|
is blocked by
|
Authorize Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Forced Technology Transfer (FTT) |
|
is blocked by
|
State-Sponsored Espionage |
|
is blocked by
|
Mergers, Acquisitions & Divestitures (MA&D) |
|
is blocked by
|
Virtual Data Room (VDR) |
|
is blocked by
|
Artificial Intelligence & Autonomous Technologies Policy |
|
is blocked by
|
Artificial Intelligence (AI) & Autonomous Technologies Governance |
|
is blocked by
|
AI & Autonomous Technologies Context Definition |
|
is blocked by
|
AI & Autonomous Technologies-Related Legal Requirements Identification |
|
is blocked by
|
Trustworthy AI & Autonomous Technologies |
|
is blocked by
|
Situational Awareness of AI & Autonomous Technologies In Use |
|
is blocked by
|
AI Model & Agent Inventory & Lifecycle Management |
|
is blocked by
|
Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization |
|
is blocked by
|
Adequate Protections For AI & Autonomous Technologies |
|
is blocked by
|
AI & Autonomous Technologies Impact Assessment |
|
is blocked by
|
AI & Autonomous Technologies Risk Profiling |
|
is blocked by
|
AI & Autonomous Technologies Risk Mapping |
|
is blocked by
|
AI & Autonomous Technologies Risk Management Decisions |
|
is blocked by
|
AI & Autonomous Technologies High Risk Designations |
|
is blocked by
|
AI & Autonomous Technologies Risk Response |
|
is blocked by
|
AI & Autonomous Technologies Targeted Application Scope |
|
is blocked by
|
AI & Autonomous Technologies Output Filtering |
|
is blocked by
|
Data Source Identification |
|
is blocked by
|
Data Source Lineage & Origin Disclosure |
|
is blocked by
|
Prohibit Training |
|
is blocked by
|
AI & Autonomous Technologies Human Subject Protections |
|
is blocked by
|
AI & Autonomous Technologies Conformity |
|
is blocked by
|
Manipulative or Deceptive Techniques |
|
is blocked by
|
Materially Distorting Behaviors |
|
is blocked by
|
Social Scoring |
|
is blocked by
|
Detrimental or Unfavorable Treatment |
|
is blocked by
|
Risk and Criminal Profiling |
|
is blocked by
|
Populating Facial Recognition Databases |
|
is blocked by
|
Emotion Inference |
|
is blocked by
|
Biometric Categorization |
|
is blocked by
|
AI & Autonomous Technologies Requirements Definitions |
|
is blocked by
|
AI & Autonomous Technologies Fairness & Bias |
|
is blocked by
|
Real World Testing of AI & Autonomous Technologies |
|
is blocked by
|
AI TEVV Trustworthiness Assessment |
|
is blocked by
|
AI TEVV Transparency & Accountability Assessment |
|
is blocked by
|
AI TEVV Privacy Assessment |
|
is blocked by
|
AI TEVV Fairness & Bias Assessment |
|
is blocked by
|
AI TEVV Benchmarking Content Provenance |
|
is blocked by
|
AI TEVV Third-Party Risk Management |
|
is blocked by
|
AI TEVV Post-Deployment Monitoring |
|
is blocked by
|
Robust Stakeholder Engagement for AI & Autonomous Technologies |
|
is blocked by
|
AI & Autonomous Technologies Stakeholder Feedback Integration |
|
is blocked by
|
AI & Autonomous Technologies End User Feedback |
|
is blocked by
|
AI & Autonomous Technologies Incident & Error Reporting |
|
is blocked by
|
AI & Autonomous Technologies Human Oversight |
|
is blocked by
|
AI & Autonomous Technologies Oversight Measures |
|
is blocked by
|
AI & Autonomous Technologies Separate Verification |
|
is blocked by
|
AI & Autonomous Technologies Oversight Functions Competency |
|
is blocked by
|
AI & Autonomous Technologies Data Relevance |
|
is blocked by
|
AI & Autonomous Technologies Irregularity Reporting |
|
is blocked by
|
AI & Autonomous Technologies Use Notification To Employees |
|
is blocked by
|
AI & Autonomous Technologies Use Notification To Users |
|
is blocked by
|
AI & Autonomous Technologies Production Monitoring |
|
is blocked by
|
AI & Autonomous Technologies Measurement Approaches |
|
is blocked by
|
Measuring AI & Autonomous Technologies Effectiveness |
|
is blocked by
|
Unmeasurable AI & Autonomous Technologies Risks |
|
is blocked by
|
Pre-Trained AI & Autonomous Technologies Models |
|
is blocked by
|
AI & Autonomous Technologies Event Logging |
|
is blocked by
|
Serious Incident Reporting For AI & Autonomous Technologies |
|
is blocked by
|
Human-in-the-Loop & Escalation |
|
is blocked by
|
AI Agent Governance |
|
is blocked by
|
AI Agent Limitations |
|
is blocked by
|
AI Agent Data Pipeline & Input Integrity |
|
is blocked by
|
AI Agent Data Access Restrictions |
|
is blocked by
|
AI Agent Data Extraction |
|
is blocked by
|
Sandboxing AI Agents |
|
is blocked by
|
AI Agent Explainability |
|
is blocked by
|
AI Agent Ethics, Fairness & Bias Detection |
|
is blocked by
|
AI Agent Output Integrity & Verification |
|
is blocked by
|
High-Risk Technology Assets, Applications and/or Services (TAAS) Categorization |
|
is blocked by
