit |
|
is blocked by
|
Encrypting Data At Rest |
|
is blocked by
|
Database Encryption |
|
is blocked by
|
Public Key Infrastructure (PKI) |
|
is blocked by
|
Public Key Infrastructure (PKI) Availability |
|
is blocked by
|
Cryptographic Key Management |
|
is blocked by
|
Transmission of Cybersecurity & Data Protection Attributes |
|
is blocked by
|
Certificate Authorities |
|
is blocked by
|
Certificate Monitoring |
|
is blocked by
|
Data Classification & Handling Policy |
|
is blocked by
|
Data Protection |
|
is blocked by
|
Sensitive / Regulated Data Governance |
|
is blocked by
|
Data Catalog |
|
is blocked by
|
Data & Asset Classification |
|
is blocked by
|
Highest Classification Level |
|
is blocked by
|
Sensitive Data Inventories |
|
is blocked by
|
Periodic Scans for Sensitive / Regulated Data |
|
is blocked by
|
Data Stewardship |
|
is blocked by
|
Defining Access Authorizations for Sensitive / Regulated Data |
|
is blocked by
|
Sensitive / Regulated Data Protection |
|
is blocked by
|
Restrict Sensitive / Regulated Data Access To Authorized Individuals |
|
is blocked by
|
Limitations on Use & Distribution of Sensitive / Regulated Data |
|
is blocked by
|
Sensitive / Regulated Data Access Mapping |
|
is blocked by
|
Sensitive / Regulated Media Records |
|
is blocked by
|
Media Marking |
|
is blocked by
|
Masking Displayed Sensitive / Regulated Data |
|
is blocked by
|
Media Storage |
|
is blocked by
|
Data Storage Location Reviews |
|
is blocked by
|
Physically Secure All Media Containing Sensitive / Regulated Data |
|
is blocked by
|
Storing Authentication Data |
|
is blocked by
|
Media Transportation |
|
is blocked by
|
Digital & Non-Digital Media Disposal |
|
is blocked by
|
Digital Media Sanitization |
|
is blocked by
|
Sanitization of Sensitive / Regulated Data |
|
is blocked by
|
Digital Media Sanitization Documentation |
|
is blocked by
|
Digital Media Sanitization Equipment Testing |
|
is blocked by
|
Digital Media Use Restrictions |
|
is blocked by
|
Portable Storage Devices |
|
is blocked by
|
Removable Media Security |
|
is blocked by
|
Use of External Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Limits of Authorized Use To Process, Store and/or Transmit Data |
|
is blocked by
|
Protecting Sensitive / Regulated Data on External Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Non-Organizationally Owned Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Information Search & Retrieval |
|
is blocked by
|
Electronic Discovery (eDiscovery) |
|
is blocked by
|
Publicly Accessible Content |
|
is blocked by
|
Data Mining Protection |
|
is blocked by
|
Ad-Hoc Transfers |
|
is blocked by
|
Transfer Authorizations |
|
is blocked by
|
Media & Data Retention |
|
is blocked by
|
Embedded Technology Policy |
|
is blocked by
|
Embedded Technology Security Program |
|
is blocked by
|
Separate Operating Environments For Embedded Technologies |
|
is blocked by
|
Embedded Technology Inventory Management |
|
is blocked by
|
Internet of Things (IOT) |
|
is blocked by
|
Operational Technology (OT) |
|
is blocked by
|
Interface Security |
|
is blocked by
|
Embedded Technology Configuration Monitoring |
|
is blocked by
|
Prevent Alterations |
|
is blocked by
|
Embedded Technology Maintenance |
|
is blocked by
|
Remote Management of Embedded Technologies |
|
is blocked by
|
Endpoint Security Policy |
|
is blocked by
|
Endpoint Device Management (EDM) |
|
is blocked by
|
Endpoint Protection Mechanisms |
|
is blocked by
|
Centralized Management of Endpoint Protection Mechanisms |
|
is blocked by
|
Automatic Endpoint Protection Mechanism Updates |
|
is blocked by
|
Malicious Code Protection (Antimalware) |
|
is blocked by
|
Always On Antimalware Protection |
|
is blocked by
|
Antimalware Protection Mechanism Testing |
|
is blocked by
|
Documented Endpoint Security Protection Measures |
|
is blocked by
|
Software Firewall |
|
is blocked by
|
Unified Endpoint Device Management (UEDM) |
|
is blocked by
|
Endpoint Detection & Response (EDR) |
|
is blocked by
|
Extended Detection & Response (XDR) |
|
is blocked by
|
Endpoint File Integrity Monitoring (FIM) |
|
is blocked by
|
Host Intrusion Detection and Prevention Systems (HIDS / HIPS) |
|
is blocked by
|
Mobile Code |
|
