13-05 All Controls
|
Hits: 30524
|
13-05 Control mapping (NIST 800-53 vs ISO 17799 / PCI-DSS v2 / COBIT 4.1
|
Hits: 73679
|
13-05 Controls catalog SQL export
|
Hits: 10671
|
AC-01 Access Control Policies and Procedures
|
Hits: 47878
|
AC-02 Account Management
|
Hits: 32093
|
AC-03 Access Enforcement
|
Hits: 35129
|
AC-04 Information Flow Enforcement
|
Hits: 36538
|
AC-05 Separation Of Duties
|
Hits: 19871
|
AC-06 Least Privilege
|
Hits: 19779
|
AC-07 Unsuccessful Login Attempts
|
Hits: 18533
|
AC-08 System Use Notification
|
Hits: 16199
|
AC-09 Previous Logon Notification
|
Hits: 13690
|
AC-10 Concurrent Session Control
|
Hits: 15215
|
AC-11 Session Lock
|
Hits: 17785
|
AC-12 Session Termination
|
Hits: 16695
|
AC-13 Supervision And Review -- Access Control
|
Hits: 12244
|
AC-14 Permitted Actions Without Identification Or Authentication
|
Hits: 10807
|
AC-15 Automated Marking
|
Hits: 9465
|
AC-16 Automated Labeling
|
Hits: 8736
|
AC-17 Remote Access
|
Hits: 18055
|
AC-18 Wireless Access Restrictions
|
Hits: 16615
|
AC-19 Access Control For Portable And Mobile Devices
|
Hits: 16383
|
AC-20 Use Of External Information Systems
|
Hits: 16138
|
AT-01 Security Awareness And Training Policy And Procedures
|
Hits: 18381
|
AT-02 Security Awareness
|
Hits: 16678
|
AT-03 Security Training
|
Hits: 16156
|
AT-04 Security Training Records
|
Hits: 11129
|
AT-05 Contacts With Security Groups And Associations
|
Hits: 9113
|
AU-01 Audit And Accountability Policy And Procedures
|
Hits: 19630
|
AU-02 Auditable Events
|
Hits: 26405
|
AU-03 Content Of Audit Records
|
Hits: 16352
|
AU-04 Audit Storage Capacity
|
Hits: 13146
|
AU-05 Response To Audit Processing Failures
|
Hits: 16243
|
AU-06 Audit Monitoring, Analysis, And Reporting
|
Hits: 34086
|
AU-07 Audit Reduction And Report Generation
|
Hits: 16154
|
AU-08 Time Stamps
|
Hits: 12942
|
AU-09 Protection Of Audit Information
|
Hits: 16624
|
AU-10 Non-Repudiation
|
Hits: 17018
|
AU-11 Audit Record Retention
|
Hits: 14703
|
CA-01 Certification, Accreditation, And Security Assessment Policies And Procedures
|
Hits: 16622
|
CA-02 Security Assessments
|
Hits: 20355
|
CA-03 Information System Connections
|
Hits: 12009
|
CA-04 Security Certification
|
Hits: 15057
|
CA-05 Plan Of Action And Milestones
|
Hits: 10916
|
CA-06 Security Accreditation
|
Hits: 12640
|
CA-07 Continuous Monitoring
|
Hits: 18730
|
CM-01 Configuration Management Policy And Procedures
|
Hits: 17598
|
CM-02 Baseline Configuration
|
Hits: 20603
|
CM-03 Configuration Change Control
|
Hits: 19072
|
CM-04 Monitoring Configuration Changes
|
Hits: 12765
|
CM-05 Access Restrictions For Change
|
Hits: 15798
|
CM-06 Configuration Settings
|
Hits: 16577
|
CM-07 Least Functionality
|
Hits: 22923
|
CM-08 Information System Component Inventory
|
Hits: 16857
|
CP-01 Contingency Planning Policy And Procedures
|
Hits: 12569
|
CP-02 Contingency Plan
|
Hits: 12908
|
CP-03 Contingency Training
|
Hits: 10709
|
CP-04 Contingency Plan Testing And Exercises