|
Categorize Artificial Intelligence (AI)-Related Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Asset Attributes |
|
is blocked by
|
Compliance-Specific Asset Identification |
|
is blocked by
|
Network Diagrams & Data Flow Diagrams (DFDs) |
|
is blocked by
|
Data Action Mapping |
|
is blocked by
|
Security of Assets & Media |
|
is blocked by
|
Management Approval For External Media Transfer |
|
is blocked by
|
Technology Assets, Applications, Services and/or Data (TAASD) Storage |
|
is blocked by
|
Temporary Asset Storage In Automobiles |
|
is blocked by
|
Unattended End-User Equipment |
|
is blocked by
|
Kiosks & Point of Interaction (PoI) Devices |
|
is blocked by
|
Secure Disposal, Destruction or Re-Use of Equipment |
|
is blocked by
|
Return of Assets |
|
is blocked by
|
Removal of Assets |
|
is blocked by
|
Use of Personal Devices |
|
is blocked by
|
Use of Third-Party Devices |
|
is blocked by
|
Bring Your Own Device (BYOD) Usage |
|
is blocked by
|
Telecommunications Equipment |
|
is blocked by
|
Travel-Only Devices |
|
is blocked by
|
Decommissioning |
|
is blocked by
|
Cryptographic Protection |
|
is blocked by
|
Data Archiving |
|
is blocked by
|
Data Backup Access |
|
is blocked by
|
Dual Authorization For Sensitive / Regulated Backup Media Destruction |
|
is blocked by
|
Security, Compliance & Resilience Representative for Asset Lifecycle Changes |
|
is blocked by
|
Cloud Infrastructure Onboarding |
|
is blocked by
|
Cloud Infrastructure Offboarding |
|
is blocked by
|
Multi-Tenant Environments |
|
is blocked by
|
Data Handling & Portability |
|
is blocked by
|
Sensitive Data In Public Cloud Providers |
|
is blocked by
|
Cloud Access Security Broker (CASB) |
|
is blocked by
|
Authorized Individuals For Hosted Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Sensitive / Regulated Data On Hosted Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Compliance Policy |
|
is blocked by
|
Statutory, Regulatory & Contractual Compliance |
|
is blocked by
|
Compliance Scope |
|
is blocked by
|
Ability To Demonstrate Conformity |
|
is blocked by
|
Conformity Assessment |
|
is blocked by
|
Designated Certifying Official |
|
is blocked by
|
Conformity Attestations |
|
is blocked by
|
Declaration of Conformity |
|
is blocked by
|
Conformity Monitoring |
|
is blocked by
|
Functional Review Of Security, Compliance & Resilience Controls |
|
is blocked by
|
Non-Conformity Oversight |
|
is blocked by
|
Non-Conformity Corrective Action |
|
is blocked by
|
Assessor Access |
|
is blocked by
|
Legal Assessment of Investigative Inquires |
|
is blocked by
|
Investigation Request Notifications |
|
is blocked by
|
Investigation Access Restrictions |
|
is blocked by
|
Government Surveillance |
|
is blocked by
|
Potential Human Rights Abuses |
|
is blocked by
|
Grievances |
|
is blocked by
|
Grievance Response |
|
is blocked by
|
Session Lock |
|
is blocked by
|
Pattern-Hiding Displays |
|
is blocked by
|
Voice Over Internet Protocol (VoIP) Security |
|
is blocked by
|
Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas |
|
is blocked by
|
Physically Disable or Remove Capabilities |
|
is blocked by
|
Embedded Sensor Capability |
|
is blocked by
|
Embedded Sensor Data Use Restrictions |
|
is blocked by
|
Notice of Embedded Sensor Data Collection |
|
is blocked by
|
Embedded Sensor Data Collection Minimization |
|
is blocked by
|
Embedded Sensor Configuration Verification |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Retention |
|
is blocked by
|
Individuals Posing Greater Risk |
|
is blocked by
|
Session Audit |
|
is blocked by
|
Real-Time Session Monitoring |
|
is blocked by
|
Monitoring For Information Disclosure |
|
is blocked by
|
Monitoring for Third-Party Information Disclosure |
|
is blocked by
|
Analyze Traffic for Covert Exfiltration |
|
is blocked by
|
Proxy Logging |
|
is blocked by
|
File Activity Monitoring (FAM) |
|
is blocked by
|
Query Parameter Audits of Personal Data (PD) |
|
is blocked by
|
Sensitive Event Log & Security-Relevant Telemetry Data |
|
is blocked by
|
Limit Personal Data (PD) In Event Logs & Security-Relevant Telemetry |
|
is blocked by
|
Database Logging |
|
is blocked by
|
Sharing of Event Logs & Security-Relevant Telemetry |
|
is blocked by
|
Cross-Organizational Monitoring |
|
is blocked by
|
Use of Cryptographic Controls |
|
is blocked by
|
Alternate Physical Protection |
|
is blocked by
|
Pre/Post Transmission Handling |
|
is blocked by
|
Encrypting Data In Transit |
|
is blocked by
|
Encrypting Data At Rest |
|
is blocked by
|
Encrypting Storage Media |
|
is blocked by
|
Encrypting Offline Storage |
|
is blocked by
|
Database Encryption |
|
is blocked by
|
Cryptographic Key Management |
|
is blocked by
|
Asymmetric Keys |
|
is blocked by
|