is blocked by
|
Collaborative Computing Devices |
|
is blocked by
|
Collaborative Computing Capability Disabling / Removal In Secure Work Areas |
|
is blocked by
|
Explicitly Indicate Current Participants |
|
is blocked by
|
Participant Identity Verification |
|
is blocked by
|
Participant Connection Management |
|
is blocked by
|
Explicit Indication Of Use |
|
is blocked by
|
Human Resources Security Policy |
|
is blocked by
|
Human Resources Security Management |
|
is blocked by
|
Position Categorization |
|
is blocked by
|
Users With Elevated Privileges |
|
is blocked by
|
Competency Requirements for Security, Compliance & Resilience-Related Positions |
|
is blocked by
|
Defined Roles & Responsibilities |
|
is blocked by
|
Assigned Roles & Responsibilities Awareness |
|
is blocked by
|
Personnel Screening |
|
is blocked by
|
Roles With Special Protection Measures |
|
is blocked by
|
Citizenship Requirements |
|
is blocked by
|
Terms of Employment |
|
is blocked by
|
Rules of Behavior |
|
is blocked by
|
Social Media & Social Networking Restrictions |
|
is blocked by
|
Access Agreements |
|
is blocked by
|
Confidentiality Agreements |
|
is blocked by
|
Onboarding, Transferring & Offboarding Personnel |
|
is blocked by
|
Probationary Periods |
|
is blocked by
|
Personnel Sanctions |
|
is blocked by
|
Personnel Transfer |
|
is blocked by
|
Personnel Termination |
|
is blocked by
|
Automated Employment Status Notifications |
|
is blocked by
|
Third-Party Personnel |
|
is blocked by
|
Separation of Duties (SoD) |
|
is blocked by
|
Incompatible Roles |
|
is blocked by
|
Identification & Authentication Policy |
|
is blocked by
|
Identity & Access Management (IAM) |
|
is blocked by
|
Authenticate, Authorize and Audit (AAA) |
|
is blocked by
|
Replay-Resistant Authentication |
|
is blocked by
|
Retain Access Records |
|
is blocked by
|
Identity Providers (IdP) & Authorization Servers |
|
is blocked by
|
User Provisioning & De-Provisioning |
|
is blocked by
|
Change of Roles & Duties |
|
is blocked by
|
Termination of Employment |
|
is blocked by
|
Identity Proofing (Identity Verification) |
|
is blocked by
|
In-Person or Trusted Third-Party Registration |
|
is blocked by
|
Identity Evidence |
|
is blocked by
|
Role-Based Access Control (RBAC) |
|
is blocked by
|
Attribute-Based Access Control (ABAC) |
|
is blocked by
|
Real-Time Access Decisions |
|
is blocked by
|
Access Profile Rules |
|
is blocked by
|
Account Management |
|
is blocked by
|
Management Approval For New or Changed Accounts |
|
is blocked by
|
Management Approval For Privileged Accounts |
|
is blocked by
|
Privileged Account Management (PAM) |
|
is blocked by
|
Privileged Account Inventories |
|
is blocked by
|
Privileged Account Separation |
|
is blocked by
|
Dedicated Privileged Account |
|
is blocked by
|
Privileged Command Execution |
|
is blocked by
|
Manual Override |
|
is blocked by
|
Emergency Accounts |
|
is blocked by
|
Periodic Review of Individual & Service Account Privileges |
|
is blocked by
|
System Account Reviews |
|
is blocked by
|
User Identity (ID) Management |
|
is blocked by
|
Standardized Identifier Management (User Names) |
|
is blocked by
|
Employment Status Identification |
|
is blocked by
|
Citizenship Identification |
|
is blocked by
|
Authenticator Management |
|
is blocked by
|
Password-Based Authentication |
|
is blocked by
|
Automated Support For Password Strength |
|
is blocked by
|
Password Managers |
|
is blocked by
|
Passkeys |
|
is blocked by
|
Biometric Authentication |
|
is blocked by
|
PKI-Based Authentication |
|
is blocked by
|
Hardware Token-Based Authentication |
|
is blocked by
|
Authenticator Feedback |
|
is blocked by
|
Restrictions on Shared Groups / Accounts |
|
is blocked by
|
Group Authentication |
|
is blocked by
|
User Responsibilities for Account Management |
|
is blocked by
|
Credential Sharing |
|
is blocked by
|
Reference Monitor |
|
is blocked by
|
Access Enforcement |
|
is blocked by
|
Access To Sensitive / Regulated Data |
|
is blocked by
|
Use of Privileged Utility Programs |
|
is blocked by
|
Dedicated Administrative Machines |
|
is blocked by
|
Dual Authorization for Privileged Commands |
|
is blocked by
|
Incident Response Policy |
|
is blocked by
|