|
Hits: 18450
|
CP-05 Contingency Plan Update
|
Hits: 9792
|
CP-06 Alternate Storage Site
|
Hits: 11183
|
CP-07 Alternate Processing Site
|
Hits: 13423
|
CP-08 Telecommunications Services
|
Hits: 8199
|
CP-09 Information System Backup
|
Hits: 16346
|
CP-10 Information System Recovery And Reconstitution
|
Hits: 15337
|
IA-01 Identification And Authentication Policy And Procedures
|
Hits: 19206
|
IA-02 User Identification And Authentication
|
Hits: 26592
|
IA-03 Device Identification And Authentication
|
Hits: 22522
|
IA-04 Identifier Management
|
Hits: 16244
|
IA-05 Authenticator Management
|
Hits: 18777
|
IA-06 Authenticator Feedback
|
Hits: 13365
|
IA-07 Cryptographic Module Authentication
|
Hits: 19226
|
IR-01 Incident Response Policy And Procedures
|
Hits: 14077
|
IR-02 Incident Response Training
|
Hits: 12245
|
IR-03 Incident Response Testing And Exercises
|
Hits: 14547
|
IR-04 Incident Handling
|
Hits: 22810
|
IR-05 Incident Monitoring
|
Hits: 12497
|
IR-06 Incident Reporting
|
Hits: 12371
|
IR-07 Incident Response Assistance
|
Hits: 12691
|
MA-01 System Maintenance Policy And Procedures
|
Hits: 12658
|
MA-02 Controlled Maintenance
|
Hits: 13645
|
MA-03 Maintenance Tools
|
Hits: 11711
|
MA-04 Remote Maintenance
|
Hits: 13619
|
MA-05 Maintenance Personnel
|
Hits: 9681
|
MA-06 Timely Maintenance
|
Hits: 10766
|
MP-01 Media Protection Policy And Procedures
|
Hits: 12234
|
MP-02 Media Access
|
Hits: 12487
|
MP-03 Media Labeling
|
Hits: 8925
|
MP-04 Media Storage
|
Hits: 9372
|
MP-05 Media Transport
|
Hits: 9521
|
MP-06 Media Sanitization And Disposal
|
Hits: 10481
|
PE-01 Physical And Environmental Protection Policy And Procedures
|
Hits: 11845
|
PE-02 Physical Access Authorizations
|
Hits: 10445
|
PE-03 Physical Access Control
|
Hits: 13683
|
PE-04 Access Control For Transmission Medium
|
Hits: 10089
|
PE-05 Access Control For Display Medium
|
Hits: 9315
|
PE-06 Monitoring Physical Access
|
Hits: 12049
|
PE-07 Visitor Control
|
Hits: 8207
|
PE-08 Access Records
|
Hits: 7119
|
PE-09 Power Equipment And Power Cabling
|
Hits: 9756
|
PE-10 Emergency Shutoff
|
Hits: 9322
|
PE-11 Emergency Power
|
Hits: 8864
|
PE-12 Emergency Lighting
|
Hits: 8995
|
PE-13 Fire Protection
|
Hits: 9384
|
PE-14 Temperature And Humidity Controls
|
Hits: 8867
|
PE-15 Water Damage Protection
|
Hits: 9081
|
PE-16 Delivery And Removal
|
Hits: 9306
|
PE-17 Alternate Work Site
|
Hits: 7318
|
PE-18 Location Of Information System Components
|
Hits: 7311
|
PE-19 Information Leakage
|
Hits: 9040
|
PL-01 Security Planning Policy And Procedures
|
Hits: 16185
|
PL-02 System Security Plan
|
Hits: 11594
|
PL-03 System Security Plan Update
|
Hits: 6601
|
PL-04 Rules Of Behavior
|
Hits: 12831
|
PL-05 Privacy Impact Assessment
|
Hits: 8814
|
PL-06 Security-Related Activity Planning
|
Hits: 6882
|
PS-01 Personnel Security Policy And Procedures
|
Hits: 13376
|
PS-02 Position Categorization
|
Hits: 7655
|
PS-03 Personnel Screening
