SCRM Focus Tier 2 OPERATIONAL

Powiązane zgłoszenia

Powiązania
Typ powiązania Zgłoszenie
is related to Security, Compliance & Resilience Governance Policy
is related to Security, Compliance & Resilience Program (SCRP)
is related to Centralized Management of Security, Compliance & Resilience Controls
is related to Publishing Security, Compliance & Resilience Documentation
is related to Periodic Review & Update of Security, Compliance & Resilience Program
is related to Exception Management
is related to Assigned Security, Compliance & Resilience Responsibilities
is related to Stakeholder Accountability Structure
is related to Authoritative Chain of Command
is related to Defining Business Context & Mission
is related to Materiality Determination
is related to Steering Committee & Program Oversight
is related to Business As Usual (BAU) Security, Compliance & Resilience Practices
is related to Operationalizing Security, Compliance & Resilience Capabilities
is related to Measures of Performance
is related to Forced Technology Transfer (FTT)
is related to State-Sponsored Espionage
is related to Contacts With Authorities
is related to Quality Management System (QMS)
is related to Assurance
is related to Mergers, Acquisitions & Divestitures (MA&D)
is related to Virtual Data Room (VDR)
is related to Artificial Intelligence & Autonomous Technologies Policy
is related to Artificial Intelligence (AI) & Autonomous Technologies Governance
is related to AI & Autonomous Technologies Mission and Goals Definition
is related to AI & Autonomous Technologies Value Sustainment
is related to AI & Autonomous Technologies Context Definition
is related to AI & Autonomous Technologies-Related Legal Requirements Identification
is related to Assigned Responsibilities for AI & Autonomous Technologies
is related to Trustworthy AI & Autonomous Technologies
is related to Situational Awareness of AI & Autonomous Technologies In Use
is related to AI Model & Agent Inventory & Lifecycle Management
is related to Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization
is related to AI & Autonomous Technologies Internal Controls
is related to AI & Autonomous Technologies Impact Assessment
is related to AI & Autonomous Technologies Risk Profiling
is related to AI & Autonomous Technologies Risk Mapping
is related to AI & Autonomous Technologies Risk Management Decisions
is related to AI & Autonomous Technologies Likelihood & Impact Risk Analysis
is related to AI & Autonomous Technologies High Risk Designations
is related to Novel Risk Assessment Methods & Technologies
is related to AI & Autonomous Technologies Risk Response
is related to AI & Autonomous Technologies Risk Tracking Approaches
is related to AI & Autonomous Technologies Business Case
is related to AI & Autonomous Technologies Potential Benefits Analysis
is related to AI & Autonomous Technologies Potential Costs Analysis
is related to Model & AI Agent Documentation
is related to AI & Autonomous Technologies Output Marking
is related to Release Owner Gate (ROG) For AI-Augmented Content
is related to AI & Autonomous Technologies Output Filtering
is related to Human Moderation of AI & Autonomous Technologies-Generated Content
is related to AI & Autonomous Technologies Intellectual Property Infringement Protections
is related to Data Source Identification
is related to AI & Autonomous Technologies Harm Prevention
is related to AI & Autonomous Technologies Human Subject Protections
is related to AI & Autonomous Technologies Environmental Impact & Sustainability
is related to Previously Unknown AI & Autonomous Technologies Threats & Risks
is related to AI & Autonomous Technologies Conformity
is related to Manipulative or Deceptive Techniques
is related to Materially Distorting Behaviors
is related to Social Scoring
is related to AI & Autonomous Technologies Requirements Definitions
is related to AI & Autonomous Technologies Fairness & Bias
is related to AI & Autonomous Technologies Implementation Tasks Definition
is related to Real World Testing of AI & Autonomous Technologies
is related to AI & Autonomous Technologies Testing Techniques
is related to Generative Artificial Intelligence (GAI) Identification
is related to Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV)
is related to AI TEVV Trustworthiness Assessment
is related to AI TEVV Tools
is related to AI TEVV Trustworthiness Demonstration
is related to AI TEVV Results Evaluation
is related to AI TEVV Effectiveness
is related to AI TEVV Reporting
is related to AI & Autonomous Technologies Residual Risks
is related to AI & Autonomous Technologies Viability Decisions
is related to AI TEVV Post-Deployment Monitoring
is related to Updating AI & Autonomous Technologies
is related to Asset Management Policy
is related to Asset Governance
is related to Standardized Naming Convention
is related to Asset Inventories
is related to Component Duplication Avoidance
is related to Identify Critical Assets
is related to Technology Assets, Applications, Services and/or Data (TAASD) Criticality Ratings
is related to Asset-Service Dependencies
is related to Stakeholder Identification & Involvement
is related to Comprehensive Asset Inventory Management
is related to Asset Discovery
is related to Approved Technologies
is related to Automated Unauthorized Component Detection
is related to Prohibited Technology Assets, Applications and/or Services (TAAS)
is related to Software Licensing Restrictions
is related to Provenance
is related to Asset Categorization
is related to High-Risk Technology Assets, Applications and/or Services (TAAS) Categorization
is related to Asset Scope Classification
is related to Network Diagrams & Data Flow Diagrams (DFDs)
is related to Security of Assets & Media
is related to Technology Assets, Applications, Services and/or Data (TAASD) Storage
is related to Unattended End-User Equipment
is related to Secure Disposal, Destruction or Re-Use of Equipment
is related to Removal of Assets
is related to Use of Personal Devices
is related to Use of Third-Party Devices
is related to Bring Your Own Device (BYOD) Usage
is related to Usage Parameters
is related to Technology Asset Inspections
is related to Physical Tampering Detection
is related to Roots of Trust Protection
is related to Telecommunications Equipment
is related to Travel-Only Devices
is related to Business Continuity & Disaster Recovery Policy
is related to Defined Operational Resilience Requirements
is related to Operational Resilience Capabilities
is related to Business Continuity & Disaster Recovery (BC/DR) Plans
is related to Recovery Time / Point Objectives (RTO / RPO)
is related to Recovery Operations Criteria
is related to Recovery Operations Communications
is related to Alternate Communications Channels
is related to Ongoing Contingency Planning
is related to Resume All Missions & Business Functions
is related to Continue Essential Mission & Business Functions
is related to Resume Essential Missions & Business Functions
is related to Contingency Training
is related to Simulated Events
is related to Automated Training Environments
is related to Contingency Plan Testing & Exercises
is related to Coordinated Testing with Related Plans
is related to Contingency Plan Testing For Alternate Storage & Processing Sites
is related to Contingency Plan Root Cause Analysis (RCA) & Lessons Learned
is related to Alternate Storage Site
is related to Separation from Primary Storage Site
is related to Primary Storage Site Accessibility
is related to Alternate Processing Site
is related to Separation from Primary Processing Site
is related to Alternate Site Priority of Service
is related to Preparation for Use
is related to Inability to Return to Primary Site
is related to Capacity & Performance Planning Policy
is related to Capacity & Performance Management
is related to Capacity Planning
is related to Resource Priority
is related to Performance Monitoring
is related to Elastic Expansion
is related to Change Management Policy
is related to Change Management Program
is related to Prohibition Of Changes
is related to Dual Authorization for Changes To Critical / Sensitive Technology Assets, Applications and/or Services (TAAS)
is related to Dual Approval For High-Impact Environments
is related to Security, Compliance & Resilience Representative for Asset Lifecycle Changes
is related to Security Impact Analysis for Changes
is related to Test, Validate & Document Changes
is related to Cloud Security Policy
is related to Cloud Services
is related to Cloud Infrastructure Onboarding
is related to Cloud Infrastructure Offboarding
is related to Cloud Infrastructure Security Subnet