Incident Response Operations |
|
is blocked by
|
Continuous Incident Response Improvements |
|
is blocked by
|
Incident Classification & Prioritization |
|
is blocked by
|
Indicators of Compromise (IOC) |
|
is blocked by
|
Incident Handling |
|
is blocked by
|
Correlation with External Organizations |
|
is blocked by
|
Automated Incident Handling Processes |
|
is blocked by
|
Incident Response Plan (IRP) |
|
is blocked by
|
Incident Response Capabilities Testing |
|
is blocked by
|
Incident Response Capabilities Testing Coordination with Related Plans |
|
is blocked by
|
Incident Response Training |
|
is blocked by
|
Simulated Incidents |
|
is blocked by
|
Automated Incident Response Training Environments |
|
is blocked by
|
Integrated Security Incident Response Team (ISIRT) |
|
is blocked by
|
Public Relations & Reputation Repair |
|
is blocked by
|
Chain of Custody & Forensics |
|
is blocked by
|
Root Cause Analysis (RCA) & Lessons Learned |
|
is blocked by
|
Regulatory & Law Enforcement Contacts |
|
is blocked by
|
Incident Stakeholder Reporting |
|
is blocked by
|
Information Assurance Policy |
|
is blocked by
|
Information Assurance (IA) Operations |
|
is blocked by
|
Assessment Boundaries |
|
is blocked by
|
Control Validation Testing (CVT) |
|
is blocked by
|
Specialized Assessments |
|
is blocked by
|
Assessor Independence |
|
is blocked by
|
Third-Party Assessment Reciprocity |
|
is blocked by
|
Maintenance Policy |
|
is blocked by
|
Maintenance Operations |
|
is blocked by
|
Controlled Maintenance |
|
is blocked by
|
Timely Maintenance |
|
is blocked by
|
Preventative Maintenance |
|
is blocked by
|
Predictive Maintenance |
|
is blocked by
|
Maintenance Validation |
|
is blocked by
|
Maintenance Monitoring |
|
is blocked by
|
Prevent Unauthorized Removal |
|
is blocked by
|
Automated Maintenance Activities |
|
is blocked by
|
Maintenance Tools |
|
is blocked by
|
Mobile Device Management Policy |
|
is blocked by
|
Centralized Management Of Mobile Devices |
|
is blocked by
|
Restricting Access To Authorized Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Full Device & Container-Based Encryption |
|
is blocked by
|
Separate Mobile Device Profiles |
|
is blocked by
|
Personally-Owned Mobile Devices |
|
is blocked by
|
Organization-Owned Mobile Devices |
|
is blocked by
|
Mobile Device Geofencing |
|
is blocked by
|
Mobile Device Tampering |
|
is blocked by
|
Network Security Policy |
|
is blocked by
|
Network Security Controls (NSC) |
|
is blocked by
|
Boundary Protection |
|
is blocked by
|
Limit Network Connections |
|
is blocked by
|
External Telecommunications Services |
|
is blocked by
|
Prevent Discovery of Internal Information |
|
is blocked by
|
Direct Internet Access Restrictions |
|
is blocked by
|
Prevent Unauthorized Exfiltration |
|
is blocked by
|
Domain Name Verification |
|
is blocked by
|
Bandwidth Control |
|
is blocked by
|
Data Flow Enforcement – Access Control Lists (ACLs) |
|
is blocked by
|
Deny Traffic by Default & Allow Traffic by Exception |
|
is blocked by
|
Human Reviews |
|
is blocked by
|
Interconnection Security Agreements (ISAs) |
|
is blocked by
|
External System Connections |
|
is blocked by
|
Internal System Connections |
|
is blocked by
|
Network Segmentation (macrosegmentation) |
|
is blocked by
|
Security Management Subnets |
|
is blocked by
|
Out-of-Band Channels |
|
is blocked by
|
Separate Subnets To Isolate Functions |
|
is blocked by
|
Sensitive / Regulated Data Enclave (Secure Zone) |
|
is blocked by
|
Segregation From Enterprise Services |
|
is blocked by
|
Network Device Plane Segmentation |
|
is blocked by
|
Virtual Local Area Network (VLAN) Separation |
|
is blocked by
|
Microsegmentation |
|
is blocked by
|
Software Defined Networking (SDN) |
|
is blocked by
|
Domain Name Service (DNS) Resolution |
|
is blocked by
|
Zero Trust Architecture (ZTA) |
|
is blocked by
|
Policy Decision Point (PDP) |
|
is blocked by
|
Network Access Control (NAC) |
|
is blocked by
|
Authenticated Proxy |
|
is blocked by
|
Route Internal Traffic to Proxy Servers |
|
is blocked by
|
Route Privileged Network Access |
|
is blocked by
|
Application Proxy |
|
is blocked by
|
Visibility of Encrypted Communications |
|
is blocked by
|
Content Check for Encrypted Data |
