{"framework":{"id":"tiber_eu","name":"TIBER-EU"},"data":[{"control_id":"AC-01","control_name":"Access Control Policies and Procedures","family":"AC","mappings":["TIBER.CONF"]},{"control_id":"AC-03","control_name":"Access Enforcement","family":"AC","mappings":["TIBER.CONF"]},{"control_id":"AC-06","control_name":"Least Privilege","family":"AC","mappings":["TIBER.CONF"]},{"control_id":"AU-02","control_name":"Auditable Events","family":"AU","mappings":["TIBER.BT"]},{"control_id":"AU-06","control_name":"Audit Monitoring, Analysis, And Reporting","family":"AU","mappings":["TIBER.BT"]},{"control_id":"AU-12","control_name":"Audit Record Generation","family":"AU","mappings":["TIBER.BT"]},{"control_id":"AU-14","control_name":"Session Audit","family":"AU","mappings":["TIBER.BT"]},{"control_id":"CA-02","control_name":"Security Assessments","family":"CA","mappings":["TIBER.CLOSE","TIBER.REM"]},{"control_id":"CA-05","control_name":"Plan Of Action And Milestones","family":"CA","mappings":["TIBER.CLOSE","TIBER.REM"]},{"control_id":"CA-07","control_name":"Continuous Monitoring","family":"CA","mappings":["TIBER.BT","TIBER.REM"]},{"control_id":"CA-08","control_name":"Penetration Testing","family":"CA","mappings":["TIBER.PREP","TIBER.RT"]},{"control_id":"IR-01","control_name":"Incident Response Policy And Procedures","family":"IR","mappings":["TIBER.BT"]},{"control_id":"IR-02","control_name":"Incident Response Training","family":"IR","mappings":["TIBER.BT"]},{"control_id":"IR-03","control_name":"Incident Response Testing And Exercises","family":"IR","mappings":["TIBER.BT","TIBER.CLOSE"]},{"control_id":"IR-04","control_name":"Incident Handling","family":"IR","mappings":["TIBER.BT","TIBER.CLOSE"]},{"control_id":"IR-05","control_name":"Incident Monitoring","family":"IR","mappings":["TIBER.BT","TIBER.CLOSE"]},{"control_id":"IR-06","control_name":"Incident Reporting","family":"IR","mappings":["TIBER.BT"]},{"control_id":"IR-07","control_name":"Incident Response Assistance","family":"IR","mappings":["TIBER.BT"]},{"control_id":"IR-08","control_name":"Incident Response Plan","family":"IR","mappings":["TIBER.BT"]},{"control_id":"MP-01","control_name":"Media Protection Policy And Procedures","family":"MP","mappings":["TIBER.CONF"]},{"control_id":"MP-06","control_name":"Media Sanitization And Disposal","family":"MP","mappings":["TIBER.CONF"]},{"control_id":"PE-03","control_name":"Physical Access Control","family":"PE","mappings":["TIBER.CONF"]},{"control_id":"PL-01","control_name":"Security Planning Policy And Procedures","family":"PL","mappings":["TIBER.PREP"]},{"control_id":"PL-02","control_name":"System Security Plan","family":"PL","mappings":["TIBER.PREP"]},{"control_id":"PL-04","control_name":"Rules Of Behavior","family":"PL","mappings":["TIBER.CONF","TIBER.PREP"]},{"control_id":"PM-01","control_name":"Information Security Program Plan","family":"PM","mappings":["TIBER.PREP"]},{"control_id":"PM-02","control_name":"Information Security Program Leadership Role","family":"PM","mappings":["TIBER.PREP"]},{"control_id":"PM-04","control_name":"Plan of Action and Milestones Process","family":"PM","mappings":["TIBER.CLOSE","TIBER.REM"]},{"control_id":"PM-06","control_name":"Measures of Performance","family":"PM","mappings":["TIBER.CLOSE","TIBER.REM"]},{"control_id":"PM-08","control_name":"Critical Infrastructure Plan","family":"PM","mappings":["TIBER.XB"]},{"control_id":"PM-09","control_name":"Risk Management Strategy","family":"PM","mappings":["TIBER.CONF","TIBER.PREP"]},{"control_id":"PM-14","control_name":"Testing, Training, and Monitoring","family":"PM","mappings":["TIBER.BT","TIBER.CLOSE","TIBER.PREP","TIBER.RT"]},{"control_id":"PM-15","control_name":"Security and Privacy Groups and Associations","family":"PM","mappings":["TIBER.GTL","TIBER.XB"]},{"control_id":"PM-16","control_name":"Threat Awareness Program","family":"PM","mappings":["TIBER.GTL","TIBER.TTI"]},{"control_id":"PM-28","control_name":"Risk Framing","family":"PM","mappings":["TIBER.CONF","TIBER.PREP"]},{"control_id":"PM-29","control_name":"Risk Management Program Leadership Roles","family":"PM","mappings":["TIBER.PREP"]},{"control_id":"PM-31","control_name":"Continuous Monitoring Strategy","family":"PM","mappings":["TIBER.CLOSE","TIBER.REM"]},{"control_id":"PT-01","control_name":"Policy and Procedures","family":"PT","mappings":["TIBER.CONF"]},{"control_id":"PT-03","control_name":"Personally Identifiable Information Processing Purposes","family":"PT","mappings":["TIBER.CONF"]},{"control_id":"RA-03","control_name":"Risk Assessment","family":"RA","mappings":["TIBER.GTL","TIBER.TTI"]},{"control_id":"RA-05","control_name":"Vulnerability Scanning","family":"RA","mappings":["TIBER.GTL","TIBER.RT","TIBER.TTI"]},{"control_id":"RA-06","control_name":"Technical Surveillance Countermeasures Survey","family":"RA","mappings":["TIBER.RT"]},{"control_id":"RA-07","control_name":"Risk Response","family":"RA","mappings":["TIBER.CONF","TIBER.REM"]},{"control_id":"RA-10","control_name":"Threat Hunting","family":"RA","mappings":["TIBER.RT","TIBER.TTI"]},{"control_id":"SA-04","control_name":"Acquisitions","family":"SA","mappings":["TIBER.PROV"]},{"control_id":"SA-09","control_name":"External Information System Services","family":"SA","mappings":["TIBER.PROV"]},{"control_id":"SA-21","control_name":"Developer Screening","family":"SA","mappings":["TIBER.PROV"]},{"control_id":"SC-08","control_name":"Transmission Integrity","family":"SC","mappings":["TIBER.CONF"]},{"control_id":"SC-26","control_name":"Decoys","family":"SC","mappings":["TIBER.RT"]},{"control_id":"SC-28","control_name":"Protection of Information at Rest","family":"SC","mappings":["TIBER.CONF"]}],"pagination":{"page":1,"per_page":50,"total":59,"total_pages":2}}