11.02 Control Catalog

We're on control catalog release 11.02 at the moment, and things have stabilised for this release. The whole control catalog is now in place, but we have ideas to enhance and refine the control format during 2012 to align to the latest release of 800-53. Of course we'd welcome any comments or ideas you may have.

Controls are based on NIST 800-53, and there is a mapping to ISO17799 and COBIT 4.1, with ISO 27002 and PCI DSS available soon.

Using the filter gives you a quick way to hunt through the catalog e.g. 'PS-' gives you all the Personnel Security Family.

Filters
List of articles in category 11.02 Control Catalog
Title Hits
13-05 All Controls Hits: 31322
13-05 Control mapping (NIST 800-53 vs ISO 17799 / PCI-DSS v2 / COBIT 4.1 Hits: 75288
13-05 Controls catalog SQL export Hits: 11111
AC-01 Access Control Policies and Procedures Hits: 49315
AC-02 Account Management Hits: 33468
AC-03 Access Enforcement Hits: 36639
AC-04 Information Flow Enforcement Hits: 38353
AC-05 Separation Of Duties Hits: 20773
AC-06 Least Privilege Hits: 20595
AC-07 Unsuccessful Login Attempts Hits: 19260
AC-08 System Use Notification Hits: 17221
AC-09 Previous Logon Notification Hits: 14182
AC-10 Concurrent Session Control Hits: 15812
AC-11 Session Lock Hits: 18391
AC-12 Session Termination Hits: 17440
AC-13 Supervision And Review -- Access Control Hits: 12792
AC-14 Permitted Actions Without Identification Or Authentication Hits: 11155
AC-15 Automated Marking Hits: 9882
AC-16 Automated Labeling Hits: 9133
AC-17 Remote Access Hits: 18860
AC-18 Wireless Access Restrictions Hits: 17388
AC-19 Access Control For Portable And Mobile Devices Hits: 17167
AC-20 Use Of External Information Systems Hits: 16674
AT-01 Security Awareness And Training Policy And Procedures Hits: 19167
AT-02 Security Awareness Hits: 17336
AT-03 Security Training Hits: 16811
AT-04 Security Training Records Hits: 11631
AT-05 Contacts With Security Groups And Associations Hits: 9496
AU-01 Audit And Accountability Policy And Procedures Hits: 20273
AU-02 Auditable Events Hits: 27523
AU-03 Content Of Audit Records Hits: 17111
AU-04 Audit Storage Capacity Hits: 13660
AU-05 Response To Audit Processing Failures Hits: 16804
AU-06 Audit Monitoring, Analysis, And Reporting Hits: 35908
AU-07 Audit Reduction And Report Generation Hits: 16643
AU-08 Time Stamps Hits: 13522
AU-09 Protection Of Audit Information Hits: 17438
AU-10 Non-Repudiation Hits: 17628
AU-11 Audit Record Retention Hits: 15241
CA-01 Certification, Accreditation, And Security Assessment Policies And Procedures Hits: 17536
CA-02 Security Assessments Hits: 21157
CA-03 Information System Connections Hits: 12501
CA-04 Security Certification Hits: 15778
CA-05 Plan Of Action And Milestones Hits: 11597
CA-06 Security Accreditation Hits: 13169
CA-07 Continuous Monitoring Hits: 19567
CM-01 Configuration Management Policy And Procedures Hits: 18238
CM-02 Baseline Configuration Hits: 21295
CM-03 Configuration Change Control Hits: 19988
CM-04 Monitoring Configuration Changes Hits: 13439
CM-05 Access Restrictions For Change Hits: 16478
CM-06 Configuration Settings Hits: 17726
CM-07 Least Functionality Hits: 23690
CM-08 Information System Component Inventory Hits: 17624
CP-01 Contingency Planning Policy And Procedures Hits: 12965
CP-02 Contingency Plan Hits: 13460
CP-03 Contingency Training Hits: 11100
CP-04 Contingency Plan Testing And Exercises Hits: 18976
CP-05 Contingency Plan Update Hits: 10154
CP-06 Alternate Storage Site Hits: 11707
CP-07 Alternate Processing Site Hits: 13939
CP-08 Telecommunications Services Hits: 8480
CP-09 Information System Backup Hits: 16908
CP-10 Information System Recovery And Reconstitution Hits: 15895
IA-01 Identification And Authentication Policy And Procedures Hits: 19976
IA-02 User Identification And Authentication Hits: 27650
IA-03 Device Identification And Authentication Hits: 23530
IA-04 Identifier Management Hits: 17068
IA-05 Authenticator Management Hits: 19313
IA-06 Authenticator Feedback Hits: 14002
IA-07 Cryptographic Module Authentication Hits: 19975
IR-01 Incident Response Policy And Procedures Hits: 14639
IR-02 Incident Response Training Hits: 12789
IR-03 Incident Response Testing And Exercises Hits: 15004
IR-04 Incident Handling Hits: 23850
IR-05 Incident Monitoring Hits: 13040
IR-06 Incident Reporting Hits: 12908
IR-07 Incident Response Assistance Hits: 13347
