{"framework":{"id":"fips_140","name":"FIPS 140-3"},"data":[{"control_id":"AC-02","control_name":"Account Management","family":"AC","mappings":["FIPS 140-3 §7.4"]},{"control_id":"AC-04","control_name":"Information Flow Enforcement","family":"AC","mappings":["FIPS 140-3 §7.3"]},{"control_id":"AC-05","control_name":"Separation Of Duties","family":"AC","mappings":["FIPS 140-3 §7.4"]},{"control_id":"AC-06","control_name":"Least Privilege","family":"AC","mappings":["FIPS 140-3 §7.4"]},{"control_id":"AC-07","control_name":"Unsuccessful Login Attempts","family":"AC","mappings":["FIPS 140-3 §7.4"]},{"control_id":"CA-08","control_name":"Penetration Testing","family":"CA","mappings":["FIPS 140-3 §7.10"]},{"control_id":"CM-02","control_name":"Baseline Configuration","family":"CM","mappings":["FIPS 140-3 §7.6"]},{"control_id":"CM-03","control_name":"Configuration Change Control","family":"CM","mappings":["FIPS 140-3 §7.11"]},{"control_id":"CM-05","control_name":"Access Restrictions For Change","family":"CM","mappings":["FIPS 140-3 §7.11"]},{"control_id":"CM-06","control_name":"Configuration Settings","family":"CM","mappings":["FIPS 140-3 §7.2","FIPS 140-3 §7.6"]},{"control_id":"CM-07","control_name":"Least Functionality","family":"CM","mappings":["FIPS 140-3 §7.6"]},{"control_id":"CM-14","control_name":"Signed Components","family":"CM","mappings":["FIPS 140-3 §7.5"]},{"control_id":"IA-02","control_name":"User Identification And Authentication","family":"IA","mappings":["FIPS 140-3 §7.4"]},{"control_id":"IA-05","control_name":"Authenticator Management","family":"IA","mappings":["FIPS 140-3 §7.4","FIPS 140-3 §7.9"]},{"control_id":"IA-07","control_name":"Cryptographic Module Authentication","family":"IA","mappings":["FIPS 140-3 §7.4"]},{"control_id":"MP-06","control_name":"Media Sanitization And Disposal","family":"MP","mappings":["FIPS 140-3 §7.9"]},{"control_id":"PE-03","control_name":"Physical Access Control","family":"PE","mappings":["FIPS 140-3 §7.7"]},{"control_id":"PE-04","control_name":"Access Control For Transmission Medium","family":"PE","mappings":["FIPS 140-3 §7.7"]},{"control_id":"PE-05","control_name":"Access Control For Display Medium","family":"PE","mappings":["FIPS 140-3 §7.7"]},{"control_id":"PE-06","control_name":"Monitoring Physical Access","family":"PE","mappings":["FIPS 140-3 §7.7"]},{"control_id":"PE-19","control_name":"Information Leakage","family":"PE","mappings":["FIPS 140-3 §7.7","FIPS 140-3 §7.8"]},{"control_id":"PE-20","control_name":"Asset Monitoring and Tracking","family":"PE","mappings":["FIPS 140-3 §7.7"]},{"control_id":"RA-03","control_name":"Risk Assessment","family":"RA","mappings":["FIPS 140-3 §7.12","FIPS 140-3 §7.8"]},{"control_id":"RA-05","control_name":"Vulnerability Scanning","family":"RA","mappings":["FIPS 140-3 §7.12"]},{"control_id":"RA-07","control_name":"Risk Response","family":"RA","mappings":["FIPS 140-3 §7.12"]},{"control_id":"SA-03","control_name":"Life Cycle Support","family":"SA","mappings":["FIPS 140-3 §7.11"]},{"control_id":"SA-04","control_name":"Acquisitions","family":"SA","mappings":["FIPS 140-3 §7.11","FIPS 140-3 §7.2"]},{"control_id":"SA-08","control_name":"Security Engineering Principles","family":"SA","mappings":["FIPS 140-3 §7.2"]},{"control_id":"SA-10","control_name":"Developer Configuration Management","family":"SA","mappings":["FIPS 140-3 §7.11","FIPS 140-3 §7.5"]},{"control_id":"SA-11","control_name":"Developer Security Testing","family":"SA","mappings":["FIPS 140-3 §7.11","FIPS 140-3 §7.12","FIPS 140-3 §7.5"]},{"control_id":"SA-15","control_name":"Development Process, Standards, and Tools","family":"SA","mappings":["FIPS 140-3 §7.11"]},{"control_id":"SA-17","control_name":"Developer Security and Privacy Architecture and Design","family":"SA","mappings":["FIPS 140-3 §7.2"]},{"control_id":"SC-03","control_name":"Security Function Isolation","family":"SC","mappings":["FIPS 140-3 §7.3"]},{"control_id":"SC-07","control_name":"Boundary Protection","family":"SC","mappings":["FIPS 140-3 §7.3"]},{"control_id":"SC-12","control_name":"Cryptographic Key Establishment And Management","family":"SC","mappings":["FIPS 140-3 §7.9"]},{"control_id":"SC-13","control_name":"Use Of Cryptography","family":"SC","mappings":["FIPS 140-3 §7.2","FIPS 140-3 §7.3","FIPS 140-3 §7.9"]},{"control_id":"SC-17","control_name":"Public Key Infrastructure Certificates","family":"SC","mappings":["FIPS 140-3 §7.9"]},{"control_id":"SC-28","control_name":"Protection of Information at Rest","family":"SC","mappings":["FIPS 140-3 §7.8","FIPS 140-3 §7.9"]},{"control_id":"SC-34","control_name":"Non-modifiable Executable Programs","family":"SC","mappings":["FIPS 140-3 §7.5"]},{"control_id":"SC-39","control_name":"Process Isolation","family":"SC","mappings":["FIPS 140-3 §7.6"]},{"control_id":"SI-02","control_name":"Flaw Remediation","family":"SI","mappings":["FIPS 140-3 §7.12"]},{"control_id":"SI-03","control_name":"Malicious Code Protection","family":"SI","mappings":["FIPS 140-3 §7.6"]},{"control_id":"SI-06","control_name":"Security Functionality Verification","family":"SI","mappings":["FIPS 140-3 §7.10"]},{"control_id":"SI-07","control_name":"Software And Information Integrity","family":"SI","mappings":["FIPS 140-3 §7.10","FIPS 140-3 §7.5"]}],"pagination":{"page":1,"per_page":50,"total":44,"total_pages":1}}