Cryptographic Key Loss or Change |
|
is blocked by
|
Control & Distribution of Cryptographic Keys |
|
is blocked by
|
Assigned Cryptographic Key Owners |
|
is blocked by
|
Third-Party Cryptographic Keys |
|
is blocked by
|
External System Cryptographic Key Control |
|
is blocked by
|
Transmission of Cybersecurity & Data Protection Attributes |
|
is blocked by
|
Certificate Authorities |
|
is blocked by
|
Data Classification & Handling Policy |
|
is blocked by
|
Data Protection |
|
is blocked by
|
Sensitive / Regulated Data Governance |
|
is blocked by
|
Data Catalog |
|
is blocked by
|
Data & Asset Classification |
|
is blocked by
|
Highest Classification Level |
|
is blocked by
|
Data Reclassification |
|
is blocked by
|
Sensitive Data Inventories |
|
is blocked by
|
Periodic Scans for Sensitive / Regulated Data |
|
is blocked by
|
Data Stewardship |
|
is blocked by
|
Defining Access Authorizations for Sensitive / Regulated Data |
|
is blocked by
|
Sensitive / Regulated Data Protection |
|
is blocked by
|
Restrict Sensitive / Regulated Data Access To Authorized Individuals |
|
is blocked by
|
Limitations on Use & Distribution of Sensitive / Regulated Data |
|
is blocked by
|
Sensitive / Regulated Data Sharing Decisions |
|
is blocked by
|
Disclosure of Sensitive / Regulated Data |
|
is blocked by
|
Controlled Release of Sensitive / Regulated Data |
|
is blocked by
|
Sensitive / Regulated Data Release Sanitization |
|
is blocked by
|
Sensitive / Regulated Data Access Mapping |
|
is blocked by
|
Sensitive / Regulated Media Records |
|
is blocked by
|
Media Marking |
|
is blocked by
|
Automated Marking |
|
is blocked by
|
Masking Displayed Sensitive / Regulated Data |
|
is blocked by
|
Making Sensitive / Regulated Data Unreadable In Storage |
|
is blocked by
|
Media Storage |
|
is blocked by
|
Data Storage Location Reviews |
|
is blocked by
|
Physically Secure All Media Containing Sensitive / Regulated Data |
|
is blocked by
|
Storing Authentication Data |
|
is blocked by
|
Media Transportation |
|
is blocked by
|
Media Transportation Custodians |
|
is blocked by
|
Encrypting Data Outside of Controlled Areas |
|
is blocked by
|
Digital & Non-Digital Media Disposal |
|
is blocked by
|
Digital Media Sanitization |
|
is blocked by
|
Sanitization of Sensitive / Regulated Data |
|
is blocked by
|
Digital Media Sanitization Documentation |
|
is blocked by
|
Digital Media Sanitization Equipment Testing |
|
is blocked by
|
Digital Media Use Restrictions |
|
is blocked by
|
Portable Storage Devices |
|
is blocked by
|
Removable Media Security |
|
is blocked by
|
Use of External Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Limits of Authorized Use To Process, Store and/or Transmit Data |
|
is blocked by
|
Protecting Sensitive / Regulated Data on External Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Non-Organizationally Owned Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Information Search & Retrieval |
|
is blocked by
|
Electronic Discovery (eDiscovery) |
|
is blocked by
|
Publicly Accessible Content |
|
is blocked by
|
Data Mining Protection |
|
is blocked by
|
Ad-Hoc Transfers |
|
is blocked by
|
Transfer Authorizations |
|
is blocked by
|
Media & Data Retention |
|
is blocked by
|
Minimize Sensitive / Regulated Data Exposure |
|
is blocked by
|
Archived Data Set Retention |
|
is blocked by
|
Archiving Sensitive / Regulated Data |
|
is blocked by
|
Mobile Device Data Retention Limitations |
|
is blocked by
|
Limit Sensitive / Regulated Data In Testing, Training & Research |
|
is blocked by
|
Logical Data Location |
|
is blocked by
|
Automated Tools to Support Logical Data Location |
|
is blocked by
|
Geographic Data Location |
|
is blocked by
|
Geolocation Requirements for Processing, Storage and Service Locations |
|
is blocked by
|
Data Localization |
|
is blocked by
|
External Transfer of Sensitive / Regulated Data |
|
is blocked by
|
Data Quality Operations |
|
is blocked by
|
Data Management Board |
|
is blocked by
|
Data Quality Management |
|
is blocked by
|
Data Modeling Guidelines |
|
is blocked by
|
Data Tags |
|
is blocked by
|
Data Analytics Bias |
|
is blocked by
|
De-Identification (Anonymization) |
|
is blocked by
|
Automated De-Identification of Sensitive / Regulated Data |
|
is blocked by
|
De-Identify Dataset Upon Collection |
|
is blocked by
|
Removal, Masking, Encryption, Hashing or Replacement of Direct Identifiers |
|
is blocked by
|
Statistical Disclosure Control |
|
is blocked by
|
Motivated Intruder |
|
is blocked by
|
Differential Privacy |
|
is blocked by
|
Cybersecurity & Data Protection Attributes |
|
is blocked by
|
Dynamic Attribute Association |
|
is blocked by
|
Attribute Value Changes By Authorized Individuals |
|
is blocked by
|