is related to Multi-Tenant Environments
is related to Data Handling & Portability
is related to Standardized Virtualization Formats
is related to Sensitive Data In Public Cloud Providers
is related to Cloud Access Security Broker (CASB)
is related to Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Compliance Policy
is related to Statutory, Regulatory & Contractual Compliance
is related to Compliance Scope
is related to Ability To Demonstrate Conformity
is related to Conformity Monitoring
is related to Functional Review Of Security, Compliance & Resilience Controls
is related to Non-Conformity Oversight
is related to Executive Leadership Oversight of Security, Compliance & Resilience Controls
is related to Internal Audit Function
is related to Independent Assessors
is related to Assessment Team Subject Matter Expertise
is related to Assessor Access
is related to Assessment Methods
is related to Assessment Rigor
is related to Configuration Management Policy
is related to Configuration Management Program
is related to Baseline Tailoring
is related to Secure Baseline Configurations
is related to Account Lockout
is related to Concurrent Session Control
is related to Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas
is related to Approved Configuration Deviations
is related to Periodic Configuration Reviews
is related to Continuous Monitoring Policy
is related to Continuous Monitoring
is related to Event Log & Security-Relevant Telemetry Monitoring
is related to System Generated Event Logs & Security-Relevant Telemetry
is related to Centralized Collection of Event Logs & Security-Relevant Telemetry
is related to Monitoring Reporting
is related to Trend Analysis Reporting
is related to Correlate Monitoring Information
is related to Integration of Scanning & Other Monitoring Information
is related to Correlation with Physical Monitoring
is related to Audit Trails
is related to Event Log & Security-Relevant Telemetry Storage Capacity
is related to Time Stamps
is related to Synchronization With Authoritative Time Source
is related to Protection of Event Logs & Security-Relevant Telemetry
is related to Event Log & Security-Relevant Telemetry Retention
is related to Privileged Functions Logging
is related to Account Creation and Modification Logging
is related to Inventory of Technology Asset Event Logging
is related to Anomalous Behavior
is related to Unusual Transactions
is related to Monitoring for Indicators of Compromise (IOC)
is related to Deactivated Account Activity
is related to Cryptographic Protections Policy
is related to Cryptographic Management
is related to Cryptographic Cipher Suites and Protocols Inventory
is related to Encrypting Data In Transit
is related to Encrypting Data At Rest
is related to Database Encryption
is related to Public Key Infrastructure (PKI)
is related to Public Key Infrastructure (PKI) Availability
is related to Transmission of Cybersecurity & Data Protection Attributes
is related to Certificate Authorities
is related to Data Classification & Handling Policy
is related to Data Protection
is related to Sensitive / Regulated Data Governance
is related to Data Catalog
is related to Data & Asset Classification
is related to Data Stewardship
is related to Defining Access Authorizations for Sensitive / Regulated Data
is related to Sensitive / Regulated Data Protection
is related to Restrict Sensitive / Regulated Data Access To Authorized Individuals
is related to Limitations on Use & Distribution of Sensitive / Regulated Data
is related to Sensitive / Regulated Data Access Mapping
is related to Sensitive / Regulated Media Records
is related to Media Marking
is related to Masking Displayed Sensitive / Regulated Data
is related to Media Storage
is related to Data Storage Location Reviews
is related to Physically Secure All Media Containing Sensitive / Regulated Data
is related to Storing Authentication Data
is related to Media Transportation
is related to Digital & Non-Digital Media Disposal
is related to Digital Media Sanitization
is related to Sanitization of Sensitive / Regulated Data
is related to Digital Media Sanitization Documentation
is related to Digital Media Use Restrictions
is related to Portable Storage Devices
is related to Removable Media Security
is related to Use of External Technology Assets, Applications and/or Services (TAAS)
is related to Limits of Authorized Use To Process, Store and/or Transmit Data
is related to Non-Organizationally Owned Technology Assets, Applications and/or Services (TAAS)
is related to Information Search & Retrieval
is related to Electronic Discovery (eDiscovery)
is related to Publicly Accessible Content
is related to Data Mining Protection
is related to Ad-Hoc Transfers
is related to Transfer Authorizations
is related to Media & Data Retention
is related to Embedded Technology Policy
is related to Embedded Technology Security Program
is related to Separate Operating Environments For Embedded Technologies
is related to Internet of Things (IOT)
is related to Interface Security
is related to Embedded Technology Configuration Monitoring
is related to Embedded Technology Maintenance
is related to Message Queuing Telemetry Transport (MQTT) Security
is related to Remote Management of Embedded Technologies
is related to Safety Assessment
is related to Endpoint Security Policy
is related to Endpoint Device Management (EDM)
is related to Endpoint Protection Mechanisms
is related to Automatic Endpoint Protection Mechanism Updates
is related to Malicious Code Protection (Antimalware)
is related to Always On Antimalware Protection
is related to Heuristic / Nonsignature-Based Malware Detection
is related to Documented Endpoint Security Protection Measures
is related to Software Firewall
is related to Unified Endpoint Device Management (UEDM)
is related to Extended Detection & Response (XDR)
is related to Endpoint File Integrity Monitoring (FIM)
is related to Host Intrusion Detection and Prevention Systems (HIDS / HIPS)
is related to Mobile Code
is related to Collaborative Computing Devices
is related to Collaborative Computing Capability Disabling / Removal In Secure Work Areas
is related to Explicitly Indicate Current Participants
is related to Human Resources Security Policy
is related to Human Resources Security Management
is related to Position Categorization
is related to Users With Elevated Privileges
is related to Competency Requirements for Security, Compliance & Resilience-Related Positions
is related to Defined Roles & Responsibilities
is related to Assigned Roles & Responsibilities Awareness
is related to Personnel Screening
is related to Roles With Special Protection Measures
is related to Citizenship Requirements
is related to Terms of Employment
is related to Rules of Behavior
is related to Social Media & Social Networking Restrictions
is related to Access Agreements
is related to Confidentiality Agreements
is related to Onboarding, Transferring & Offboarding Personnel
is related to Probationary Periods
is related to Personnel Sanctions
is related to Personnel Transfer
is related to Personnel Termination
is related to Automated Employment Status Notifications
is related to Third-Party Personnel
is related to Separation of Duties (SoD)
is related to Incompatible Roles
is related to Identification & Authentication Policy
is related to Identity & Access Management (IAM)
is related to Authenticate, Authorize and Audit (AAA)
is related to Replay-Resistant Authentication
is related to Retain Access Records
is related to Identity Providers (IdP) & Authorization Servers
is related to User Provisioning & De-Provisioning
is related to Change of Roles & Duties
is related to Identity Proofing (Identity Verification)
is related to In-Person or Trusted Third-Party Registration
is related to Identity Evidence
is related to Role-Based Access Control (RBAC)
is related to Attribute-Based Access Control (ABAC)
is related to Real-Time Access Decisions
is related to Access Profile Rules
is related to Account Management
is related to Management Approval For New or Changed Accounts
is related to Management Approval For Privileged Accounts
is related to Privileged Account Management (PAM)
is related to Dedicated Privileged Account
is related to Manual Override
is related to Password-Based Authentication
is related to Passkeys
is related to Biometric Authentication
is related to PKI-Based Authentication
is related to Hardware Token-Based Authentication
is related to Authenticator Feedback
is related to Incident Response Policy
is related to Incident Response Operations
is related to Continuous Incident Response Improvements