MA-01 System Maintenance Policy And Procedures Hits: 13069
MA-02 Controlled Maintenance Hits: 14203
MA-03 Maintenance Tools Hits: 12084
MA-04 Remote Maintenance Hits: 14179
MA-05 Maintenance Personnel Hits: 10044
MA-06 Timely Maintenance Hits: 11118
MP-01 Media Protection Policy And Procedures Hits: 12670
MP-02 Media Access Hits: 12991
MP-03 Media Labeling Hits: 9274
MP-04 Media Storage Hits: 9740
MP-05 Media Transport Hits: 9890
MP-06 Media Sanitization And Disposal Hits: 10930
PE-01 Physical And Environmental Protection Policy And Procedures Hits: 12229
PE-02 Physical Access Authorizations Hits: 10819
PE-03 Physical Access Control Hits: 14355
PE-04 Access Control For Transmission Medium Hits: 10466
PE-05 Access Control For Display Medium Hits: 9672
PE-06 Monitoring Physical Access Hits: 12515
PE-07 Visitor Control Hits: 8553
PE-08 Access Records Hits: 7380
PE-09 Power Equipment And Power Cabling Hits: 10084
PE-10 Emergency Shutoff Hits: 9783
PE-11 Emergency Power Hits: 9229
PE-12 Emergency Lighting Hits: 9337
PE-13 Fire Protection Hits: 9774
PE-14 Temperature And Humidity Controls Hits: 9191
PE-15 Water Damage Protection Hits: 9486
PE-16 Delivery And Removal Hits: 9655
PE-17 Alternate Work Site Hits: 7559
PE-18 Location Of Information System Components Hits: 7561
PE-19 Information Leakage Hits: 9423
PL-01 Security Planning Policy And Procedures Hits: 16752
PL-02 System Security Plan Hits: 12232
PL-03 System Security Plan Update Hits: 6881
PL-04 Rules Of Behavior Hits: 13533
PL-05 Privacy Impact Assessment Hits: 9169
PL-06 Security-Related Activity Planning Hits: 7125
PS-01 Personnel Security Policy And Procedures Hits: 13870
PS-02 Position Categorization Hits: 7907
PS-03 Personnel Screening Hits: 8786
PS-04 Personnel Termination Hits: 7300
PS-05 Personnel Transfer Hits: 6877
PS-06 Access Agreements Hits: 12702
PS-07 Third-Party Personnel Security Hits: 12052
PS-08 Personnel Sanctions Hits: 8708
RA-01 Risk Assessment Policy And Procedures Hits: 12683
RA-02 Security Categorization Hits: 15546
RA-03 Risk Assessment Hits: 17721
RA-04 Risk Assessment Update Hits: 12024
RA-05 Vulnerability Scanning Hits: 21224
SA-01 System And Services Acquisition Policy And Procedures Hits: 17348
SA-02 Allocation Of Resources Hits: 13617
SA-03 Life Cycle Support Hits: 15725
SA-04 Acquisitions Hits: 14662
SA-05 Information System Documentation Hits: 24886
SA-06 Software Usage Restrictions Hits: 11850
SA-07 User Installed Software Hits: 11510
SA-08 Security Engineering Principles Hits: 19075
SA-09 External Information System Services Hits: 14163
SA-10 Developer Configuration Management Hits: 12876
SA-11 Developer Security Testing Hits: 11168
SC-01 System And Communications Protection Policy And Procedures Hits: 15185
SC-02 Application Partitioning Hits: 14465
SC-03 Security Function Isolation Hits: 17570
SC-04 Information Remnance Hits: 18541
SC-05 Denial Of Service Protection Hits: 17569
SC-06 Resource Priority Hits: 11925
SC-07 Boundary Protection Hits: 29527
SC-08 Transmission Integrity Hits: 20279
SC-09 Transmission Confidentiality Hits: 18919
SC-10 Network Disconnect Hits: 12543
SC-11 Trusted Path Hits: 15211
SC-12 Cryptographic Key Establishment And Management Hits: 16488
SC-13 Use Of Cryptography Hits: 18295
SC-14 Public Access Protections Hits: 10446
SC-15 Collaborative Computing Hits: 13189
SC-16 Transmission Of Security Parameters Hits: 7983
SC-17 Public Key Infrastructure Certificates Hits: 8995
SC-18 Mobile Code Hits: 18765
SC-19 Voice Over Internet Protocol Hits: 7537
SC-20 Secure Name / Address Resolution Service (Authoritative Source) Hits: 18203
SC-21 Secure Name / Address Resolution Service (Recursive Or Caching Resolver) Hits: 10189
SC-22 Architecture And Provisioning For Name / Address Resolution Service Hits: 9998
SC-23 Session Authenticity Hits: 19263
SI-01 System And Information Integrity Policy And Procedures Hits: 13841
SI-02 Flaw Remediation Hits: 26247
SI-03 Malicious Code Protection Hits: 23114
SI-04 Information System Monitoring Tools And Techniques Hits: 25688
SI-05 Security Alerts And Advisories Hits: 14166
SI-06 Security Functionality Verification Hits: 19620
SI-07 Software And Information Integrity Hits: 18308
SI-08 Spam Protection Hits: 9057
SI-09 Information Input Restrictions Hits: 9336
SI-10 Information Accuracy, Completeness, Validity, And Authenticity Hits: 18384
SI-11 Error Handling Hits: 14151
SI-12 Information Output Handling And Retention Hits: 10966