{"framework":{"id":"nist_ai_rmf_1","name":"NIST AI RMF 1.0"},"data":[{"control_id":"AC-04","control_name":"Information Flow Enforcement","family":"AC","mappings":["MAP 3.5"]},{"control_id":"AC-05","control_name":"Separation of Duties","family":"AC","mappings":["GOVERN 3.2"]},{"control_id":"AT-02","control_name":"Literacy Training and Awareness","family":"AT","mappings":["GOVERN 2.2","GOVERN 4.1"]},{"control_id":"AT-03","control_name":"Role-based Training","family":"AT","mappings":["GOVERN 2.2","MAP 3.4"]},{"control_id":"AT-04","control_name":"Training Records","family":"AT","mappings":["MAP 3.4"]},{"control_id":"AT-06","control_name":"Training Feedback","family":"AT","mappings":["MAP 3.4"]},{"control_id":"AU-02","control_name":"Event Logging","family":"AU","mappings":["MEASURE 2.8"]},{"control_id":"AU-06","control_name":"Audit Record Review, Analysis, and Reporting","family":"AU","mappings":["MEASURE 2.4"]},{"control_id":"CA-02","control_name":"Control Assessments","family":"CA","mappings":["MAP 2.3","MEASURE 1.2","MEASURE 1.3","MEASURE 2.1","MEASURE 2.3","MEASURE 2.7","MEASURE 4.1","MEASURE 4.2"]},{"control_id":"CA-05","control_name":"Plan of Action and Milestones","family":"CA","mappings":["MANAGE 1.2","MANAGE 1.3","MANAGE 1.4"]},{"control_id":"CA-06","control_name":"Authorization","family":"CA","mappings":["GOVERN 2.3","MEASURE 2.6","MANAGE 1.1","MANAGE 1.3","MANAGE 1.4"]},{"control_id":"CA-07","control_name":"Continuous Monitoring","family":"CA","mappings":["GOVERN 1.5","MEASURE 1.1","MEASURE 1.2","MEASURE 1.3","MEASURE 2.4","MEASURE 3.1","MEASURE 4.1","MEASURE 4.2","MEASURE 4.3","MANAGE 4.1"]},{"control_id":"CA-08","control_name":"Penetration Testing","family":"CA","mappings":["GOVERN 4.3","MEASURE 1.3","MEASURE 2.7"]},{"control_id":"CM-03","control_name":"Configuration Change Control","family":"CM","mappings":["GOVERN 5.2","MANAGE 4.1"]},{"control_id":"CM-04","control_name":"Impact Analyses","family":"CM","mappings":["GOVERN 4.2"]},{"control_id":"CM-07","control_name":"Least Functionality","family":"CM","mappings":["MAP 3.3"]},{"control_id":"CM-08","control_name":"System Component Inventory","family":"CM","mappings":["GOVERN 1.6"]},{"control_id":"CM-10","control_name":"Software Usage Restrictions","family":"CM","mappings":["GOVERN 1.1","GOVERN 6.1","MAP 4.1"]},{"control_id":"CP-02","control_name":"Contingency Plan","family":"CP","mappings":["GOVERN 6.2"]},{"control_id":"CP-04","control_name":"Contingency Plan Testing","family":"CP","mappings":["MEASURE 2.7"]},{"control_id":"CP-10","control_name":"System Recovery and Reconstitution","family":"CP","mappings":["MANAGE 2.3","MANAGE 4.1","MANAGE 4.3"]},{"control_id":"CP-12","control_name":"Safe Mode","family":"CP","mappings":["MEASURE 2.6","MANAGE 2.4"]},{"control_id":"IR-04","control_name":"Incident Handling","family":"IR","mappings":["GOVERN 4.3","GOVERN 6.2","MANAGE 2.3","MANAGE 2.4","MANAGE 4.1","MANAGE 4.2","MANAGE 4.3"]},{"control_id":"IR-05","control_name":"Incident Monitoring","family":"IR","mappings":["MANAGE 4.3"]},{"control_id":"IR-06","control_name":"Incident