Maintenance of Attribute Associations By System |
|
is blocked by
|
Association of Attributes By Authorized Individuals |
|
is blocked by
|
Attribute Displays for Output Devices |
|
is blocked by
|
Data Subject Attribute Associations |
|
is blocked by
|
Consistent Attribute Interpretation |
|
is blocked by
|
Identity Association Techniques & Technologies |
|
is blocked by
|
Attribute Reassignment |
|
is blocked by
|
Attribute Configuration By Authorized Individuals |
|
is blocked by
|
Data Loss Prevention (DLP) |
|
is blocked by
|
Endpoint Protection Mechanisms |
|
is blocked by
|
Collaborative Computing Devices |
|
is blocked by
|
Collaborative Computing Capability Disabling / Removal In Secure Work Areas |
|
is blocked by
|
Explicitly Indicate Current Participants |
|
is blocked by
|
Participant Identity Verification |
|
is blocked by
|
Participant Connection Management |
|
is blocked by
|
Explicit Indication Of Use |
|
is blocked by
|
Users With Elevated Privileges |
|
is blocked by
|
Personnel Screening |
|
is blocked by
|
Roles With Special Protection Measures |
|
is blocked by
|
Citizenship Requirements |
|
is blocked by
|
Social Media & Social Networking Restrictions |
|
is blocked by
|
Technology Use Restrictions |
|
is blocked by
|
Use of Critical Technologies |
|
is blocked by
|
Use of Mobile Devices |
|
is blocked by
|
Security-Minded Dress Code |
|
is blocked by
|
Access Agreements |
|
is blocked by
|
Confidentiality Agreements |
|
is blocked by
|
Onboarding, Transferring & Offboarding Personnel |
|
is blocked by
|
Formal Indoctrination |
|
is blocked by
|
Policy Familiarization & Acknowledgement |
|
is blocked by
|
Post-Employment Requirements Awareness |
|
is blocked by
|
Post-Employment Requirements Notification |
|
is blocked by
|
Probationary Periods |
|
is blocked by
|
Workplace Investigations |
|
is blocked by
|
Preventative Access Restriction |
|
is blocked by
|
Personnel Transfer |
|
is blocked by
|
Personnel Termination |
|
is blocked by
|
Asset Collection |
|
is blocked by
|
Identity & Access Management (IAM) |
|
is blocked by
|
Authenticate, Authorize and Audit (AAA) |
|
is blocked by
|
User Provisioning & De-Provisioning |
|
is blocked by
|
Change of Roles & Duties |
|
is blocked by
|
Termination of Employment |
|
is blocked by
|
Identity Proofing (Identity Verification) |
|
is blocked by
|
In-Person or Trusted Third-Party Registration |
|
is blocked by
|
Identity Evidence |
|
is blocked by
|
Identity Evidence Validation & Verification |
|
is blocked by
|
In-Person Validation & Verification |
|
is blocked by
|
Address Confirmation |
|
is blocked by
|
Role-Based Access Control (RBAC) |
|
is blocked by
|
Attribute-Based Access Control (ABAC) |
|
is blocked by
|
Real-Time Access Decisions |
|
is blocked by
|
Access Profile Rules |
|
is blocked by
|
Account Management |
|
is blocked by
|
Automated System Account Management (Directory Services) |
|
is blocked by
|
Authorized Accounts |
|
is blocked by
|
User & Service Account Inventories |
|
is blocked by
|
Disable Inactive Accounts |
|
is blocked by
|
Account Disabling for High Risk Individuals |
|
is blocked by
|
Automated Audit Actions |
|
is blocked by
|
Account Separation Between Infrastructure Environments |
|
is blocked by
|
System Account Reviews |
|
is blocked by
|
User Identity (ID) Management |
|
is blocked by
|
Pairwise Pseudonymous Identifiers (PPID) |
|
is blocked by
|
Authenticator Management |
|
is blocked by
|
Protection of Authenticators |
|
is blocked by
|
Biometric Authentication |
|
is blocked by
|
Access Enforcement |
|
is blocked by
|
Access To Sensitive / Regulated Data |
|
is blocked by
|
Database Access |
|
is blocked by
|
Least Privilege |
|
is blocked by
|
Prohibit Non-Privileged Users from Executing Privileged Functions |
|
is blocked by
|
Authorize Access to Security Functions |
|
is blocked by
|
Non-Privileged Access for Non-Security Functions |
|
is blocked by
|
Auditing Use of Privileged Functions |
|
is blocked by
|
Network Access to Privileged Commands |
|
is blocked by
|
Privilege Levels for Code Execution |
|
is blocked by
|
Permitted Actions Without Identification or Authorization |
|
is blocked by
|
Identification & Authentication for Organizational Users |
|
is blocked by
|
Out-of-Band Authentication (OOBA) |
|
is blocked by
|
Acceptance of PIV Credentials |
|
is blocked by
|
Identification & Authentication for Non-Organizational Users |
|
is blocked by
|
Acceptance of Third-Party Credentials |
|
is blocked by
|
Disassociability |
|
is blocked by
|
Access Control For Mobile Devices |
|
is blocked by
|
Replay-Resistant Multi-Factor Authentication (MFA) |
|
is blocked by
|
Phishing-Resistant Multi-Factor Authentication (MFA) |
|
is blocked by
|
Out-of-Band (OOB) Multi-Factor Authentication (MFA) |