is related to Incident Classification & Prioritization
is related to Indicators of Compromise (IOC)
is related to Incident Handling
is related to Correlation with External Organizations
is related to Automated Incident Handling Processes
is related to Incident Response Plan (IRP)
is related to Incident Response Capabilities Testing
is related to Incident Response Capabilities Testing Coordination with Related Plans
is related to Incident Response Training
is related to Simulated Incidents
is related to Automated Incident Response Training Environments
is related to Integrated Security Incident Response Team (ISIRT)
is related to Public Relations & Reputation Repair
is related to Chain of Custody & Forensics
is related to Root Cause Analysis (RCA) & Lessons Learned
is related to Regulatory & Law Enforcement Contacts
is related to Incident Stakeholder Reporting
is related to Information Assurance Policy
is related to Information Assurance (IA) Operations
is related to Control Validation Testing (CVT)
is related to Specialized Assessments
is related to Assessor Independence
is related to Third-Party Assessment Reciprocity
is related to Maintenance Policy
is related to Maintenance Operations
is related to Timely Maintenance
is related to Preventative Maintenance
is related to Predictive Maintenance
is related to Maintenance Validation
is related to Maintenance Monitoring
is related to Prevent Unauthorized Removal
is related to Automated Maintenance Activities
is related to Mobile Device Management Policy
is related to Centralized Management Of Mobile Devices
is related to Full Device & Container-Based Encryption
is related to Separate Mobile Device Profiles
is related to Personally-Owned Mobile Devices
is related to Organization-Owned Mobile Devices
is related to Remote Purging
is related to Mobile Device Tampering
is related to Network Security Policy
is related to Boundary Protection
is related to External Telecommunications Services
is related to Direct Internet Access Restrictions
is related to Prevent Unauthorized Exfiltration
is related to Data Flow Enforcement – Access Control Lists (ACLs)
is related to Deny Traffic by Default & Allow Traffic by Exception
is related to Separate Subnets To Isolate Functions
is related to Sensitive / Regulated Data Enclave (Secure Zone)
is related to Segregation From Enterprise Services
is related to Virtual Local Area Network (VLAN) Separation
is related to Microsegmentation
is related to Software Defined Networking (SDN)
is related to Domain Name Service (DNS) Resolution
is related to Zero Trust Architecture (ZTA)
is related to Policy Decision Point (PDP)
is related to Network Access Control (NAC)
is related to DNS & Content Filtering
is related to Authenticated Proxy
is related to Route Privileged Network Access
is related to Physical & Environmental Security Policy
is related to Physical & Environmental Protections
is related to Physical Security Plan (PSP)
is related to Zone-Based Physical Security
is related to Alternate Work Site
is related to Physical Access Authorizations
is related to Role-Based Physical Access
is related to Dual Authorization for Physical Access
is related to Physical Access Control
is related to Physical Access Device Inventories
is related to Controlled Ingress & Egress Points
is related to Physical Access Logs
is related to Physical Security of Offices, Rooms & Facilities
is related to Working in Secure Areas
is related to Access To Critical Systems
is related to Lockable Physical Casings
is related to Visitor Control
is related to Equipment Siting & Protection
is related to Access Control for Output Devices
is related to Component Marking
is related to Asset Monitoring and Tracking
is related to Data Privacy Policy
is related to Data Privacy Program
is related to Data Privacy Accountability Structure
is related to Chief Privacy Officer (CPO)
is related to Data Protection Officer (DPO)
is related to Personal Data Process Manager (PDPM)
is related to Data Fiduciary
is related to Privacy-Aware Design
is related to Documenting Data Processing Activities
is related to Personal Data (PD) Lineage
is related to Personal Data (PD) Categories
is related to Inventory of Personal Data (PD)
is related to Personal Data (PD) Inventory Automation Support
is related to Updating Personal Data (PD) Process
is related to Reasonable Data Privacy Practices
is related to Security of Personal Data (PD)
is related to Personal Data (PD) Control Testing, Training & Monitoring
is related to Authority To Collect, Process, Store & Share Personal Data (PD)
is related to Product or Service Delivery Restrictions
is related to Data Privacy Requirements for Contractors & Service Providers
is related to Binding Corporate Rules (BCR)
is related to Information Sharing With Third Parties
is related to Limiting Personal Data (PD) Disclosures
is related to Accounting of Disclosures
is related to Notification of Disclosure Requests To Data Subject
is related to Financial Incentives For Personal Data (PD)
is related to Notice of Financial Incentive
is related to Dissemination of Data Privacy Program Information
is related to Data Privacy Notice
is related to Privacy Notice Formatting
is related to Conspicuous Link To Data Privacy Notice
is related to Project & Resource Management Policy
is related to Strategic Plan & Objectives
is related to Targeted Capability Maturity Levels
is related to Security, Compliance & Resilience Protection Portfolio Management
is related to Security, Compliance & Resilience Resource Management
is related to Allocation of Resources
is related to Secure Development Life Cycle (SDLC) Management
is related to Security, Compliance & Resilience In Project Management
is related to Risk Management Policy
is related to Risk Management Program
is related to Risk Management Resourcing
is related to Risk Culture
is related to Risk Framing
is related to Material Risks
is related to Executive Leadership Approval For Managing Material Risk
is related to Documented Justification For Material Risk Management Decisions
is related to Risk-Based Security Categorization
is related to Business Impact Analysis (BIA)
is related to Risk Identification
is related to Risk Catalog
is related to Risk Owner
is related to Secure Engineering & Architecture Policy
is related to Security, Compliance & Resilience Aware Design
is related to Achieving Security, Compliance & Resilience Requirements
is related to Flexible Technology Stack
is related to Secure Architecture Principles
is related to Secure Engineering Principles
is related to System Partitioning
is related to Hardware Separation
is related to Thread Separation
is related to System Privileges Isolation
is related to Information In Shared Resources
is related to Fail Secure
is related to Non-Persistence
is related to Information Output Filtering
is related to Honeyclients
is related to Heterogeneity
is related to Security Operations Policy
is related to Operations Security
is related to Security Concept Of Operations (CONOPS)
is related to Standardized Operating Procedures (SOP)
is related to Service Delivery (Business Process Support)
is related to Secure Practices Guidelines
is related to Security Operations Center (SOC)
is related to Security Awareness & Training Policy
is related to Security, Compliance & Resilience-Minded Workforce
is related to Maintaining Workforce Development Relevancy
is related to Security, Compliance & Resilience Awareness Training
is related to Role-Based Security, Compliance & Resilience Training
is related to Technology Development & Acquisition Policy
is related to Technology Development & Acquisition
is related to Development Methods, Techniques & Processes
is related to Software Assurance Maturity Model (SAMM)
is related to Programming Language Selection
is related to Secure Software Development Practices (SSDP)
is related to Product Management
is related to Product Conformity Governance
is related to Continuous Monitoring Plan
is related to Ongoing Product Security Support
is related to Integrity Mechanisms for Software / Firmware Updates
is related to Software Release Integrity Verification
is related to Information Assurance Enabled Products
is related to Disclosure of Vulnerabilities
is related to Technical Documentation Artifacts
is related to Product-Specific Risk Assessment Artifacts
is related to Product Tampering and Counterfeiting (PTC)
is related to Customized Development of Critical Components
is related to DevSecOps
is related to Minimum Viable Product (MVP) Security Requirements
is related to Input Data Validation
is related to Minimizing Attack Surfaces