|
is blocked by
|
Physical & Environmental Security Policy |
|
is blocked by
|
Physical & Environmental Protections |
|
is blocked by
|
Physical Security Plan (PSP) |
|
is blocked by
|
Zone-Based Physical Security |
|
is blocked by
|
Alternate Work Site |
|
is blocked by
|
Physical Access Authorizations |
|
is blocked by
|
Role-Based Physical Access |
|
is blocked by
|
Dual Authorization for Physical Access |
|
is blocked by
|
Physical Access Control |
|
is blocked by
|
Physical Access Device Inventories |
|
is blocked by
|
Controlled Ingress & Egress Points |
|
is blocked by
|
Physical Access Logs |
|
is blocked by
|
Physical Security of Offices, Rooms & Facilities |
|
is blocked by
|
Working in Secure Areas |
|
is blocked by
|
Access To Critical Systems |
|
is blocked by
|
Lockable Physical Casings |
|
is blocked by
|
Monitoring Physical Access |
|
is blocked by
|
Visitor Control |
|
is blocked by
|
Equipment Siting & Protection |
|
is blocked by
|
Access Control for Output Devices |
|
is blocked by
|
Component Marking |
|
is blocked by
|
Asset Monitoring and Tracking |
|
is blocked by
|
Data Privacy Policy |
|
is blocked by
|
Data Privacy Program |
|
is blocked by
|
Data Privacy Accountability Structure |
|
is blocked by
|
Chief Privacy Officer (CPO) |
|
is blocked by
|
Data Protection Officer (DPO) |
|
is blocked by
|
Personal Data Process Manager (PDPM) |
|
is blocked by
|
Data Fiduciary |
|
is blocked by
|
Privacy-Aware Design |
|
is blocked by
|
Documenting Data Processing Activities |
|
is blocked by
|
Personal Data (PD) Lineage |
|
is blocked by
|
Personal Data (PD) Categories |
|
is blocked by
|
Inventory of Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Inventory Automation Support |
|
is blocked by
|
Updating Personal Data (PD) Process |
|
is blocked by
|
Reasonable Data Privacy Practices |
|
is blocked by
|
Security of Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Control Testing, Training & Monitoring |
|
is blocked by
|
Authority To Collect, Process, Store & Share Personal Data (PD) |
|
is blocked by
|
Product or Service Delivery Restrictions |
|
is blocked by
|
Data Privacy Requirements for Contractors & Service Providers |
|
is blocked by
|
Binding Corporate Rules (BCR) |
|
is blocked by
|
Information Sharing With Third Parties |
|
is blocked by
|
Limiting Personal Data (PD) Disclosures |
|
is blocked by
|
Accounting of Disclosures |
|
is blocked by
|
Notification of Disclosure Requests To Data Subject |
|
is blocked by
|
Financial Incentives For Personal Data (PD) |
|
is blocked by
|
Notice of Financial Incentive |
|
is blocked by
|
Dissemination of Data Privacy Program Information |
|
is blocked by
|
Data Privacy Notice |
|
is blocked by
|
Privacy Notice Formatting |
|
is blocked by
|
Conspicuous Link To Data Privacy Notice |
|
is blocked by
|
Project & Resource Management Policy |
|
is blocked by
|
Strategic Plan & Objectives |
|
is blocked by
|
Targeted Capability Maturity Levels |
|
is blocked by
|
Security, Compliance & Resilience Protection Portfolio Management |
|
is blocked by
|
Security, Compliance & Resilience Resource Management |
|
is blocked by
|
Allocation of Resources |
|
is blocked by
|
Secure Development Life Cycle (SDLC) Management |
|
is blocked by
|
Security, Compliance & Resilience In Project Management |
|
is blocked by
|
Risk Management Policy |
|
is blocked by
|
Risk Management Program |
|
is blocked by
|
Risk Management Resourcing |
|
is blocked by
|
Risk Culture |
|
is blocked by
|
Risk Framing |
|
is blocked by
|
Material Risks |
|
is blocked by
|
Executive Leadership Approval For Managing Material Risk |
|
is blocked by
|
Documented Justification For Material Risk Management Decisions |
|
is blocked by
|
Risk-Based Security Categorization |
|
is blocked by
|
Business Impact Analysis (BIA) |
|
is blocked by
|
Risk Identification |
|
is blocked by
|
Risk Catalog |
|
is blocked by
|
Risk Owner |
|
is blocked by
|
Risk Assessment Methodology |
|
is blocked by
|
Secure Engineering & Architecture Policy |
|
is blocked by
|
Security, Compliance & Resilience Aware Design |
|
is blocked by
|
Achieving Security, Compliance & Resilience Requirements |
|
is blocked by
|
Flexible Technology Stack |
|
is blocked by
|