|
Hits: 8466
|
PS-04 Personnel Termination
|
Hits: 7035
|
PS-05 Personnel Transfer
|
Hits: 6611
|
PS-06 Access Agreements
|
Hits: 12104
|
PS-07 Third-Party Personnel Security
|
Hits: 11655
|
PS-08 Personnel Sanctions
|
Hits: 8412
|
RA-01 Risk Assessment Policy And Procedures
|
Hits: 12265
|
RA-02 Security Categorization
|
Hits: 14957
|
RA-03 Risk Assessment
|
Hits: 17078
|
RA-04 Risk Assessment Update
|
Hits: 11535
|
RA-05 Vulnerability Scanning
|
Hits: 20314
|
SA-01 System And Services Acquisition Policy And Procedures
|
Hits: 16822
|
SA-02 Allocation Of Resources
|
Hits: 12968
|
SA-03 Life Cycle Support
|
Hits: 15105
|
SA-04 Acquisitions
|
Hits: 14100
|
SA-05 Information System Documentation
|
Hits: 23746
|
SA-06 Software Usage Restrictions
|
Hits: 11378
|
SA-07 User Installed Software
|
Hits: 11053
|
SA-08 Security Engineering Principles
|
Hits: 18468
|
SA-09 External Information System Services
|
Hits: 13724
|
SA-10 Developer Configuration Management
|
Hits: 12367
|
SA-11 Developer Security Testing
|
Hits: 10759
|
SC-01 System And Communications Protection Policy And Procedures
|
Hits: 14772
|
SC-02 Application Partitioning
|
Hits: 13940
|
SC-03 Security Function Isolation
|
Hits: 16890
|
SC-04 Information Remnance
|
Hits: 17849
|
SC-05 Denial Of Service Protection
|
Hits: 16773
|
SC-06 Resource Priority
|
Hits: 11435
|
SC-07 Boundary Protection
|
Hits: 28475
|
SC-08 Transmission Integrity
|
Hits: 19416
|
SC-09 Transmission Confidentiality
|
Hits: 18181
|
SC-10 Network Disconnect
|
Hits: 12001
|
SC-11 Trusted Path
|
Hits: 14635
|
SC-12 Cryptographic Key Establishment And Management
|
Hits: 15873
|
SC-13 Use Of Cryptography
|
Hits: 17353
|
SC-14 Public Access Protections
|
Hits: 10085
|
SC-15 Collaborative Computing
|
Hits: 12790
|
SC-16 Transmission Of Security Parameters
|
Hits: 7703
|
SC-17 Public Key Infrastructure Certificates
|
Hits: 8693
|
SC-18 Mobile Code
|
Hits: 17976
|
SC-19 Voice Over Internet Protocol
|
Hits: 7259
|
SC-20 Secure Name / Address Resolution Service (Authoritative Source)
|
Hits: 17336
|
SC-21 Secure Name / Address Resolution Service (Recursive Or Caching Resolver)
|
Hits: 9831
|
SC-22 Architecture And Provisioning For Name / Address Resolution Service
|
Hits: 9577
|
SC-23 Session Authenticity
|
Hits: 18480
|
SI-01 System And Information Integrity Policy And Procedures
|
Hits: 13432
|
SI-02 Flaw Remediation
|
Hits: 25089
|
SI-03 Malicious Code Protection
|
Hits: 22432
|
SI-04 Information System Monitoring Tools And Techniques
|
Hits: 24699
|
SI-05 Security Alerts And Advisories
|
Hits: 13381
|
SI-06 Security Functionality Verification
|
Hits: 18893
|
SI-07 Software And Information Integrity
|
Hits: 17684
|
SI-08 Spam Protection
|
Hits: 8690
|
SI-09 Information Input Restrictions
|
Hits: 8979
|
SI-10 Information Accuracy, Completeness, Validity, And Authenticity
|
Hits: 17843
|
SI-11 Error Handling
|
Hits: 13581
|
SI-12 Information Output Handling And Retention
|
Hits: 10601
|