|
is blocked by
|
Alternative Multi-Factor Authentication (MFA) |
|
is blocked by
|
Multi-Factor Authentication (MFA) For Network Access to Privileged Accounts |
|
is blocked by
|
Multi-Factor Authentication (MFA) For Network Access to Non-Privileged Accounts |
|
is blocked by
|
Multi-Factor Authentication (MFA) For Local Access to Privileged Accounts |
|
is blocked by
|
Cryptographic Module Authentication |
|
is blocked by
|
Hardware Security Modules (HSM) |
|
is blocked by
|
Single Sign-On (SSO) Transparent Authentication |
|
is blocked by
|
Adaptive Identification & Authentication |
|
is blocked by
|
Technology Use Restrictions |
|
is blocked by
|
Use of Critical Technologies |
|
is blocked by
|
Use of Mobile Devices |
|
is blocked by
|
Security-Minded Dress Code |
|
is blocked by
|
Access Agreements |
|
is blocked by
|
Confidentiality Agreements |
|
is blocked by
|
Onboarding, Transferring & Offboarding Personnel |
|
is blocked by
|
Formal Indoctrination |
|
is blocked by
|
Policy Familiarization & Acknowledgement |
|
is blocked by
|
Post-Employment Requirements Awareness |
|
is blocked by
|
Post-Employment Requirements Notification |
|
is blocked by
|
Probationary Periods |
|
is blocked by
|
Workplace Investigations |
|
is blocked by
|
Preventative Access Restriction |
|
is blocked by
|
Personnel Transfer |
|
is blocked by
|
Personnel Termination |
|
is blocked by
|
Asset Collection |
|
is blocked by
|
Identity & Access Management (IAM) |
|
is blocked by
|
Authenticate, Authorize and Audit (AAA) |
|
is blocked by
|
User Provisioning & De-Provisioning |
|
is blocked by
|
Change of Roles & Duties |
|
is blocked by
|
Termination of Employment |
|
is blocked by
|
Identity Proofing (Identity Verification) |
|
is blocked by
|
In-Person or Trusted Third-Party Registration |
|
is blocked by
|
Identity Evidence |
|
is blocked by
|
Identity Evidence Validation & Verification |
|
is blocked by
|
In-Person Validation & Verification |
|
is blocked by
|
Address Confirmation |
|
is blocked by
|
Role-Based Access Control (RBAC) |
|
is blocked by
|
Attribute-Based Access Control (ABAC) |
|
is blocked by
|
Real-Time Access Decisions |
|
is blocked by
|
Access Profile Rules |
|
is blocked by
|
Account Management |
|
is blocked by
|
Automated System Account Management (Directory Services) |
|
is blocked by
|
Authorized Accounts |
|
is blocked by
|
User & Service Account Inventories |
|
is blocked by
|
Disable Inactive Accounts |
|
is blocked by
|
Account Disabling for High Risk Individuals |
|
is blocked by
|
Automated Audit Actions |
|
is blocked by
|
Account Separation Between Infrastructure Environments |
|
is blocked by
|
Software Defined Storage (SDS) Data Access Control |
|
is blocked by
|
Sensitive / Regulated Data Access Enforcement |
|
is blocked by
|
Sensitive / Regulated Data Actions |
|
is blocked by
|
Automated Reporting |
|
is blocked by
|
Cyber Incident Reporting for Sensitive / Regulated Data |
|
is blocked by
|
Sensitive / Regulated Data Spill Response |
|
is blocked by
|
Sensitive / Regulated Data Spill Responsible Personnel |
|
is blocked by
|
Sensitive / Regulated Data Spill Training |
|
is blocked by
|
Post-Sensitive / Regulated Data Spill Operations |
|
is blocked by
|
Sensitive / Regulated Data Exposure to Unauthorized Personnel |
|
is blocked by
|
Data Breach |
|
is blocked by
|
Adequate Security for Sensitive / Regulated Data In Support of Contracts |
|
is blocked by
|
Prevent Unauthorized Removal |
|
is blocked by
|
Remote Maintenance Cryptographic Protection |
|
is blocked by
|
Maintenance Personnel Without Appropriate Access |
|
is blocked by
|
Off-Site Maintenance |
|
is blocked by
|
Mobile Device Management Policy |
|
is blocked by
|
Centralized Management Of Mobile Devices |
|
is blocked by
|
Restricting Access To Authorized Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Full Device & Container-Based Encryption |
|
is blocked by
|
Separate Mobile Device Profiles |
|
is blocked by
|
Personally-Owned Mobile Devices |
|
is blocked by
|
Organization-Owned Mobile Devices |
|
is blocked by
|
Mobile Device Geofencing |
|
is blocked by
|
Remote Purging |
|
is blocked by
|
Direct Internet Access Restrictions |
|
is blocked by
|
Prevent Unauthorized Exfiltration |
|
is blocked by
|
Network Processing Rules For Personal Data (PD) |
|
is blocked by
|
External System Connections |
|
is blocked by
|
Sensitive / Regulated Data Enclave (Secure Zone) |
|
is blocked by
|
Segregation From Enterprise Services |
|
is blocked by
|
Software Defined Storage (SDS) Data Access Control |
|
is blocked by
|
Sensitive / Regulated Data Access Enforcement |
|
is blocked by
|
Sensitive / Regulated Data Actions |
|
is blocked by
|
Automated Reporting |
|
is blocked by
|