Reporting","family":"IR","mappings":["GOVERN 4.3","MANAGE 4.3"]},{"control_id":"IR-08","control_name":"Incident Response Plan","family":"IR","mappings":["MANAGE 2.3","MANAGE 4.3"]},{"control_id":"MA-02","control_name":"Controlled Maintenance","family":"MA","mappings":["MANAGE 2.2"]},{"control_id":"MA-06","control_name":"Timely Maintenance","family":"MA","mappings":["MANAGE 2.2"]},{"control_id":"MP-06","control_name":"Media Sanitization","family":"MP","mappings":["GOVERN 1.7"]},{"control_id":"PL-02","control_name":"System Security and Privacy Plans","family":"PL","mappings":["GOVERN 2.1","MAP 1.1","MAP 1.3","MAP 1.4","MAP 2.1","MAP 3.3","MAP 4.2","MEASURE 2.10"]},{"control_id":"PL-04","control_name":"Rules of Behavior","family":"PL","mappings":["GOVERN 3.2","MAP 2.2"]},{"control_id":"PL-07","control_name":"Concept of Operations","family":"PL","mappings":["MAP 1.1","MAP 1.4","MAP 2.1","MAP 3.3"]},{"control_id":"PL-08","control_name":"Security and Privacy Architectures","family":"PL","mappings":["MAP 1.6"]},{"control_id":"PL-10","control_name":"Baseline Selection","family":"PL","mappings":["GOVERN 1.3"]},{"control_id":"PL-11","control_name":"Baseline Tailoring","family":"PL","mappings":["GOVERN 1.3"]},{"control_id":"PM-01","control_name":"Information Security Program Plan","family":"PM","mappings":["GOVERN 1.2"]},{"control_id":"PM-03","control_name":"Information Security and Privacy Resources","family":"PM","mappings":["MANAGE 2.1"]},{"control_id":"PM-04","control_name":"Plan of Action and Milestones Process","family":"PM","mappings":["MANAGE 1.2","MANAGE 1.3"]},{"control_id":"PM-05","control_name":"System Inventory","family":"PM","mappings":["GOVERN 1.6"]},{"control_id":"PM-06","control_name":"Measures of Performance","family":"PM","mappings":["MEASURE 1.1","MEASURE 4.3"]},{"control_id":"PM-09","control_name":"Risk Management Strategy","family":"PM","mappings":["GOVERN 1.3","GOVERN 1.4","GOVERN 1.5","MANAGE 1.3"]},{"control_id":"PM-10","control_name":"Authorization Process","family":"PM","mappings":["GOVERN 1.4","GOVERN 1.5","GOVERN 2.1"]},{"control_id":"PM-11","control_name":"Mission and Business Process Definition","family":"PM","mappings":["MAP 1.1","MAP 1.3","MAP 1.4"]},{"control_id":"PM-13","control_name":"Security and Privacy Workforce","family":"PM","mappings":["GOVERN 2.2","MAP 3.4"]},{"control_id":"PM-14","control_name":"Testing, Training, and Monitoring","family":"PM","mappings":["GOVERN 1.5","GOVERN 4.3","MEASURE 2.13"]},{"control_id":"PM-15","control_name":"Security and Privacy Groups and Associations","family":"PM","mappings":["GOVERN 4.3"]},{"control_id":"PM-16","control_name":"Threat Awareness Program","family":"PM","mappings":["GOVERN 4.3"]},{"control_id":"PM-18","control_name":"Privacy Program Plan","family":"PM","mappings":["GOVERN 1.2"]},{"control_id":"PM-19","control_name":"Privacy Program Leadership Role","family":"PM","mappings":["GOVERN 2.3"]},{"control_id":"PM-20","control_name":"Dissemination of Privacy Program Information","family":"PM","mappings":["GOVERN 5.1","MAP 5.2"]}],"pagination":{"page":1,"per_page":50,"total":100,"total_pages":2}}