{"framework":{"id":"apra_cps_234","name":"APRA CPS 234"},"data":[{"control_id":"AC-02","control_name":"Account Management","family":"AC","mappings":["Para 22-23"]},{"control_id":"AC-03","control_name":"Access Enforcement","family":"AC","mappings":["Para 22-23"]},{"control_id":"AC-06","control_name":"Least Privilege","family":"AC","mappings":["Para 22-23"]},{"control_id":"AC-17","control_name":"Remote Access","family":"AC","mappings":["Para 22-23"]},{"control_id":"AT-02","control_name":"Security Awareness","family":"AT","mappings":["Para 19-20"]},{"control_id":"AT-03","control_name":"Security Training","family":"AT","mappings":["Para 19-20"]},{"control_id":"AT-06","control_name":"Training Feedback","family":"AT","mappings":["Para 19-20"]},{"control_id":"AU-02","control_name":"Auditable Events","family":"AU","mappings":["Para 22-23"]},{"control_id":"AU-03","control_name":"Content Of Audit Records","family":"AU","mappings":["Para 22-23"]},{"control_id":"AU-06","control_name":"Audit Monitoring, Analysis, And Reporting","family":"AU","mappings":["Para 22-23"]},{"control_id":"AU-09","control_name":"Protection Of Audit Information","family":"AU","mappings":["Para 22-23"]},{"control_id":"AU-12","control_name":"Audit Record Generation","family":"AU","mappings":["Para 22-23"]},{"control_id":"CA-02","control_name":"Security Assessments","family":"CA","mappings":["Para 22-23","Para 24","Para 27-28"]},{"control_id":"CA-05","control_name":"Plan Of Action And Milestones","family":"CA","mappings":["Para 26"]},{"control_id":"CA-08","control_name":"Penetration Testing","family":"CA","mappings":["Para 22-23","Para 24"]},{"control_id":"CM-08","control_name":"Information System Component Inventory","family":"CM","mappings":["Para 21"]},{"control_id":"CM-12","control_name":"Information Location","family":"CM","mappings":["Para 21"]},{"control_id":"CM-13","control_name":"Data Action Mapping","family":"CM","mappings":["Para 21"]},{"control_id":"IR-06","control_name":"Incident Reporting","family":"IR","mappings":["Para 25","Para 26"]},{"control_id":"IR-09","control_name":"Information Spillage Response","family":"IR","mappings":["Para 25"]},{"control_id":"PL-01","control_name":"Security Planning Policy And Procedures","family":"PL","mappings":["Para 18"]},{"control_id":"PL-09","control_name":"Central Management","family":"PL","mappings":["Para 15"]},{"control_id":"PL-10","control_name":"Baseline Selection","family":"PL","mappings":["Para 15"]},{"control_id":"PM-01","control_name":"Information Security Program Plan","family":"PM","mappings":["Para 15","Para 16-17"]},{"control_id":"PM-02","control_name":"Information Security Program Leadership Role","family":"PM","mappings":["Para 16-17","Para 18"]},{"control_id":"PM-03","control_name":"Information Security and Privacy Resources","family":"PM","mappings":["Para 15","Para 19-20"]},{"control_id":"PM-04","control_name":"Plan of Action and Milestones Process","family":"PM","mappings":["Para 26"]},{"control_id":"PM-05","control_name":"System Inventory","family":"PM","mappings":["Para 21"]},{"control_id":"PM-06","control_name":"Measures of Performance","family":"PM","mappings":["Para 27-28"]},{"control_id":"PM-09","control_name":"Risk Management Strategy","family":"PM","mappings":["Para 15"]},{"control_id":"PM-13","control_name":"Security and Privacy Workforce","family":"PM","mappings":["Para 15","Para 19-20"]},{"control_id":"PS-01","control_name":"Personnel Security Policy And Procedures","family":"PS","mappings":["Para 18"]},{"control_id":"PS-02","control_name":"Position Categorization","family":"PS","mappings":["Para 18"]},{"control_id":"PS-09","control_name":"Position Descriptions","family":"PS","mappings":["Para 16-17","Para 18"]},{"control_id":"RA-02","control_name":"Security Categorization","family":"RA","mappings":["Para 21"]},{"control_id":"RA-05","control_name":"Vulnerability Scanning","family":"RA","mappings":["Para 19-20"]},{"control_id":"RA-07","control_name":"Risk Response","family":"RA","mappings":["Para 15","Para 19-20","Para 26"]},{"control_id":"SA-04","control_name":"Acquisitions","family":"SA","mappings":["Para 29-33"]},{"control_id":"SA-09","control_name":"External Information System Services","family":"SA","mappings":["Para 29-33"]},{"control_id":"SA-21","control_name":"Developer Screening","family":"SA","mappings":["Para 29-33"]},{"control_id":"SC-07","control_name":"Boundary Protection","family":"SC","mappings":["Para 22-23"]},{"control_id":"SC-08","control_name":"Transmission Integrity","family":"SC","mappings":["Para 22-23"]},{"control_id":"SC-12","control_name":"Cryptographic Key Establishment And Management","family":"SC","mappings":["Para 22-23"]},{"control_id":"SC-13","control_name":"Use Of Cryptography","family":"SC","mappings":["Para 22-23"]},{"control_id":"SC-28","control_name":"Protection of Information at Rest","family":"SC","mappings":["Para 22-23"]},{"control_id":"SC-45","control_name":"System Time Synchronization","family":"SC","mappings":["Para 22-23"]},{"control_id":"SI-02","control_name":"Flaw Remediation","family":"SI","mappings":["Para 19-20","Para 22-23"]},{"control_id":"SI-03","control_name":"Malicious Code Protection","family":"SI","mappings":["Para 22-23"]},{"control_id":"SI-04","control_name":"Information System Monitoring Tools And Techniques","family":"SI","mappings":["Para 22-23"]},{"control_id":"SI-07","control_name":"Software And Information Integrity","family":"SI","mappings":["Para 22-23"]}],"pagination":{"page":1,"per_page":50,"total":54,"total_pages":2}}