Cyber Incident Reporting for Sensitive / Regulated Data |
|
is blocked by
|
Sensitive / Regulated Data Spill Response |
|
is blocked by
|
Sensitive / Regulated Data Spill Responsible Personnel |
|
is blocked by
|
Sensitive / Regulated Data Spill Training |
|
is blocked by
|
Post-Sensitive / Regulated Data Spill Operations |
|
is blocked by
|
Sensitive / Regulated Data Exposure to Unauthorized Personnel |
|
is blocked by
|
Data Breach |
|
is blocked by
|
Content Check for Encrypted Data |
|
is blocked by
|
Safeguarding Data Over Open Networks |
|
is blocked by
|
End-User Messaging Technologies |
|
is blocked by
|
Electronic Messaging |
|
is blocked by
|
Encryption for Outgoing Email |
|
is blocked by
|
Data Type Identifiers |
|
is blocked by
|
Decomposition Into Policy-Related Subcomponents |
|
is blocked by
|
Detection of Unsanctioned Information |
|
is blocked by
|
Cross Domain Content Transfer |
|
is blocked by
|
Object Security Attributes |
|
is blocked by
|
Embedded Data Types |
|
is blocked by
|
Metadata |
|
is blocked by
|
Metadata Validation |
|
is blocked by
|
Alternate Work Site |
|
is blocked by
|
Controlled Ingress & Egress Points |
|
is blocked by
|
Physical Access Logs |
|
is blocked by
|
Personnel Searches |
|
is blocked by
|
Working in Secure Areas |
|
is blocked by
|
On-Site Client Segregation |
|
is blocked by
|
Access To Critical Systems |
|
is blocked by
|
Monitoring Physical Access To Critical Systems |
|
is blocked by
|
Visitor Control |
|
is blocked by
|
Distinguish Visitors from On-Site Personnel |
|
is blocked by
|
Identification Requirement |
|
is blocked by
|
Restrict Unescorted Access |
|
is blocked by
|
Automated Records Management & Review |
|
is blocked by
|
Minimize Visitor Personal Data (PD) |
|
is blocked by
|
Access Control for Output Devices |
|
is blocked by
|
Component Marking |
|
is blocked by
|
Content Check for Encrypted Data |
|
is blocked by
|
Safeguarding Data Over Open Networks |
|
is blocked by
|
End-User Messaging Technologies |
|
is blocked by
|
Electronic Messaging |
|
is blocked by
|
Information Leakage Due To Electromagnetic Signals Emanations |
|
is blocked by
|
Data Privacy Policy |
|
is blocked by
|
Data Privacy Program |
|
is blocked by
|
Data Privacy Accountability Structure |
|
is blocked by
|
Chief Privacy Officer (CPO) |
|
is blocked by
|
Data Protection Officer (DPO) |
|
is blocked by
|
Personal Data Process Manager (PDPM) |
|
is blocked by
|
Data Fiduciary |
|
is blocked by
|
Privacy-Aware Design |
|
is blocked by
|
Documenting Data Processing Activities |
|
is blocked by
|
Personal Data (PD) Lineage |
|
is blocked by
|
Personal Data (PD) Categories |
|
is blocked by
|
Inventory of Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Inventory Automation Support |
|
is blocked by
|
Updating Personal Data (PD) Process |
|
is blocked by
|
Updating & Correcting Personal Data (PD) |
|
is blocked by
|
Flaw Remediation with Personal Data (PD) |
|
is blocked by
|
Reasonable Data Privacy Practices |
|
is blocked by
|
Security of Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Control Testing, Training & Monitoring |
|
is blocked by
|
Authority To Collect, Process, Store & Share Personal Data (PD) |
|
is blocked by
|
Product or Service Delivery Restrictions |
|
is blocked by
|
Data Privacy Requirements for Contractors & Service Providers |
|
is blocked by
|
Binding Corporate Rules (BCR) |
|
is blocked by
|
Information Sharing With Third Parties |
|
is blocked by
|
Limiting Personal Data (PD) Disclosures |
|
is blocked by
|
Accounting of Disclosures |
|
is blocked by
|
Notification of Disclosure Requests To Data Subject |
|
is blocked by
|
Disclosure Request Rejections |
|
is blocked by
|
Justification To Reject Disclosure Requests |
|
is blocked by
|
Financial Incentives For Personal Data (PD) |
|
is blocked by
|
Notice of Financial Incentive |
|
is blocked by
|
Dissemination of Data Privacy Program Information |
|
is blocked by
|
Privacy Act Statements |
|
is blocked by
|
Privacy Act Exemptions |
|
is blocked by
|
System of Records Notice (SORN) |
|
is blocked by
|
System of Records Notice (SORN) Review Process |
|
is blocked by
|
Computer Matching Agreements (CMA) |
|
is blocked by
|
Data Privacy Notice |
|
is blocked by
|
Privacy Notice Formatting |
|
is blocked by
|
Conspicuous Link To Data Privacy Notice |
|
is blocked by
|
Alternative Means To Deliver Privacy Notice |
|
is blocked by
|
Notice of Right To Limit |
|
is blocked by
|
Real-Time or Layered Notice |
|
is blocked by
|
Purpose Specification |
|
is blocked by
|
Purpose Compatibility |
|
is blocked by
|
Choice Architecture |
|
is blocked by
|
Symmetry In Choice |
|
is blocked by
|
Choice Architecture Testing |
|
is blocked by
|
Data Subject Consent |
|
is blocked by
|