is related to Product Testing & Reviews
is related to Security, Compliance & Resilience Representatives For Product Changes
is related to Secure Development Environments
is related to Library Privileges
is related to Security, Compliance & Resilience Testing Throughout Development
is related to Static Code Analysis
is related to Use of Live Data
is related to Developer Screening
is related to Developer Configuration Management
is related to Developer Threat Analysis & Flaw Remediation
is related to Developer-Provided Training
is related to Software / Firmware Integrity Verification
is related to Hardware Integrity Verification
is related to Bills of Material (BOMs)
is related to Third-Party Management Policy
is related to Third-Party Management
is related to Acquisition Strategies, Tools & Methods
is related to Supply Chain Risk Management (SCRM)
is related to Processes To Address Weaknesses or Deficiencies
is related to Limit Potential Harm
is related to Security, Compliance & Resilience Outsourcing Limitations
is related to Outsourcing Non-Essential Functions or Services
is related to Supplier Diversity
is related to Adequate Supply
is related to Third-Party Inventories
is related to Third-Party Criticality Assessments
is related to Third-Party Risk Assessments & Approvals
is related to Responsible, Accountable, Supportive, Consulted & Informed (RASCI) Matrix
is related to Third-Party Services
is related to Conflict of Interests
is related to Third-Party Processing, Storage and Service Locations
is related to Threat Management Policy
is related to Threat Intelligence Program
is related to Dynamic Threat Awareness
is related to Threat Intelligence Feeds
is related to Threat Intelligence Reporting
is related to Threat Catalog
is related to Material Threats
is related to Threat Analysis
is related to Behavioral Baselining
is related to Predictive Cyber Analytics
is related to Indicators of Exposure (IOE)
is related to Vulnerability & Patch Management Policy
is related to Vulnerability & Patch Management Program (VPMP)
is related to Attack Surface Scope
is related to Vulnerability Exploitation Analysis
is related to Vulnerability Ranking
is related to Vulnerability Remediation Process
is related to Centralized Management of Flaw Remediation Processes
is related to Continuous Vulnerability Remediation Activities
is related to Time To Remediate / Benchmarks For Corrective Action
is related to Software & Firmware Patching
is related to Deferred Patching Decisions
is related to Pre-Deployment Patch Testing
is related to Web Security Policy
is related to Web Security
is related to Web Security Standard
is related to Web Application Framework
is related to Unauthorized Code On Web Pages
is related to Client-Facing Web Services
is related to Strong Customer Authentication (SCA)
is related to Web Application Input Validation & Sanitization
is related to Secure Web Traffic
is related to Web Application Output Encoding
is related to Web Browser Security
is related to Website Change Detection
is related to Secure Practices Alignment Justification
is related to Standardized Terminology
is related to Control Objectives
is related to Assessment Objectives (AO)
is related to Periodic Review of Exceptions
is related to High Value Assets (HVAs)
is related to Status Reporting To Governing Body
is related to Select Controls
is related to Implement Controls
is related to Assess Controls
is related to Authorize Technology Assets, Applications and/or Services (TAAS)
is related to Monitor Controls
is related to Key Performance Indicators (KPIs)
is related to Key Risk Indicators (KRIs)
is related to Contacts With Groups & Associations
is related to AI & Autonomous Technologies Continuous Improvements
is related to Adequate Protections For AI & Autonomous Technologies
is related to AI Threat Modeling & Risk Assessment
is related to Fine Tuning Risk Mitigation
is related to Responsibility To Supersede, Deactivate and/or Disengage AI & Autonomous Technologies
is related to AI & Autonomous Technologies Targeted Application Scope
is related to AI & Autonomous Technologies Cost / Benefit Mapping
is related to Data Source Integrity
is related to Training Data Source & Integrity
is related to Prohibit Training
is related to Detrimental or Unfavorable Treatment
is related to Risk and Criminal Profiling
is related to Populating Facial Recognition Databases
is related to Emotion Inference
is related to Biometric Categorization
is related to AI & Autonomous Technologies Knowledge Limits
is related to AI & Autonomous Technologies Development Practices
is related to AI & Autonomous Technologies Transparency
is related to AI & Autonomous Technologies Implementation Documentation
is related to AI & Autonomous Technologies Human Domain Knowledge Reliance
is related to AI & Autonomous Technologies Capabilities Testing
is related to Real-World Testing
is related to Documenting Testing Guidance
is related to AI TEVV Safety Demonstration
is related to AI TEVV Security & Resiliency Assessment
is related to AI TEVV Transparency & Accountability Assessment
is related to AI TEVV Privacy Assessment
is related to AI TEVV Fairness & Bias Assessment
is related to AI & Autonomous Technologies Model Validation
is related to AI TEVV Comparable Deployment Settings
is related to AI TEVV Third-Party Risk Management
is related to Robust Stakeholder Engagement for AI & Autonomous Technologies
is related to AI & Autonomous Technologies Stakeholder Feedback Integration
is related to AI & Autonomous Technologies Ongoing Assessments
is related to AI & Autonomous Technologies End User Feedback
is related to AI & Autonomous Technologies Incident & Error Reporting
is related to AI & Autonomous Technologies Stakeholder Diversity
is related to AI & Autonomous Technologies Stakeholder Competencies
is related to AI & Autonomous Technologies Deployment
is related to AI & Autonomous Technologies Human Oversight
is related to AI & Autonomous Technologies Oversight Measures
is related to AI & Autonomous Technologies Separate Verification
is related to AI & Autonomous Technologies Oversight Functions Competency
is related to AI & Autonomous Technologies Data Relevance
is related to AI & Autonomous Technologies Irregularity Reporting
is related to AI & Autonomous Technologies Use Notification To Employees
is related to AI & Autonomous Technologies Use Notification To Users
is related to AI & Autonomous Technologies Production Monitoring
is related to AI & Autonomous Technologies Measurement Approaches
is related to Measuring AI & Autonomous Technologies Effectiveness
is related to Unmeasurable AI & Autonomous Technologies Risks
is related to Efficacy of AI & Autonomous Technologies Measurement
is related to AI & Autonomous Technologies Domain Expert Reviews
is related to AI & Autonomous Technologies Performance Changes
is related to Pre-Trained AI & Autonomous Technologies Models
is related to AI & Autonomous Technologies Event Logging
is related to Serious Incident Reporting For AI & Autonomous Technologies
is related to Serious Incident Root Cause Analysis (RCA) For AI & Autonomous Technologies
is related to Anomaly Detection & Human Oversight
is related to Human-in-the-Loop & Escalation
is related to Emergent Behavior & Collusion Protections
is related to Multi-Agent Trust & Communication Validation
is related to AI & Autonomous Technologies System Value Chain
is related to AI & Autonomous Technologies System Value Chain Fallbacks
is related to AI Model Resilience
is related to AI Model Pollution
is related to Cascading Hallucination Defense
is related to Resource Exhaustion & Denial of Service (DoS) Resilience
is related to AI Agent Governance
is related to Infrastructure Hardening & Isolation
is related to AI Agent Limitations
is related to Tool & Application Programming Interface (API) Invocation Controls
is related to AI Agent Orchestration Protocol Safeguards
is related to AI Agent Data Pipeline & Input Integrity
is related to AI Agent Privileged Role & Delegation Boundaries
is related to AI Agent Data Access Restrictions
is related to AI Agent Data Extraction
is related to AI Agent Identity & Impersonation Defense
is related to AI Agent Logic Integrity
is related to Sandboxing AI Agents
is related to AI Agent Prompt Injection Defense
is related to AI Agent Kill Switch / User Control
is related to AI Agent Adversarial & Red Team Testing
is related to AI Agent Self-Modification Controls
is related to Purging AI Agent Data
is related to AI Agent Delegation and Chaining Control
is related to AI Agent Behavioral Drift Detection
is related to AI Agent Action Authentication & Authorization