Secure Architecture Principles |
|
is blocked by
|
Alignment With Enterprise Architecture |
|
is blocked by
|
Secure Engineering Principles |
|
is blocked by
|
Defense-In-Depth (DiD) Architecture |
|
is blocked by
|
System Partitioning |
|
is blocked by
|
Application Partitioning |
|
is blocked by
|
Process Isolation |
|
is blocked by
|
Security Function Isolation |
|
is blocked by
|
Hardware Separation |
|
is blocked by
|
Thread Separation |
|
is blocked by
|
System Privileges Isolation |
|
is blocked by
|
Fail Secure |
|
is blocked by
|
Non-Persistence |
|
is blocked by
|
Information Output Filtering |
|
is blocked by
|
Honeypots |
|
is blocked by
|
Heterogeneity |
|
is blocked by
|
Security Operations Policy |
|
is blocked by
|
Operations Security |
|
is blocked by
|
Security Concept Of Operations (CONOPS) |
|
is blocked by
|
Standardized Operating Procedures (SOP) |
|
is blocked by
|
Service Delivery (Business Process Support) |
|
is blocked by
|
Security Operations Center (SOC) |
|
is blocked by
|
Security Awareness & Training Policy |
|
is blocked by
|
Security, Compliance & Resilience-Minded Workforce |
|
is blocked by
|
Maintaining Workforce Development Relevancy |
|
is blocked by
|
Security, Compliance & Resilience Awareness Training |
|
is blocked by
|
Role-Based Security, Compliance & Resilience Training |
|
is blocked by
|
Technology Development & Acquisition Policy |
|
is blocked by
|
Technology Development & Acquisition |
|
is blocked by
|
Developer Architecture & Design |
|
is blocked by
|
Programming Language Selection |
|
is blocked by
|
Secure Software Development Practices (SSDP) |
|
is blocked by
|
Criticality Analysis During Development |
|
is blocked by
|
Threat Modeling |
|
is blocked by
|
Product Management |
|
is blocked by
|
Product Conformity Governance |
|
is blocked by
|
Continuous Monitoring Plan |
|
is blocked by
|
Disclosure of Vulnerabilities |
|
is blocked by
|
Technical Documentation Artifacts |
|
is blocked by
|
Product-Specific Risk Assessment Artifacts |
|
is blocked by
|
Product Tampering and Counterfeiting (PTC) |
|
is blocked by
|
Customized Development of Critical Components |
|
is blocked by
|
DevSecOps |
|
is blocked by
|
Minimum Viable Product (MVP) Security Requirements |
|
is blocked by
|
Input Data Validation |
|
is blocked by
|
Minimizing Attack Surfaces |
|
is blocked by
|
Product Testing & Reviews |
|
is blocked by
|
Security, Compliance & Resilience Representatives For Product Changes |
|
is blocked by
|
Secure Development Environments |
|
is blocked by
|
Library Privileges |
|
is blocked by
|
Security, Compliance & Resilience Testing Throughout Development |
|
is blocked by
|
Static Code Analysis |
|
is blocked by
|
Use of Live Data |
|
is blocked by
|
Developer Screening |
|
is blocked by
|
Developer Configuration Management |
|
is blocked by
|
Developer Threat Analysis & Flaw Remediation |
|
is blocked by
|
Developer-Provided Training |
|
is blocked by
|
Hardware Integrity Verification |
|
is blocked by
|
Bills of Material (BOMs) |
|
is blocked by
|
Third-Party Management Policy |
|
is blocked by
|
Third-Party Management |
|
is blocked by
|
Acquisition Strategies, Tools & Methods |
|
is blocked by
|
Supply Chain Risk Management (SCRM) |
|
is blocked by
|
Processes To Address Weaknesses or Deficiencies |
|
is blocked by
|
Limit Potential Harm |
|
is blocked by
|
Security, Compliance & Resilience Outsourcing Limitations |
|
is blocked by
|
Outsourcing Non-Essential Functions or Services |
|
is blocked by
|
Supplier Diversity |
|
is blocked by
|
Adequate Supply |
|
is blocked by
|
Third-Party Inventories |
|
is blocked by
|
Third-Party Criticality Assessments |
|
is blocked by
|
Third-Party Risk Assessments & Approvals |
|
is blocked by
|
Responsible, Accountable, Supportive, Consulted & Informed (RASCI) Matrix |
|
is blocked by
|
Third-Party Services |
|
is blocked by
|
Conflict of Interests |
|
is blocked by
|
Third-Party Processing, Storage and Service Locations |
|
is blocked by
|
Threat Management Policy |
|
is blocked by
|
Threat Intelligence Program |
|
is blocked by
|
Dynamic Threat Awareness |
|
is blocked by
|
Threat Intelligence Feeds |
|
is blocked by
|
Threat Intelligence Reporting |
|
is blocked by
|
Threat Catalog |
|