Active Participation For Consent By Data Subjects |
|
is blocked by
|
Tailored Consent |
|
is blocked by
|
Revoke Consent |
|
is blocked by
|
Just-In-Time Notice & Updated Consent |
|
is blocked by
|
Prohibition of Selling, Processing and/or Sharing Personal Data (PD) |
|
is blocked by
|
Cookie Management |
|
is blocked by
|
Data Subject Right To Opt-Out |
|
is blocked by
|
Opt-Out Links |
|
is blocked by
|
Alternative Opt-Out Link |
|
is blocked by
|
Global Privacy Control (GPC) |
|
is blocked by
|
Data Subject Opt-In Consent |
|
is blocked by
|
Parent or Guardian Opt-In Consent For Minors |
|
is blocked by
|
Authorized Agent |
|
is blocked by
|
Usage Restrictions of Personal Data (PD) |
|
is blocked by
|
Continued Use of Personal Data (PD) |
|
is blocked by
|
Cease Processing, Storing and/or Sharing Personal Data (PD) |
|
is blocked by
|
Internal Use of Personal Data (PD) For Testing, Training and Research |
|
is blocked by
|
Personal Data (PD) Retention & Disposal |
|
is blocked by
|
Personal Data (PD) Formats |
|
is blocked by
|
Temporary Files Containing Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Collection Methods |
|
is blocked by
|
Restrict Collection, Processing & Sharing To Identified Purpose |
|
is blocked by
|
Primary Source Collection For Personal Data (PD) |
|
is blocked by
|
Identifiable Image Collection |
|
is blocked by
|
Acquired Personal Data (PD) |
|
is blocked by
|
Data Brokers |
|
is blocked by
|
Personal Data (PD) Accuracy & Integrity |
|
is blocked by
|
Validate Collected Personal Data (PD) |
|
is blocked by
|
Re-Validate Collected Personal Data (PD) |
|
is blocked by
|
Automated Decision-Making Technology (ADMT) |
|
is blocked by
|
Automated Decision-Making Technology (ADMT) For Data Subject Actions |
|
is blocked by
|
Automated Decision-Making Technology (ADMT) Use Notification |
|
is blocked by
|
Automated Decision-Making Technology (ADMT) Opt-Out Consent |
|
is blocked by
|
Automated Decision-Making Technology (ADMT) Transparency |
|
is blocked by
|
Data Subject Communications |
|
is blocked by
|
Communicating Processing Changes |
|
is blocked by
|
Data Subject Communications Documentation |
|
is blocked by
|
Data Subject Communications Metrics |
|
is blocked by
|
Data Subject Communications Disclosure |
|
is blocked by
|
Data Subject Authentication |
|
is blocked by
|
Data Subject Rights Management |
|
is blocked by
|
Data Subject Empowerment |
|
is blocked by
|
Enabling Data Subjects To Update Personal Data (PD) |
|
is blocked by
|
Correcting Inaccurate Personal Data (PD) |
|
is blocked by
|
Notice of Correction or Processing Change |
|
is blocked by
|
Appeal Adverse Decision |
|
is blocked by
|
Right to Erasure |
|
is blocked by
|
Data Portability |
|
is blocked by
|
Personal Data (PD) Exports |
|
is blocked by
|
Obligation To Inform Third-Parties |
|
is blocked by
|
Joint Processing of Personal Data (PD) |
|
is blocked by
|
Data Controller Communications |
|
is blocked by
|
Register As A Data Controller and/or Data Processor |
|
is blocked by
|
Harvest Now, Decrypt Later (HNDL) Mitigation |
|
is blocked by
|
Information Leakage Due To Electromagnetic Signals Emanations |
|
is blocked by
|
Data Privacy Policy |
|
is blocked by
|
Data Privacy Program |
|
is blocked by
|
Data Privacy Accountability Structure |
|
is blocked by
|
Chief Privacy Officer (CPO) |
|
is blocked by
|
Data Protection Officer (DPO) |
|
is blocked by
|
Personal Data Process Manager (PDPM) |
|
is blocked by
|
Data Fiduciary |
|
is blocked by
|
Privacy-Aware Design |
|
is blocked by
|
Documenting Data Processing Activities |
|
is blocked by
|
Personal Data (PD) Lineage |
|
is blocked by
|
Personal Data (PD) Categories |
|
is blocked by
|
Inventory of Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Inventory Automation Support |
|
is blocked by
|
Updating Personal Data (PD) Process |
|
is blocked by
|
Updating & Correcting Personal Data (PD) |
|
is blocked by
|
Flaw Remediation with Personal Data (PD) |
|
is blocked by
|
Reasonable Data Privacy Practices |
|
is blocked by
|
Security of Personal Data (PD) |
|
is blocked by
|
Personal Data (PD) Control Testing, Training & Monitoring |
|
is blocked by
|
Authority To Collect, Process, Store & Share Personal Data (PD) |
|
is blocked by
|
Product or Service Delivery Restrictions |
|
is blocked by
|
Data Privacy Requirements for Contractors & Service Providers |
|
is blocked by
|
Binding Corporate Rules (BCR) |
|
is blocked by
|
Information Sharing With Third Parties |
|
is blocked by
|
Limiting Personal Data (PD) Disclosures |
|
is blocked by
|
Accounting of Disclosures |
|
is blocked by
|
Notification of Disclosure Requests To Data Subject |
|
is blocked by
|
Disclosure Request Rejections |
|
is blocked by
|
Justification To Reject Disclosure Requests |
