{"framework":{"id":"awia","name":"AWIA"},"data":[{"control_id":"AC-02","control_name":"Account Management","family":"AC","mappings":["AWWA Sec 3"]},{"control_id":"AC-03","control_name":"Access Enforcement","family":"AC","mappings":["AWWA Sec 3"]},{"control_id":"AC-04","control_name":"Information Flow Enforcement","family":"AC","mappings":["AWWA Sec 4"]},{"control_id":"AC-06","control_name":"Least Privilege","family":"AC","mappings":["AWWA Sec 3"]},{"control_id":"AC-07","control_name":"Unsuccessful Login Attempts","family":"AC","mappings":["AWWA Sec 3"]},{"control_id":"AC-17","control_name":"Remote Access","family":"AC","mappings":["AWWA Sec 3"]},{"control_id":"AT-01","control_name":"Security Awareness And Training Policy And Procedures","family":"AT","mappings":["AWWA Sec 8"]},{"control_id":"AT-02","control_name":"Security Awareness","family":"AT","mappings":["AWWA Sec 8"]},{"control_id":"AT-03","control_name":"Security Training","family":"AT","mappings":["AWWA Sec 8"]},{"control_id":"AU-02","control_name":"Auditable Events","family":"AU","mappings":["AWWA Sec 5"]},{"control_id":"AU-06","control_name":"Audit Monitoring, Analysis, And Reporting","family":"AU","mappings":["AWWA Sec 5"]},{"control_id":"CA-07","control_name":"Continuous Monitoring","family":"CA","mappings":["AWWA Sec 4","AWWA Sec 5"]},{"control_id":"CM-02","control_name":"Baseline Configuration","family":"CM","mappings":["AWWA Sec 2"]},{"control_id":"CM-08","control_name":"Information System Component Inventory","family":"CM","mappings":["AWWA Sec 2"]},{"control_id":"CP-01","control_name":"Contingency Planning Policy And Procedures","family":"CP","mappings":["Sec 2013(b)"]},{"control_id":"CP-02","control_name":"Contingency Plan","family":"CP","mappings":["Sec 2013(b)"]},{"control_id":"CP-04","control_name":"Contingency Plan Testing And Exercises","family":"CP","mappings":["Sec 2013(b)"]},{"control_id":"IA-02","control_name":"User Identification And Authentication","family":"IA","mappings":["AWWA Sec 3"]},{"control_id":"IA-05","control_name":"Authenticator Management","family":"IA","mappings":["AWWA Sec 3"]},{"control_id":"IR-01","control_name":"Incident Response Policy And Procedures","family":"IR","mappings":["Sec 2013(b)","AWWA Sec 6"]},{"control_id":"IR-02","control_name":"Incident Response Training","family":"IR","mappings":["Sec 2013(b)","AWWA Sec 6"]},{"control_id":"IR-04","control_name":"Incident Handling","family":"IR","mappings":["Sec 2013(b)","AWWA Sec 6"]},{"control_id":"IR-05","control_name":"Incident Monitoring","family":"IR","mappings":["AWWA Sec 5","AWWA Sec 6"]},{"control_id":"IR-06","control_name":"Incident Reporting","family":"IR","mappings":["AWWA Sec 6"]},{"control_id":"IR-08","control_name":"Incident Response Plan","family":"IR","mappings":["Sec 2013(b)","AWWA Sec 6"]},{"control_id":"PE-02","control_name":"Physical Access Authorizations","family":"PE","mappings":["AWWA Sec 3"]},{"control_id":"PE-03","control_name":"Physical Access Control","family":"PE","mappings":["AWWA Sec 3"]},{"control_id":"PL-01","control_name":"Security Planning Policy And Procedures","family":"PL","mappings":["AWWA Sec 1"]},{"control_id":"PL-02","control_name":"System Security Plan","family":"PL","mappings":["AWWA Sec 1"]},{"control_id":"PM-01","control_name":"Information Security Program Plan","family":"PM","mappings":["AWWA Sec 1"]},{"control_id":"PM-02","control_name":"Information Security Program Leadership Role","family":"PM","mappings":["AWWA Sec 1"]},{"control_id":"PM-03","control_name":"Information Security and Privacy Resources","family":"PM","mappings":["AWWA Sec 1"]},{"control_id":"PM-05","control_name":"System Inventory","family":"PM","mappings":["AWWA Sec 2"]},{"control_id":"PM-06","control_name":"Measures of Performance","family":"PM","mappings":["AWWA Sec 1"]},{"control_id":"PM-09","control_name":"Risk Management Strategy","family":"PM","mappings":["Sec 2013(a)","AWWA Sec 1"]},{"control_id":"PM-11","control_name":"Mission and Business Process Definition","family":"PM","mappings":["Sec 2013(a)"]},{"control_id":"PM-13","control_name":"Security and Privacy Workforce","family":"PM","mappings":["AWWA Sec 8"]},{"control_id":"PS-01","control_name":"Personnel Security Policy And Procedures","family":"PS","mappings":["AWWA Sec 8"]},{"control_id":"PS-02","control_name":"Position Categorization","family":"PS","mappings":["AWWA Sec 8"]},{"control_id":"PS-03","control_name":"Personnel Screening","family":"PS","mappings":["AWWA Sec 8"]},{"control_id":"PS-06","control_name":"Access Agreements","family":"PS","mappings":["AWWA Sec 8"]},{"control_id":"RA-01","control_name":"Risk Assessment Policy And Procedures","family":"RA","mappings":["Sec 2013(a)"]},{"control_id":"RA-02","control_name":"Security Categorization","family":"RA","mappings":["Sec 2013(a)","AWWA Sec 2"]},{"control_id":"RA-03","control_name":"Risk Assessment","family":"RA","mappings":["Sec 2013(a)"]},{"control_id":"RA-05","control_name":"Vulnerability Scanning","family":"RA","mappings":["Sec 2013(a)"]},{"control_id":"RA-07","control_name":"Risk Response","family":"RA","mappings":["Sec 2013(a)"]},{"control_id":"RA-09","control_name":"Criticality Analysis","family":"RA","mappings":["Sec 2013(a)"]},{"control_id":"SA-04","control_name":"Acquisitions","family":"SA","mappings":["AWWA Sec 7"]},{"control_id":"SA-09","control_name":"External Information System Services","family":"SA","mappings":["AWWA Sec 7"]},{"control_id":"SC-07","control_name":"Boundary Protection","family":"SC","mappings":["AWWA Sec 4"]}],"pagination":{"page":1,"per_page":50,"total":58,"total_pages":2}}