{"framework":{"id":"pci_hsm","name":"PCI HSM"},"data":[{"control_id":"AC-01","control_name":"Access Control Policies and Procedures","family":"AC","mappings":["1"]},{"control_id":"AC-03","control_name":"Access Enforcement","family":"AC","mappings":["4","8"]},{"control_id":"AC-04","control_name":"Information Flow Enforcement","family":"AC","mappings":["3"]},{"control_id":"AC-05","control_name":"Separation Of Duties","family":"AC","mappings":["1","5","6"]},{"control_id":"AC-06","control_name":"Least Privilege","family":"AC","mappings":["1","4","5","8"]},{"control_id":"AC-17","control_name":"Remote Access","family":"AC","mappings":["3"]},{"control_id":"AU-01","control_name":"Audit And Accountability Policy And Procedures","family":"AU","mappings":["10"]},{"control_id":"AU-02","control_name":"Auditable Events","family":"AU","mappings":["6","8"]},{"control_id":"AU-03","control_name":"Content Of Audit Records","family":"AU","mappings":["8"]},{"control_id":"AU-06","control_name":"Audit Monitoring, Analysis, And Reporting","family":"AU","mappings":["10","8"]},{"control_id":"AU-11","control_name":"Audit Record Retention","family":"AU","mappings":["10"]},{"control_id":"AU-12","control_name":"Audit Record Generation","family":"AU","mappings":["6","8"]},{"control_id":"CA-02","control_name":"Security Assessments","family":"CA","mappings":["10"]},{"control_id":"CA-05","control_name":"Plan Of Action And Milestones","family":"CA","mappings":["10"]},{"control_id":"CA-07","control_name":"Continuous Monitoring","family":"CA","mappings":["10"]},{"control_id":"CM-02","control_name":"Baseline Configuration","family":"CM","mappings":["8"]},{"control_id":"CM-03","control_name":"Configuration Change Control","family":"CM","mappings":["4","5","8","9"]},{"control_id":"CM-05","control_name":"Access Restrictions For Change","family":"CM","mappings":["4"]},{"control_id":"CM-06","control_name":"Configuration Settings","family":"CM","mappings":["8"]},{"control_id":"CM-08","control_name":"Information System Component Inventory","family":"CM","mappings":["2"]},{"control_id":"IA-05","control_name":"Authenticator Management","family":"IA","mappings":["9"]},{"control_id":"IA-08","control_name":"Identification and Authentication (Non-Organizational Users)","family":"IA","mappings":["9"]},{"control_id":"IR-01","control_name":"Incident Response Policy And Procedures","family":"IR","mappings":["10"]},{"control_id":"IR-04","control_name":"Incident Handling","family":"IR","mappings":["10"]},{"control_id":"IR-06","control_name":"Incident Reporting","family":"IR","mappings":["10"]},{"control_id":"MP-04","control_name":"Media Storage","family":"MP","mappings":["5"]},{"control_id":"MP-06","control_name":"Media Sanitization And Disposal","family":"MP","mappings":["5"]},{"control_id":"PE-01","control_name":"Physical And Environmental Protection Policy And Procedures","family":"PE","mappings":["7"]},{"control_id":"PE-02","control_name":"Physical Access Authorizations","family":"PE","mappings":["6"]},{"control_id":"PE-03","control_name":"Physical Access Control","family":"PE","mappings":["2","6","7"]},{"control_id":"PE-04","control_name":"Access Control For Transmission Medium","family":"PE","mappings":["7"]},{"control_id":"PE-05","control_name":"Access Control For Display Medium","family":"PE","mappings":["7"]},{"control_id":"PE-06","control_name":"Monitoring Physical Access","family":"PE","mappings":["6","7"]},{"control_id":"PE-09","control_name":"Power Equipment And Power Cabling","family":"PE","mappings":["7"]},{"control_id":"PE-13","control_name":"Fire Protection","family":"PE","mappings":["7"]},{"control_id":"PE-15","control_name":"Water Damage Protection","family":"PE","mappings":["7"]},{"control_id":"PE-18","control_name":"Location Of Information System Components","family":"PE","mappings":["7"]},{"control_id":"PL-01","control_name":"Security Planning Policy And Procedures","family":"PL","mappings":["1"]},{"control_id":"PL-02","control_name":"System Security Plan","family":"PL","mappings":["1"]},{"control_id":"PM-01","control_name":"Information Security Program Plan","family":"PM","mappings":["1"]},{"control_id":"PM-02","control_name":"Information Security Program Leadership Role","family":"PM","mappings":["1"]},{"control_id":"PM-06","control_name":"Measures of Performance","family":"PM","mappings":["10"]},{"control_id":"PS-01","control_name":"Personnel Security Policy And Procedures","family":"PS","mappings":["1"]},{"control_id":"PS-02","control_name":"Position Categorization","family":"PS","mappings":["1"]},{"control_id":"PS-06","control_name":"Access Agreements","family":"PS","mappings":["1","5","6"]},{"control_id":"PS-07","control_name":"Third-Party Personnel Security","family":"PS","mappings":["6"]},{"control_id":"SA-04","control_name":"Acquisitions","family":"SA","mappings":["2"]},{"control_id":"SC-08","control_name":"Transmission Integrity","family":"SC","mappings":["3"]},{"control_id":"SC-12","control_name":"Cryptographic Key Establishment And Management","family":"SC","mappings":["3","4","5","6","9"]},{"control_id":"SC-13","control_name":"Use Of Cryptography","family":"SC","mappings":["3","4","5","9"]}],"pagination":{"page":1,"per_page":50,"total":56,"total_pages":2}}