is related to AI Agent Transparency & Audit
is related to AI Agent Explainability
is related to AI Agent Ethics, Fairness & Bias Detection
is related to AI Agent Output Integrity & Verification
is related to AI Agent Resource Limiting
is related to Agentic Output Traceability & Repudiation
is related to AI Agent Logging
is related to AI Agent Session Management
is related to Human-in-the-Loop Workload & Manipulation
is related to Robotic Process Automation (RPA)
is related to Business Process Task Enumeration
is related to Technology Assets, Applications, Services and/or Data (TAASD) Ownership Assignment
is related to Automated Network Asset Discovery
is related to Automated Location Tracking
is related to Authorized To Connect
is related to Categorize Artificial Intelligence (AI)-Related Technology Assets, Applications and/or Services (TAAS)
is related to Asset Attributes
is related to Compliance-Specific Asset Identification
is related to Control Applicability Boundary Graphical Representation
is related to Data Action Mapping
is related to Management Approval For External Media Transfer
is related to Temporary Asset Storage In Automobiles
is related to Kiosks & Point of Interaction (PoI) Devices
is related to Return of Assets
is related to Logical Tampering Protection
is related to Re-Imaging Devices After Travel
is related to Jump Server
is related to Database Management System (DBMS)
is related to Decommissioning
is related to Technology Lifecycle Management
is related to Stable Versions
is related to Removal of Previous Versions
is related to Technical Debt Reviews
is related to Unsupported Technology Assets, Applications and/or Services (TAAS)
is related to Alternate Sources for Continued Support
is related to Predictable Failure Analysis
is related to Business Continuity Management System (BCMS)
is related to Contingency Planning Components
is related to Contingency Plan Update Notifications
is related to Coordinate with Related Plans
is related to Alternate Processing Site Accessibility
is related to Personnel Transfer to Alternate Processing / Storage Site
is related to Telecommunications Services Availability
is related to Telecommunications Priority of Service Provisions
is related to Separation of Primary / Alternate Providers
is related to Technology Assets, Applications and/or Services (TAAS) Recovery & Reconstitution
is related to Restore Within Time Period
is related to Isolated Recovery Environment
is related to Reserve Hardware
is related to Redundant Secondary System
is related to Failover Capability
is related to Resilient Data Backup Architecture
is related to Data Backups
is related to Transfer to Alternate Storage Site
is related to Separate Storage for Critical Information
is related to Redundant Copies of Business-Critical Data
is related to Transaction Recovery
is related to Data Replication
is related to Data Archiving
is related to Continuous Data Protection (CDP)
is related to Data Backup Access
is related to Data Backup & Restoration Hardware Protection
is related to Restoration Integrity Verification
is related to Testing for Reliability & Integrity
is related to Test Restoration Using Sampling
is related to Data Backup Modification and/or Destruction
is related to Dual Authorization For Sensitive / Regulated Backup Media Destruction
is related to Regional Delivery
is related to Resiliency Planning For Alternate Sites
is related to Configuration Change Control
is related to Access Restriction For Change
is related to Role-Based Permissions To Implement Changes
is related to Stakeholder Notification of Changes
is related to Control Functionality Verification
is related to Report Verification Results
is related to Emergency Changes
is related to Documenting Emergency Changes
is related to Automated Security Response
is related to Customer Responsibility Matrix (CRM)
is related to Cloud Security Architecture
is related to Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Authorized Individuals For Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Sensitive / Regulated Data On Hosted Technology Assets, Applications and/or Services (TAAS)
is related to Designated Certifying Official
is related to Conformity Attestations
is related to Periodic Audits
is related to Audit Planning Activities
is related to Assurance Levels (AL)
is related to Control Reciprocity
is related to Control Inheritance
is related to Evidence Request List (ERL)
is related to Evidence Sampling
is related to Continuous Control Monitoring (CCM)
is related to Legal Assessment of Investigative Inquires
is related to Investigation Request Notifications
is related to Investigation Access Restrictions
is related to Government Surveillance
is related to Potential Human Rights Abuses
is related to Grievances
is related to Grievance Response
is related to Localized Representation
is related to Representative Powers
is related to Dual Use Technology
is related to USML or CCL Identification
is related to Export-Controlled Access Restrictions
is related to Export Activities Documentation
is related to Statement of Applicability (SOA)
is related to Security, Compliance & Resilience Status Reporting
is related to AI & Autonomous Technologies Registration
is related to Control Assurance Automation (CAA) Oversight
is related to Control Assurance Automation (CAA) Evidence Integrity & Provenance
is related to Development & Test Environment Configurations
is related to Wireless Access Authentication & Encryption
is related to Bluetooth & Wireless Devices
is related to Infrared Communications
is related to Microphones & Web Cameras
is related to Radio Frequency Identification (RFID) Security
is related to Contactless Access Control Systems
is related to Thin Nodes
is related to Video Teleconference (VTC) Security
is related to Physically Disable or Remove Capabilities
is related to Baseline Configuration Reviews & Updates
is related to Retention Of Previous Configurations
is related to Software Usage Restrictions
is related to Configuration Management Role Assignment
is related to Open Source Software
is related to Explicitly Allow / Deny Applications
is related to Unsupported Internet Browsers & Email Clients
is related to Production Software Repository
is related to Third-Party Libraries
is related to Software Repository Protections
is related to Software Development Repository
is related to Embedded Sensor Capability
is related to Embedded Sensor Data Use Restrictions
is related to Notice of Embedded Sensor Data Collection
is related to Embedded Sensor Data Collection Minimization
is related to Embedded Sensor Configuration Verification
is related to Refresh from Trusted Sources
is related to Hypervisor Access
is related to Restrict Access To Security Functions
is related to Control Assurance Automation (CAA) Change Control
is related to Control Assurance Automation (CAA) Unauthorized Change Detection
is related to Control Assurance Automation (CAA) Separation of Duties
is related to Centralized Management of Event Log & Security-Relevant Telemetry Content
is related to Analyze and Prioritize Monitoring Requirements
is related to Audit Level Adjustments
is related to Centralized Event Log & Security-Relevant Telemetry Review & Analysis
is related to Event Log & Security-Relevant Telemetry Analysis & Triage
is related to Event Log & Security-Relevant Telemetry Review Escalation Matrix
is related to Alert Threshold Tuning
is related to Content of Event Logs
is related to Event Log & Security-Relevant Telemetry Backup on Separate Physical Systems / Components
is related to Event Log & Security-Relevant Telemetry Access by Subset of Privileged Users
is related to Dual Authorization for Event Log & Security-Relevant Telemetry Movement
is related to Privileged User Oversight
is related to Insider Threats
is related to Third-Party Threats
is related to Individuals Posing Greater Risk
is related to Session Audit
is related to Real-Time Session Monitoring
is related to Monitoring For Information Disclosure
is related to Monitoring for Third-Party Information Disclosure
is related to Covert Channel Analysis
is related to Analyze Traffic for Covert Exfiltration
is related to Unauthorized Activities
is related to Unauthorized Network Services
is related to Inbound & Outbound Communications Traffic
is related to De-Militarized Zone (DMZ) Monitoring
is related to Permitted Monitoring Actions
is related to Changes by Authorized Individuals
is related to Query Parameter Audits of Personal Data (PD)
is related to Limit Personal Data (PD) In Event Logs & Security-Relevant Telemetry