is blocked by
|
Material Threats |
|
is blocked by
|
Threat Analysis |
|
is blocked by
|
Behavioral Baselining |
|
is blocked by
|
Predictive Cyber Analytics |
|
is blocked by
|
Indicators of Exposure (IOE) |
|
is blocked by
|
Vulnerability & Patch Management Policy |
|
is blocked by
|
Vulnerability & Patch Management Program (VPMP) |
|
is blocked by
|
Attack Surface Scope |
|
is blocked by
|
Vulnerability Exploitation Analysis |
|
is blocked by
|
Vulnerability Ranking |
|
is blocked by
|
Vulnerability Remediation Process |
|
is blocked by
|
Centralized Management of Flaw Remediation Processes |
|
is blocked by
|
Continuous Vulnerability Remediation Activities |
|
is blocked by
|
Known Exploited Vulnerabilities (KEV) Mitigations |
|
is blocked by
|
Time To Remediate / Benchmarks For Corrective Action |
|
is blocked by
|
Pre-Deployment Patch Testing |
|
is blocked by
|
Web Security Policy |
|
is blocked by
|
Web Security |
|
is blocked by
|
Web Security Standard |
|
is blocked by
|
Web Application Framework |
|
is blocked by
|
Unauthorized Code On Web Pages |
|
is blocked by
|
Client-Facing Web Services |
|
is blocked by
|
Strong Customer Authentication (SCA) |
|
is blocked by
|
Web Application Input Validation & Sanitization |
|
is blocked by
|
Secure Web Traffic |
|
is blocked by
|
Web Application Output Encoding |
|
is blocked by
|
Web Browser Security |
|
is blocked by
|
Website Change Detection |
|
is blocked by
|
Publicly Accessible Content Reviews |
|
is blocked by
|
Secure Practices Alignment Justification |
|
is blocked by
|
Assessment Objectives (AO) |
|
is blocked by
|
Periodic Review of Exceptions |
|
is blocked by
|
Assigned Security, Compliance & Resilience Responsibilities |
|
is blocked by
|
Status Reporting To Governing Body |
|
is blocked by
|
Authorize Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Adequate Protections For AI & Autonomous Technologies |
|
is blocked by
|
AI & Autonomous Technologies Cost / Benefit Mapping |
|
is blocked by
|
Prohibit Training |
|
is blocked by
|
AI TEVV Third-Party Risk Management |
|
is blocked by
|
AI & Autonomous Technologies Deployment |
|
is blocked by
|
AI & Autonomous Technologies Irregularity Reporting |
|
is blocked by
|
Pre-Trained AI & Autonomous Technologies Models |
|
is blocked by
|
AI & Autonomous Technologies System Value Chain |
|
is blocked by
|
AI & Autonomous Technologies System Value Chain Fallbacks |
|
is blocked by
|
Compliance-Specific Asset Identification |
|
is blocked by
|
Control Applicability Boundary Graphical Representation |
|
is blocked by
|
Data Action Mapping |
|
is blocked by
|
Alternate Sources for Continued Support |
|
is blocked by
|
Ongoing Contingency Planning |
|
is blocked by
|
Contingency Planning Components |
|
is blocked by
|
Coordinate with Related Plans |
|
is blocked by
|
Coordinate With External Service Providers |
|
is blocked by
|
Telecommunications Priority of Service Provisions |
|
is blocked by
|
Separation of Primary / Alternate Providers |
|
is blocked by
|
Customer Responsibility Matrix (CRM) |
|
is blocked by
|
Cloud Security Architecture |
|
is blocked by
|
Multi-Tenant Environments |
|
is blocked by
|
Multi-Tenant Event Logging Capabilities |
|
is blocked by
|
Multi-Tenant Forensics Capabilities |
|
is blocked by
|
Multi-Tenant Incident Response Capabilities |
|
is blocked by
|
Sensitive Data In Public Cloud Providers |
|
is blocked by
|
Hosted Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Authorized Individuals For Hosted Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Sensitive / Regulated Data On Hosted Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Conformity Assessment |
|
is blocked by
|
Designated Certifying Official |
|
is blocked by
|
Conformity Attestations |
|
is blocked by
|
Declaration of Conformity |
|
is blocked by
|
Non-Conformity Corrective Action |
|
is blocked by
|
Periodic Audits |
|
is blocked by
|
Control Reciprocity |
|
is blocked by
|
Control Inheritance |
|
is blocked by
|
Continuous Control Monitoring (CCM) |
|
is blocked by
|
Government Surveillance |
|
is blocked by
|
Representative Powers |
|
is blocked by
|
Control Assurance Automation (CAA) Oversight |
|
is blocked by
|
Open Source Software |
|
is blocked by
|
