Browse
Controls
Filter by domain, threat, lifecycle phase, architecture layer, control type, or mapping gap.
60 matchesclear
ID
Domain
Title
Type
Threats
BCR-01
BCRBusiness Continuity Management and Operational Resilience
Business Continuity Management Policy and ProceduresCloud & AI Related
DoSISCLoGMT+2
BCR-03
BCRBusiness Continuity Management and Operational Resilience
Business Continuity StrategyCloud & AI Related
DoSISCLoGSDD+1
BCR-10
BCRBusiness Continuity Management and Operational Resilience
Response Plan ExerciseCloud & AI Related
DoSISCLoGSDD+1
BCR-11
BCRBusiness Continuity Management and Operational Resilience
Equipment RedundancyCloud & AI Related
—
CCC-04
CCCChange Control and Configuration Management
Change AuthorizationCloud & AI Related
DPDoSIAPISC+5
CCC-05
CCCChange Control and Configuration Management
Change AgreementsCloud & AI Related
DPDoSIAPISC+5
CCC-06
CCCChange Control and Configuration Management
Change Management BaselineCloud & AI Related
DPDoSIAPISC+5
CCC-07
CCCChange Control and Configuration Management
Detection of Baseline DeviationCloud & AI Related
DPDoSIAPISC+5
CCC-08
CCCChange Control and Configuration Management
Exception ManagementCloud & AI Related
DPDoSIAPISC+5
CCC-09
CCCChange Control and Configuration Management
Change RestorationCloud & AI Related
DPDoSIAPISC+5
CEK-04
CEKCryptography, Encryption & Key Management
Encryption AlgorithmCloud & AI Related
DPDoSIAPISC+5
CEK-05
CEKCryptography, Encryption & Key Management
Encryption Change ManagementCloud & AI Related
DPDoSIAPISC+5
CEK-06
CEKCryptography, Encryption & Key Management
Encryption Change Cost Benefit AnalysisCloud & AI Related
DPDoSIAPISC+5
CEK-07
CEKCryptography, Encryption & Key Management
Encryption Risk ManagementCloud & AI Related
DPDoSIAPISC+5
DCS-01
DCSDatacenter Security
Off-Site Equipment Disposal Policy and ProceduresCloud & AI Related
LoGMTSDD
DCS-02
DCSDatacenter Security
Off-Site Transfer Authorization Policy and ProceduresCloud & AI Related
ISCLoGMTSDD+1
IAM-01
IAMIdentity & Access Management
Identity and Access Management Policy and ProceduresCloud & AI Related
DoSIAPISCLoG+3
IAM-02
IAMIdentity & Access Management
Strong Password Policy and ProceduresCloud & AI Related
DoSIAPISCLoG+2
IAM-07
IAMIdentity & Access Management
User Access Changes and RevocationCloud & AI Related
DPIAPISCLoG+3
IAM-09
IAMIdentity & Access Management
Segregation of Privileged Access RolesCloud & AI Related
DPIAPISCLoG+3
IAM-10
IAMIdentity & Access Management
Management of Privileged Access RolesCloud & AI Related
DPIAPISCLoG+3
IAM-11
IAMIdentity & Access Management
Customers' Approval for Agreed Privileged Access RolesCloud & AI Related
DPIAPISCLoG+3
IAM-17
IAMIdentity & Access Management
Knowledge Access Control - Need to KnowCloud & AI Related
IAPISCLoGMT+2
IAM-18
IAMIdentity & Access Management
Output Modification and Special AuthorizationAI-Specific
DPIAPISCLoG+3
I&S-01
I&SInfrastructure Security
Infrastructure and Virtualization Security Policy and ProceduresCloud & AI Related
DoSISCLoGSDD+1
I&S-05
I&SInfrastructure Security
Production and Non-Production EnvironmentsCloud & AI Related
LoGSDDMSF
SEF-02
SEFSecurity Incident Management, E-Discovery, & Cloud Forensics
Service Management Policy and ProceduresCloud & AI Related
DPDoSIAPISC+5
SEF-03
SEFSecurity Incident Management, E-Discovery, & Cloud Forensics
Incident Response PlansCloud & AI Related
DPDoSIAPISC+5
SEF-04
SEFSecurity Incident Management, E-Discovery, & Cloud Forensics
Incident Response TestingCloud & AI Related
DPDoSIAPISC+5
SEF-05
SEFSecurity Incident Management, E-Discovery, & Cloud Forensics
Incident Response MetricsCloud & AI Related
DPDoSIAPISC+5
SEF-06
SEFSecurity Incident Management, E-Discovery, & Cloud Forensics
Event Triage ProcessesCloud & AI Related
DPDoSIAPISC+5
SEF-08
SEFSecurity Incident Management, E-Discovery, & Cloud Forensics
Points of Contact MaintenanceCloud & AI Related
DPDoSIAPISC+5
1–50 of 60