is related to Response To Event Log Processing Failures
is related to Identity Binding
is related to Alternate Event Logging Capability
is related to Sharing of Event Logs & Security-Relevant Telemetry
is related to Cross-Organizational Monitoring
is related to Control Assurance Automation (CAA) Data Feed Identification
is related to Use of Cryptographic Controls
is related to Alternate Physical Protection
is related to Integrity of Data In Transit
is related to Encrypting Storage Media
is related to Encrypting Offline Storage
is related to Cryptographic Key Management
is related to Symmetric Keys
is related to Asymmetric Keys
is related to Cryptographic Key Loss or Change
is related to Control & Distribution of Cryptographic Keys
is related to Assigned Cryptographic Key Owners
is related to Certificate Monitoring
is related to Export-Controlled Cryptography
is related to Highest Classification Level
is related to Data Reclassification
is related to Sensitive Data Inventories
is related to Periodic Scans for Sensitive / Regulated Data
is related to Sensitive / Regulated Data Sharing Decisions
is related to Disclosure of Sensitive / Regulated Data
is related to Controlled Release of Sensitive / Regulated Data
is related to Sensitive / Regulated Data Release Sanitization
is related to Making Sensitive / Regulated Data Unreadable In Storage
is related to Media Transportation Custodians
is related to Encrypting Data Outside of Controlled Areas
is related to Dual Authorization for Sensitive / Regulated Data Destruction
is related to Digital Media Sanitization Equipment Testing
is related to First Time Use Sanitization
is related to Prohibit Portable Storage Devices Use Without Owner
is related to Protecting Sensitive / Regulated Data on External Technology Assets, Applications and/or Services (TAAS)
is related to Minimize Sensitive / Regulated Data Exposure
is related to Archived Data Set Retention
is related to Archiving Sensitive / Regulated Data
is related to Limit Sensitive / Regulated Data In Testing, Training & Research
is related to Logical Data Location
is related to Automated Tools to Support Logical Data Location
is related to Geographic Data Location
is related to Geolocation Requirements for Processing, Storage and Service Locations
is related to Data Localization
is related to External Transfer of Sensitive / Regulated Data
is related to Data Quality Operations
is related to Data Management Board
is related to Data Quality Management
is related to Data Quality Automation
is related to Data Modeling Guidelines
is related to Data Analytics Bias
is related to De-Identification (Anonymization)
is related to De-Identify Dataset Upon Collection
is related to Removal, Masking, Encryption, Hashing or Replacement of Direct Identifiers
is related to Statistical Disclosure Control
is related to Motivated Intruder
is related to Differential Privacy
is related to Identity Association Techniques & Technologies
is related to Attribute Reassignment
is related to Attribute Configuration By Authorized Individuals
is related to Audit Changes
is related to Code Names
is related to Data Rights Management (DRM)
is related to Data Loss Prevention (DLP)
is related to Control Assurance Automation (CAA) Aggregated Telemetry
is related to Embedded Technology Inventory Management
is related to Operational Technology (OT)
is related to Resilience To Outages
is related to Embedded Technology Reviews
is related to Operating Environment Certification
is related to Safe Operations
is related to Proximity Sensor
is related to Safety Instrumented System (SIS)
is related to Safety Instrumented Function (SIF)
is related to Safety Integrity Level (SIL)
is related to Centralized Management of Endpoint Protection Mechanisms
is related to Evolving Endpoint Protection Threats
is related to Binary or Machine-Executable Code
is related to Antimalware Protection Mechanism Testing
is related to Endpoint Detection & Response (EDR)
is related to Technology Use Restrictions
is related to Use of Critical Technologies
is related to Use of Mobile Devices
is related to Security-Minded Dress Code
is related to Formal Indoctrination
is related to Policy Familiarization & Acknowledgement
is related to Post-Employment Requirements Awareness
is related to Post-Employment Requirements Notification
is related to Workplace Investigations
is related to Updating Disciplinary Processes
is related to Preventative Access Restriction
is related to Asset Collection
is related to High-Risk Terminations
is related to Identify Critical Skills & Gaps
is related to Remediate Identified Skills Deficiencies
is related to Identify Vital Security, Compliance & Resilience Staff
is related to Establish Redundancy for Vital Security, Compliance & Resilience Staff
is related to Perform Succession Planning
is related to Identifying Authorized Work Locations
is related to Communicating Authorized Work Locations
is related to Reporting Suspicious Activities
is related to Termination of Employment
is related to Identity Evidence Validation & Verification
is related to In-Person Validation & Verification
is related to Address Confirmation
is related to Authorized Accounts
is related to User & Service Account Inventories
is related to Account Disabling for High Risk Individuals
is related to Account Separation Between Infrastructure Environments
is related to Emergency Accounts
is related to Periodic Review of Individual & Service Account Privileges
is related to User Identity (ID) Management
is related to Standardized Identifier Management (User Names)
is related to Employment Status Identification
is related to Citizenship Identification
is related to Dynamic Management
is related to Cross-Organization Management
is related to Privileged Account Identifiers
is related to Pairwise Pseudonymous Identifiers (PPID)
is related to Authenticator Management
is related to Protection of Authenticators
is related to Default Authenticators
is related to Restrictions on Shared Groups / Accounts
is related to Group Authentication
is related to User Responsibilities for Account Management
is related to Credential Sharing
is related to Access Enforcement
is related to Access To Sensitive / Regulated Data
is related to Dedicated Administrative Machines
is related to Revocation of Access Authorizations
is related to Network Access to Privileged Commands
is related to Identification & Authentication for Organizational Users
is related to Out-of-Band Authentication (OOBA)
is related to Acceptance of PIV Credentials
is related to Identification & Authentication for Non-Organizational Users
is related to Acceptance of Third-Party Credentials
is related to Acceptance of External Authenticators
is related to Disassociability
is related to Acceptance of PIV Credentials from Other Organizations
is related to Use of FICAM-Issued Profiles
is related to Identification & Authentication for Devices
is related to Device Attestation
is related to Access Control For Mobile Devices
is related to Identification & Authentication for Third-Party Technology Assets, Applications and/or Services (TAAS)
is related to Sharing Identification & Authentication Information
is related to Privileged Access by Non-Organizational Users
is related to Multi-Factor Authentication (MFA)
is related to Replay-Resistant Multi-Factor Authentication (MFA)
is related to Phishing-Resistant Multi-Factor Authentication (MFA)
is related to Out-of-Band (OOB) Multi-Factor Authentication (MFA)
is related to Alternative Multi-Factor Authentication (MFA)
is related to Multi-Factor Authentication (MFA) For Network Access to Privileged Accounts
is related to Multi-Factor Authentication (MFA) For Network Access to Non-Privileged Accounts
is related to Multi-Factor Authentication (MFA) For Local Access to Privileged Accounts
is related to Software Defined Storage (SDS) Data Access Control
is related to Sensitive / Regulated Data Access Enforcement
is related to Compliance As Code (CAC) Identity Governance
is related to Compliance As Code (CAC) Least Privileges
is related to Compliance As Code (CAC) Credential Lifecycle Management
is related to Compliance As Code (CAC) Credentials Management
is related to Automated Reporting
is related to Automated Tracking, Data Collection & Analysis
is related to Automatic Disabling of Technology Assets, Applications and/or Services (TAAS)
is related to Incident Response Plan (IRP) Update
is related to Situational Awareness For Incidents
is related to Cyber Incident Reporting for Sensitive / Regulated Data
is related to Vulnerabilities Related To Incidents
is related to Incident Tracking Repository
is related to Incident Pattern Analysis