Third-Party Threats |
|
is blocked by
|
Monitoring for Third-Party Information Disclosure |
|
is blocked by
|
Sharing of Event Logs & Security-Relevant Telemetry |
|
is blocked by
|
Cross-Organizational Monitoring |
|
is blocked by
|
Third-Party Cryptographic Keys |
|
is blocked by
|
External System Cryptographic Key Control |
|
is blocked by
|
Sensitive / Regulated Data Sharing Decisions |
|
is blocked by
|
Disclosure of Sensitive / Regulated Data |
|
is blocked by
|
Controlled Release of Sensitive / Regulated Data |
|
is blocked by
|
Sensitive / Regulated Data Release Sanitization |
|
is blocked by
|
Geographic Data Location |
|
is blocked by
|
Geolocation Requirements for Processing, Storage and Service Locations |
|
is blocked by
|
Data Localization |
|
is blocked by
|
External Transfer of Sensitive / Regulated Data |
|
is blocked by
|
Binary or Machine-Executable Code |
|
is blocked by
|
Cross-Organization Management |
|
is blocked by
|
Identification & Authentication for Non-Organizational Users |
|
is blocked by
|
Acceptance of External Authenticators |
|
is blocked by
|
Disassociability |
|
is blocked by
|
Acceptance of PIV Credentials from Other Organizations |
|
is blocked by
|
Identification & Authentication for Third-Party Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Sharing Identification & Authentication Information |
|
is blocked by
|
Privileged Access by Non-Organizational Users |
|
is blocked by
|
Federated Credential Management |
|
is blocked by
|
Supply Chain Coordination |
|
is blocked by
|
Coordination With External Providers |
|
is blocked by
|
Threat Analysis & Flaw Remediation During Development |
|
is blocked by
|
Capabilities Deficiency Tracking |
|
is blocked by
|
Deficiency Tracking Automation |
|
is blocked by
|
Security Assessment Report (SAR) |
|
is blocked by
|
Security Authorization |
|
is blocked by
|
Remote Maintenance |
|
is blocked by
|
Remote Maintenance Pre-Approval |
|
is blocked by
|
Remote Maintenance Disconnect Verification |
|
is blocked by
|
Remote Maintenance Comparable Security & Sanitization |
|
is blocked by
|
Authorized Maintenance Personnel |
|
is blocked by
|
Maintenance Personnel Without Appropriate Access |
|
is blocked by
|
Non-System Related Maintenance |
|
is blocked by
|
Off-Site Maintenance |
|
is blocked by
|
Supply Chain Coordination |
|
is blocked by
|
Coordination With External Providers |
|
is blocked by
|
Intranets |
|
is blocked by
|
Third-Party Remote Access Governance |
|
is blocked by
|
Intranets |
|
is blocked by
|
Third-Party Remote Access Governance |
|
is blocked by
|
Computer Matching Agreements (CMA) |
|
is blocked by
|
Prohibition of Selling, Processing and/or Sharing Personal Data (PD) |
|
is blocked by
|
Usage Restrictions of Personal Data (PD) |
|
is blocked by
|
Cease Processing, Storing and/or Sharing Personal Data (PD) |
|
is blocked by
|
Restrict Collection, Processing & Sharing To Identified Purpose |
|
is blocked by
|
Primary Source Collection For Personal Data (PD) |
|
is blocked by
|
Acquired Personal Data (PD) |
|
is blocked by
|
Data Brokers |
|
is blocked by
|
Obligation To Inform Third-Parties |
|
is blocked by
|
Joint Processing of Personal Data (PD) |
|
is blocked by
|
Data Controller Communications |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Supply Chain Visibility |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Supply Chain Flow-Down Requirements |
|
is blocked by
|
Computer Matching Agreements (CMA) |
|
is blocked by
|
Prohibition of Selling, Processing and/or Sharing Personal Data (PD) |
|
is blocked by
|
Risk Assessment |
|
is blocked by
|
Instances Requiring A Risk Assessment |
|
is blocked by
|
Risk Assessment Update |
|
is blocked by
|
Risk Assessment Stakeholder Involvement |
|
is blocked by
|
Risk Register |
|
is blocked by
|
Risk Ranking |
|
is blocked by
|
Risk Response |
|
is blocked by
|
Risk Treatment Options |
|
is blocked by
|
Risk Remediation |
|
is blocked by
|
Risk Treatment Plan (RTP) |
|
is blocked by
|
Documented Alternatives |
|
is blocked by
|
Compensating Countermeasures |
|
is blocked by
|
Data Protection Impact Assessment (DPIA) |
|
is blocked by
|
Supply Chain Risk Management (SCRM) Plan |
|
is blocked by
|
AI & Autonomous Technologies Supply Chain Impacts |
