{"framework":{"id":"cbest","name":"CBEST"},"data":[{"control_id":"AC-03","control_name":"Access Enforcement","family":"AC","mappings":["CBEST.9"]},{"control_id":"AT-06","control_name":"Training Feedback","family":"AT","mappings":["CBEST.10"]},{"control_id":"AU-06","control_name":"Audit Monitoring, Analysis, And Reporting","family":"AU","mappings":["CBEST.5"]},{"control_id":"AU-13","control_name":"Monitoring for Information Disclosure","family":"AU","mappings":["CBEST.5"]},{"control_id":"CA-01","control_name":"Certification, Accreditation, And Security Assessment Policies And Procedures","family":"CA","mappings":["CBEST.1"]},{"control_id":"CA-02","control_name":"Security Assessments","family":"CA","mappings":["CBEST.10","CBEST.7"]},{"control_id":"CA-05","control_name":"Plan Of Action And Milestones","family":"CA","mappings":["CBEST.10","CBEST.6","CBEST.7"]},{"control_id":"CA-06","control_name":"Security Accreditation","family":"CA","mappings":["CBEST.1"]},{"control_id":"CA-07","control_name":"Continuous Monitoring","family":"CA","mappings":["CBEST.10","CBEST.5","CBEST.7"]},{"control_id":"CA-08","control_name":"Penetration Testing","family":"CA","mappings":["CBEST.3","CBEST.4"]},{"control_id":"CM-08","control_name":"Information System Component Inventory","family":"CM","mappings":["CBEST.3"]},{"control_id":"CM-12","control_name":"Information Location","family":"CM","mappings":["CBEST.3"]},{"control_id":"IR-03","control_name":"Incident Response Testing And Exercises","family":"IR","mappings":["CBEST.10"]},{"control_id":"IR-04","control_name":"Incident Handling","family":"IR","mappings":["CBEST.5"]},{"control_id":"IR-05","control_name":"Incident Monitoring","family":"IR","mappings":["CBEST.5"]},{"control_id":"MP-01","control_name":"Media Protection Policy And Procedures","family":"MP","mappings":["CBEST.9"]},{"control_id":"MP-04","control_name":"Media Storage","family":"MP","mappings":["CBEST.9"]},{"control_id":"MP-05","control_name":"Media Transport","family":"MP","mappings":["CBEST.9"]},{"control_id":"MP-06","control_name":"Media Sanitization And Disposal","family":"MP","mappings":["CBEST.9"]},{"control_id":"PL-01","control_name":"Security Planning Policy And Procedures","family":"PL","mappings":["CBEST.1"]},{"control_id":"PL-02","control_name":"System Security Plan","family":"PL","mappings":["CBEST.1"]},{"control_id":"PM-01","control_name":"Information Security Program Plan","family":"PM","mappings":["CBEST.1"]},{"control_id":"PM-02","control_name":"Information Security Program Leadership Role","family":"PM","mappings":["CBEST.1"]},{"control_id":"PM-04","control_name":"Plan of Action and Milestones Process","family":"PM","mappings":["CBEST.6"]},{"control_id":"PM-06","control_name":"Measures of Performance","family":"PM","mappings":["CBEST.10","CBEST.7"]},{"control_id":"PM-08","control_name":"Critical Infrastructure Plan","family":"PM","mappings":["CBEST.3"]},{"control_id":"PM-09","control_name":"Risk Management Strategy","family":"PM","mappings":["CBEST.1"]},{"control_id":"PM-11","control_name":"Mission and Business Process Definition","family":"PM","mappings":["CBEST.3"]},{"control_id":"PM-14","control_name":"Testing, Training, and Monitoring","family":"PM","mappings":["CBEST.1","CBEST.10","CBEST.5","CBEST.7"]},{"control_id":"PM-15","control_name":"Security and Privacy Groups and Associations","family":"PM","mappings":["CBEST.2"]},{"control_id":"PM-16","control_name":"Threat Awareness Program","family":"PM","mappings":["CBEST.2"]},{"control_id":"PM-29","control_name":"Risk Management Program Leadership Roles","family":"PM","mappings":["CBEST.1"]},{"control_id":"PM-31","control_name":"Continuous Monitoring Strategy","family":"PM","mappings":["CBEST.10","CBEST.6"]},{"control_id":"PS-03","control_name":"Personnel Screening","family":"PS","mappings":["CBEST.8"]},{"control_id":"PS-07","control_name":"Third-Party Personnel Security","family":"PS","mappings":["CBEST.8"]},{"control_id":"PT-01","control_name":"Policy and Procedures","family":"PT","mappings":["CBEST.9"]},{"control_id":"PT-02","control_name":"Authority to Process Personally Identifiable Information","family":"PT","mappings":["CBEST.9"]},{"control_id":"RA-02","control_name":"Security Categorization","family":"RA","mappings":["CBEST.3"]},{"control_id":"RA-03","control_name":"Risk Assessment","family":"RA","mappings":["CBEST.2"]},{"control_id":"RA-05","control_name":"Vulnerability Scanning","family":"RA","mappings":["CBEST.2","CBEST.6"]},{"control_id":"RA-06","control_name":"Technical Surveillance Countermeasures Survey","family":"RA","mappings":["CBEST.4"]},{"control_id":"RA-07","control_name":"Risk Response","family":"RA","mappings":["CBEST.6"]},{"control_id":"RA-09","control_name":"Criticality Analysis","family":"RA","mappings":["CBEST.3"]},{"control_id":"RA-10","control_name":"Threat Hunting","family":"RA","mappings":["CBEST.2","CBEST.4"]},{"control_id":"SA-04","control_name":"Acquisitions","family":"SA","mappings":["CBEST.8"]},{"control_id":"SA-09","control_name":"External Information System Services","family":"SA","mappings":["CBEST.8"]},{"control_id":"SA-21","control_name":"Developer Screening","family":"SA","mappings":["CBEST.8"]},{"control_id":"SC-07","control_name":"Boundary Protection","family":"SC","mappings":["CBEST.5"]},{"control_id":"SC-08","control_name":"Transmission Integrity","family":"SC","mappings":["CBEST.9"]},{"control_id":"SC-12","control_name":"Cryptographic Key Establishment And Management","family":"SC","mappings":["CBEST.9"]}],"pagination":{"page":1,"per_page":50,"total":59,"total_pages":2}}