is related to Recurring Incident Analysis
is related to Incident Reporting Assistance
is related to Automation Support of Availability of Information / Support
is related to Supply Chain Coordination
is related to Coordination With External Providers
is related to Sensitive / Regulated Data Spill Response
is related to Sensitive / Regulated Data Spill Responsible Personnel
is related to Sensitive / Regulated Data Spill Training
is related to Post-Sensitive / Regulated Data Spill Operations
is related to Sensitive / Regulated Data Exposure to Unauthorized Personnel
is related to Detonation Chambers (Sandboxes)
is related to Data Breach
is related to Artificial Intelligence (AI) & Autonomous Technologies (AAT) Incidents
is related to Cryptographic Incident Response (Emergency Algorithm Transition)
is related to Embedded Technology Incidents
is related to Post-Incident Technology Assets, Applications and Services (TAAS) Validation
is related to Assessment Boundaries
is related to Plan / Coordinate with Other Organizational Entities
is related to Adequate Security for Sensitive / Regulated Data In Support of Contracts
is related to Threat Analysis & Flaw Remediation During Development
is related to Technical Verification
is related to Capabilities Deficiency Tracking
is related to Security Assessment Report (SAR)
is related to Security Authorization
is related to Control Assurance Automation (CAA) Automation
is related to Controlled Maintenance
is related to Maintenance Tools
is related to Restrict Tool Usage
is related to Remote Maintenance
is related to Remote Maintenance Notifications
is related to Remote Maintenance Pre-Approval
is related to Auditing Remote Maintenance
is related to Remote Maintenance Comparable Security & Sanitization
is related to Authorized Maintenance Personnel
is related to Maintenance Personnel Without Appropriate Access
is related to Non-System Related Maintenance
is related to Maintain Configuration Control During Maintenance
is related to Field Maintenance
is related to Off-Site Maintenance
is related to Restricting Access To Authorized Technology Assets, Applications and/or Services (TAAS)
is related to Mobile Device Geofencing
is related to Network Security Controls (NSC)
is related to Network Processing Rules For Personal Data (PD)
is related to Human Reviews
is related to Out-of-Band Channels
is related to Network Device Plane Segmentation
is related to Domain Registrar Security
is related to Application Proxy
is related to Visibility of Encrypted Communications
is related to Denial of Service (DoS) Protection
is related to Intranets
is related to Wireless Networking
is related to Wireless Boundaries
is related to Rogue Wireless Detection
is related to Remote Access
is related to Remote Access Pathways
is related to Expeditious Remote Access Disconnect / Disable Capability
is related to Remote Access Endpoint Security Validation
is related to Remote Access Privileged Commands & Sensitive Data Access
is related to Work From Anywhere (WFA) - Telecommuting Security
is related to Third-Party Remote Access Governance
is related to Network Intrusion Detection / Prevention Systems (NIDS / NIPS)
is related to Wireless Intrusion Detection / Prevention Systems (WIDS / WIPS) Deployment
is related to Demilitarized Zones (DMZ)
is related to Web Application Firewall (WAF)
is related to Application Programming Interface (API) Security
is related to API Gateway
is related to Safeguarding Data Over Open Networks
is related to Domain-Based Message Authentication Reporting and Conformance (DMARC)
is related to Sender Policy Framework (SPF)
is related to Authenticated Received Chain (ARC)
is related to End-User Messaging Technologies
is related to Electronic Messaging
is related to Phishing & Spam Protection
is related to Cross Domain Authentication
is related to Detection of Unsanctioned Information
is related to Cross Domain Content Transfer
is related to Metadata
is related to Metadata Validation
is related to Personnel Searches
is related to On-Site Client Segregation
is related to Monitoring Physical Access
is related to Intrusion Alarms / Surveillance Equipment
is related to Monitoring Physical Access To Critical Systems
is related to Distinguish Visitors from On-Site Personnel
is related to Identification Requirement
is related to Restrict Unescorted Access
is related to Automated Records Management & Review
is related to Minimize Visitor Personal Data (PD)
is related to Visitor Access Revocation
is related to Delivery & Removal
is related to Temporary Storage
is related to Transmission Medium Security
is related to Supporting Utilities
is related to Automatic Voltage Controls
is related to Emergency Shutoff
is related to Emergency Power
is related to Emergency Lighting
is related to Water Damage Protection
is related to Automation Support for Water Damage Protection
is related to Fire Protection
is related to Fire Detection Devices
is related to Fire Suppression Devices
is related to Automatic Fire Suppression
is related to Temperature & Humidity Controls Monitoring
is related to Temperature & Humidity Controls Alerting
is related to Updating & Correcting Personal Data (PD)
is related to Flaw Remediation with Personal Data (PD)
is related to Disclosure Request Rejections
is related to Justification To Reject Disclosure Requests
is related to Privacy Act Statements
is related to Privacy Act Exemptions
is related to System of Records Notice (SORN)
is related to System of Records Notice (SORN) Review Process
is related to Computer Matching Agreements (CMA)
is related to Alternative Means To Deliver Privacy Notice
is related to Notice of Right To Limit
is related to Purpose Specification
is related to Purpose Compatibility
is related to Choice Architecture
is related to Symmetry In Choice
is related to Choice Architecture Testing
is related to Data Subject Consent
is related to Tailored Consent
is related to Revoke Consent
is related to Just-In-Time Notice & Updated Consent
is related to Prohibition of Selling, Processing and/or Sharing Personal Data (PD)
is related to Cookie Management
is related to Data Subject Right To Opt-Out
is related to Opt-Out Links
is related to Alternative Opt-Out Link
is related to Data Subject Opt-In Consent
is related to Parent or Guardian Opt-In Consent For Minors
is related to Usage Restrictions of Personal Data (PD)
is related to Continued Use of Personal Data (PD)
is related to Cease Processing, Storing and/or Sharing Personal Data (PD)
is related to Internal Use of Personal Data (PD) For Testing, Training and Research
is related to Personal Data (PD) Retention & Disposal
is related to Personal Data (PD) Formats
is related to Personal Data (PD) Collection Methods
is related to Restrict Collection, Processing & Sharing To Identified Purpose
is related to Primary Source Collection For Personal Data (PD)
is related to Identifiable Image Collection
is related to Data Brokers
is related to Personal Data (PD) Accuracy & Integrity
is related to Automated Decision-Making Technology (ADMT)
is related to Automated Decision-Making Technology (ADMT) For Data Subject Actions
is related to Automated Decision-Making Technology (ADMT) Use Notification
is related to Automated Decision-Making Technology (ADMT) Opt-Out Consent
is related to Automated Decision-Making Technology (ADMT) Transparency
is related to Data Subject Communications
is related to Communicating Processing Changes
is related to Data Subject Communications Documentation
is related to Data Subject Communications Metrics
is related to Data Subject Communications Disclosure
is related to Data Subject Authentication
is related to Data Subject Rights Management
is related to Data Subject Empowerment
is related to Enabling Data Subjects To Update Personal Data (PD)
is related to Correcting Inaccurate Personal Data (PD)
is related to Notice of Correction or Processing Change
is related to Appeal Adverse Decision
is related to Right to Erasure
is related to Data Portability
is related to Personal Data (PD) Exports
is related to Obligation To Inform Third-Parties
is related to Joint Processing of Personal Data (PD)
is related to Data Controller Communications
is related to Register As A Data Controller and/or Data Processor
is related to Purpose Validation
is related to Commitment To Continual Improvements
is related to Prioritization To Address Evolving Risks & Threats
is related to Project Management Stage Gates
is related to Security, Compliance & Resilience Requirements Definition
is related to Business Process Definition
is related to Manage Organizational Knowledge