|
is blocked by
|
Supply Chain Risk Assessment (SCRA) |
|
is blocked by
|
Risk Monitoring |
|
is blocked by
|
Shadow Information Technology Detection |
|
is blocked by
|
Information Assurance Enabled Products |
|
is blocked by
|
Functional Properties |
|
is blocked by
|
Commercial Off-The-Shelf (COTS) Security Solutions |
|
is blocked by
|
Risk Assessment |
|
is blocked by
|
Instances Requiring A Risk Assessment |
|
is blocked by
|
Risk Assessment Update |
|
is blocked by
|
Risk Assessment Stakeholder Involvement |
|
is blocked by
|
Risk Register |
|
is blocked by
|
Risk Ranking |
|
is blocked by
|
Risk Response |
|
is blocked by
|
Risk Treatment Options |
|
is blocked by
|
Risk Remediation |
|
is blocked by
|
Risk Treatment Plan (RTP) |
|
is blocked by
|
Documented Alternatives |
|
is blocked by
|
Compensating Countermeasures |
|
is blocked by
|
Data Protection Impact Assessment (DPIA) |
|
is blocked by
|
Supply Chain Risk Management (SCRM) Plan |
|
is blocked by
|
AI & Autonomous Technologies Supply Chain Impacts |
|
is blocked by
|
Supply Chain Risk Assessment (SCRA) |
|
is blocked by
|
Risk Monitoring |
|
is blocked by
|
Pre-Established Secure Configurations |
|
is blocked by
|
Software Escrow |
|
is blocked by
|
Cryptographic Bill of Materials (CBOM) |
|
is blocked by
|
Hardware Bill of Materials (HBOM) |
|
is blocked by
|
Indentured Bill of Materials (IBOM) |
|
is blocked by
|
Software Bill of Materials (SBOM) |
|
is blocked by
|
Third-Party Authentication Practices |
|
is blocked by
|
External Connectivity Requirements - Identification of Ports, Protocols & Services |
|
is blocked by
|
Third-Party Personnel Security |
|
is blocked by
|
Third-Party Contract Requirements |
|
is blocked by
|
Contract Flow-Down Requirements |
|
is blocked by
|
Provider Contingency Plan |
|
is blocked by
|
Review of Third-Party Services |
|
is blocked by
|
Third-Party Scope Review |
|
is blocked by
|
Managing Changes To Third-Party Services |
|
is blocked by
|
Third-Party Deficiency Remediation |
|
is blocked by
|
Break Clauses |
|
is blocked by
|
Foreign Ownership, Control or Influence (FOCI) |
|
is blocked by
|
Ownership Change Monitoring |
|
is blocked by
|
Ownership Change Provisions |
|
is blocked by
|
Third-Party Incident Response & Recovery Capabilities |
|
is blocked by
|
Security Compromise Notification Agreements |
|
is blocked by
|
First-Party Declaration (1PD) |
|
is blocked by
|
Third-Party Attestation (3PA) |
|
is blocked by
|
Terminating Third-Party Relationships |
|
is blocked by
|
Third-Party Transition Planning |
|
is blocked by
|
Technology Assets, Applications, Services and Data (TAASD) Portability |
|
is blocked by
|
Technology Assets, Applications, Services and Data (TAASD) Disposition |
|
is blocked by
|
Third-Party Access Revocation |
|
is blocked by
|
Third-Party Knowledge & Operational Transfer |
|
is blocked by
|
Third-Party Exit Obligations Management |
|
is blocked by
|
Third-Party Exit Contingencies |
|
is blocked by
|
Pre-Established Secure Configurations |
|
is blocked by
|
Software Escrow |
|
is blocked by
|
Cryptographic Bill of Materials (CBOM) |
|
is blocked by
|
Hardware Bill of Materials (HBOM) |
|
is blocked by
|
Indentured Bill of Materials (IBOM) |
|
is blocked by
|
Software Bill of Materials (SBOM) |
|
is blocked by
|
Third-Party Authentication Practices |
|
is blocked by
|
External Connectivity Requirements - Identification of Ports, Protocols & Services |
|
is blocked by
|
Third-Party Personnel Security |
|
is blocked by
|
Third-Party Contract Requirements |
|
is blocked by
|
Contract Flow-Down Requirements |
|
is blocked by
|
Pre-Established Secure Configurations |
|
is blocked by
|
Software Escrow |
|
is blocked by
|
Cryptographic Bill of Materials (CBOM) |
|
is blocked by
|
Hardware Bill of Materials (HBOM) |
|
is blocked by
|
Indentured Bill of Materials (IBOM) |
|
is blocked by
|
Software Bill of Materials (SBOM) |
|
is blocked by
|
Third-Party Authentication Practices |
|
is blocked by
|
External Connectivity Requirements - Identification of Ports, Protocols & Services |
|
is blocked by
|
Third-Party Personnel Security |
|
is blocked by
|
Third-Party Contract Requirements |
|
is blocked by
|
Contract Flow-Down Requirements |