|
is blocked by
|
Financial Incentives For Personal Data (PD) |
|
is blocked by
|
Notice of Financial Incentive |
|
is blocked by
|
Dissemination of Data Privacy Program Information |
|
is blocked by
|
Privacy Act Statements |
|
is blocked by
|
Privacy Act Exemptions |
|
is blocked by
|
System of Records Notice (SORN) |
|
is blocked by
|
System of Records Notice (SORN) Review Process |
|
is blocked by
|
Computer Matching Agreements (CMA) |
|
is blocked by
|
Data Privacy Notice |
|
is blocked by
|
Privacy Notice Formatting |
|
is blocked by
|
Conspicuous Link To Data Privacy Notice |
|
is blocked by
|
Alternative Means To Deliver Privacy Notice |
|
is blocked by
|
Notice of Right To Limit |
|
is blocked by
|
Real-Time or Layered Notice |
|
is blocked by
|
Purpose Specification |
|
is blocked by
|
Purpose Compatibility |
|
is blocked by
|
Choice Architecture |
|
is blocked by
|
Symmetry In Choice |
|
is blocked by
|
Choice Architecture Testing |
|
is blocked by
|
Data Subject Consent |
|
is blocked by
|
Active Participation For Consent By Data Subjects |
|
is blocked by
|
Tailored Consent |
|
is blocked by
|
Revoke Consent |
|
is blocked by
|
Just-In-Time Notice & Updated Consent |
|
is blocked by
|
Prohibition of Selling, Processing and/or Sharing Personal Data (PD) |
|
is blocked by
|
Risk-Based Security Categorization |
|
is blocked by
|
Data Protection Impact Assessment (DPIA) |
|
is blocked by
|
Information In Shared Resources |
|
is blocked by
|
Non-Persistent Information |
|
is blocked by
|
System Use Notification (Logon Banner) |
|
is blocked by
|
Standardized Microsoft Windows Banner |
|
is blocked by
|
Shadow Information Technology Detection |
|
is blocked by
|
Security, Compliance & Resilience-Minded Workforce |
|
is blocked by
|
Security, Compliance & Resilience Awareness Training |
|
is blocked by
|
Role-Based Security, Compliance & Resilience Training |
|
is blocked by
|
Sensitive / Regulated Data Storage, Handling & Processing |
|
is blocked by
|
Product Conformity Governance |
|
is blocked by
|
Error Handling |
|
is blocked by
|
Designated Roles To View Error Messages |
|
is blocked by
|
Risk-Based Security Categorization |
|
is blocked by
|
Data Protection Impact Assessment (DPIA) |
|
is blocked by
|
Information In Shared Resources |
|
is blocked by
|
Non-Persistent Information |
|
is blocked by
|
Security, Compliance & Resilience Representatives For Product Changes |
|
is blocked by
|
Secure Migration Practices |
|
is blocked by
|
Use of Live Data |
|
is blocked by
|
Third-Party Services |
|
is blocked by
|
Third-Party Processing, Storage and Service Locations |
|
is blocked by
|
Third-Party Authentication Practices |
|
is blocked by
|
Third-Party Personnel Security |
|
is blocked by
|
Third-Party Contract Requirements |
|
is blocked by
|
Contract Flow-Down Requirements |
|
is blocked by
|
Review of Third-Party Services |
|
is blocked by
|
Ownership Change Provisions |
|
is blocked by
|
Security Compromise Notification Agreements |
|
is blocked by
|
Technology Assets, Applications, Services and Data (TAASD) Portability |
|
is blocked by
|
Technology Assets, Applications, Services and Data (TAASD) Disposition |
|
is blocked by
|
Third-Party Access Revocation |
|
is blocked by
|
Third-Party Exit Obligations Management |
|
is blocked by
|
Acceptable Discoverable Information |
|
is blocked by
|
Technical Surveillance Countermeasures Security |
|
is blocked by
|
Unauthorized Code On Web Pages |
|
is blocked by
|
Client-Facing Web Services |
|
is blocked by
|
Strong Customer Authentication (SCA) |
|
is blocked by
|
Web Application Input Validation & Sanitization |
|
is blocked by
|
Secure Web Traffic |
|
is blocked by
|
Web Application Output Encoding |
|
is blocked by
|
Web Browser Security |
|
is blocked by
|
Website Change Detection |
|
is blocked by
|
Publicly Accessible Content Reviews |
|
is blocked by
|
Security, Compliance & Resilience Representatives For Product Changes |
|
is blocked by
|
Secure Migration Practices |
|
is blocked by
|
Use of Live Data |
|
is blocked by
|
Third-Party Services |
|
is blocked by
|
Third-Party Processing, Storage and Service Locations |
|
is blocked by
|
Third-Party Authentication Practices |
|
is blocked by
|
Third-Party Personnel Security |
|
is blocked by
|
Third-Party Contract Requirements |
|
is blocked by
|
Security, Compliance & Resilience Representatives For Product Changes |
|
is blocked by
|
Secure Migration Practices |
|
is blocked by
|
Use of Live Data |
|
is blocked by
|
Third-Party Services |
|
is blocked by
|
Third-Party Processing, Storage and Service Locations |
|
is blocked by
|
Third-Party Authentication Practices |
|
is blocked by
|
Third-Party Personnel Security |
|
is blocked by
|
Third-Party Contract Requirements |