is related to Quantum Security Policy
is related to Quantum Risk Governance
is related to Data Shelf-Life Classification for Post-Quantum Cryptography (PQC) Prioritization
is related to Long-Lived Data Identification
is related to Cryptographic Agility Risk Assessment (CARA)
is related to Cryptographic Exception Register
is related to Compensating Controls for Quantum-Vulnerable Systems
is related to Crypto Agility Maturity Assessment
is related to Harvest Now, Decrypt Later (HNDL) Mitigation
is related to Post-Quantum Cryptography Agility Plan (PQCAP)
is related to Post-Quantum Cryptography (PQC) Transition Planning & Hybrid Mode Support
is related to Post-Quantum Cryptography (PQC) Migration Progress Oversight
is related to Post-Quantum Cryptography (PQC) Supply Chain Visibility
is related to Post-Quantum Cryptography (PQC) Supply Chain Flow-Down Requirements
is related to Post-Quantum Cryptography (PQC) Discovery & Visibility
is related to Post-Quantum Cryptography (PQC) Asset Inventory
is related to Post-Quantum Cryptography Exposure
is related to Quantum Threat Intelligence Monitoring
is related to Collaboration & Information Sharing
is related to Crypto-Agility Architecture
is related to Entropy Source & Random Bit Generation
is related to Stateful Hash-Based Signatures for Firmware & Code Signing
is related to Approved Post-Quantum Cryptography (PQC) Algorithm Use
is related to Post-Quantum Cryptography (PQC) Validation Requirements
is related to Deprecated Cryptographic Algorithms
is related to Post-Quantum Cryptography (PQC) Key Management
is related to Quantum-Safe Public Key Infrastructure (PKI) Transition
is related to Algorithm Negotiation Integrity
is related to Hybrid / Composite Cryptography
is related to Cryptographic Application Programming Interface (API) Abstraction
is related to Post-Quantum Cryptography (PQC) Implementation Validation & Interoperability Testing
is related to Risk Tolerance
is related to Risk Threshold
is related to Risk Appetite
is related to Impact-Level Prioritization
is related to Risk Assessment Methodology
is related to Risk Assessment
is related to Instances Requiring A Risk Assessment
is related to Risk Assessment Update
is related to Risk Assessment Stakeholder Involvement
is related to Risk Register
is related to Risk Ranking
is related to Risk Response
is related to Risk Treatment Options
is related to Risk Remediation
is related to Risk Treatment Plan (RTP)
is related to Compensating Countermeasures
is related to Data Protection Impact Assessment (DPIA)
is related to Supply Chain Risk Management (SCRM) Plan
is related to AI & Autonomous Technologies Supply Chain Impacts
is related to Supply Chain Risk Assessment (SCRA)
is related to Risk Monitoring
is related to Alignment With Enterprise Architecture
is related to Defense-In-Depth (DiD) Architecture
is related to Fail Safe
is related to Non-Persistent Information
is related to Honeypots
is related to Virtualization Techniques
is related to Concealment & Misdirection
is related to Randomness
is related to Change Processing & Storage Locations
is related to Distributed Processing & Storage
is related to Secure Log-On Procedures (Trusted Path)
is related to System Use Notification (Logon Banner)
is related to Standardized Microsoft Windows Banner
is related to Truncated Banner
is related to Application Container
is related to Privileged Environments
is related to System Administrative Processes
is related to Database Administrative Processes
is related to Security Orchestration, Automation, and Response (SOAR)
is related to Shadow Information Technology Detection
is related to Simulated Cyber Attack Scenario Training
is related to Sensitive / Regulated Data Storage, Handling & Processing
is related to Privileged User Training
is related to AI & Autonomous Technologies Risk Management Training
is related to Vendor-Specific Security, Compliance & Resilience Training
is related to Cyber Threat Environment Situational Awareness
is related to Social Engineering & Mining
is related to Suspicious Communications & Anomalous System Behavior
is related to Counterintelligence Training
is related to Anti-Counterfeit Training
is related to Quantum Security Awareness
is related to Continuing Professional Education (CPE) - Security, Compliance & Resilience Personnel
is related to Continuing Professional Education (CPE) - DevOps Personnel
is related to Practical Security Training Exercises
is related to Security, Compliance & Resilience Training Records
is related to Training Feedback
is related to Security, Compliance & Resilience Knowledge Sharing
is related to Secure Settings By Default
is related to Developer Architecture & Design
is related to Criticality Analysis During Development
is related to Threat Modeling
is related to Supporting Toolchain
is related to Software Design Review
is related to Software Design Root Cause Analysis (RCA)
is related to Reporting Exploitable Vulnerabilities
is related to Functional Properties
is related to Identification & Justification of Ports, Protocols & Services
is related to Products With Digital Elements
is related to Insecure Ports, Protocols & Services
is related to Commercial Off-The-Shelf (COTS) Security Solutions
is related to Logging Syntax
is related to Error Handling
is related to Designated Roles To View Error Messages
is related to Pre-Established Secure Configurations
is related to Malware Testing Prior to Release
is related to Separation of Development, Testing and Operational Environments
is related to Secure Migration Practices
is related to Access to Program Source Code
is related to Approved Code
is related to Archiving Software Releases
is related to Software Escrow
is related to Dynamic Code Analysis
is related to Malformed Input Testing
is related to Application Penetration Testing
is related to Manual Code Review
is related to Test Data Integrity
is related to Developer Knowledge & Skills Register
is related to Requisite Developer Training
is related to Cryptographic Bill of Materials (CBOM)
is related to Hardware Bill of Materials (HBOM)
is related to Indentured Bill of Materials (IBOM)
is related to Software Bill of Materials (SBOM)
is related to Third-Party Authentication Practices
is related to External Connectivity Requirements - Identification of Ports, Protocols & Services
is related to Third-Party Personnel Security
is related to Third-Party Contract Requirements
is related to Contract Flow-Down Requirements
is related to Provider Contingency Plan
is related to Review of Third-Party Services
is related to Third-Party Scope Review
is related to Managing Changes To Third-Party Services
is related to Third-Party Deficiency Remediation
is related to Break Clauses
is related to Foreign Ownership, Control or Influence (FOCI)
is related to Ownership Change Monitoring
is related to Ownership Change Provisions
is related to Third-Party Incident Response & Recovery Capabilities
is related to Security Compromise Notification Agreements
is related to First-Party Declaration (1PD)
is related to Third-Party Attestation (3PA)
is related to Terminating Third-Party Relationships
is related to Third-Party Transition Planning
is related to Technology Assets, Applications, Services and Data (TAASD) Portability
is related to Technology Assets, Applications, Services and Data (TAASD) Disposition
is related to Third-Party Access Revocation
is related to Third-Party Knowledge & Operational Transfer
is related to Third-Party Exit Obligations Management
is related to Third-Party Exit Contingencies
is related to Vulnerability Disclosure Program (VDP)
is related to Security Disclosure Contact Information
is related to Threat Hunting
is related to Tainting
is related to Insider Threat Program
is related to Insider Threat Awareness
is related to Known Exploited Vulnerabilities (KEV) Mitigations
is related to Automated Software & Firmware Updates
is related to Out-of-Cycle Patching
is related to Vulnerability Scanning
is related to Update Vulnerability Scanning Tools
is related to Breadth / Depth of Coverage For Vulnerability Scanning
is related to Reviewing Vulnerability Scanner Usage
is related to Vulnerability Trend Analysis
is related to Review Historical Event logs
is related to External Vulnerability Assessment
is related to Internal Vulnerability Assessment
is related to Acceptable Discoverable Information
is related to Correlate Scanning Information
is related to Penetration Testing
is related to Independent Penetration Agent or Team
is related to Technical Surveillance Countermeasures Security
is related to Red Team Exercises
is related to Publicly Accessible Content Reviews