Browse
131 controls
Commitment to attract, develop, and retain competent individuals
Control Environment
Obtains or generates and uses relevant quality information
Communication and Information
Internal communication of information to support internal control
Communication and Information
External communication regarding matters affecting internal control
Communication and Information
Selects, develops, and performs ongoing and separate evaluations
Monitoring Activities
Evaluates and communicates internal control deficiencies
Monitoring Activities
Selects and develops control activities that mitigate risks
Control Activities
Deploys control activities through policies and procedures
Control Activities
Logical access security infrastructure
Logical and Physical Access Controls
Registration and authorization prior to issuing credentials
Logical and Physical Access Controls
Disposal and destruction of information assets
Logical and Physical Access Controls
Controls against threats from outside system boundaries
Logical and Physical Access Controls
Restricts transmission and movement of information
Logical and Physical Access Controls
Controls to prevent or detect unauthorized software
Logical and Physical Access Controls
System and component configuration for high-risk areas
Configuration management
User identification, authentication, and re-authentication
Identification and authentication
Device identification and authentication
Identification and authentication
Information in shared system resources
System and communications protection
Network communications - deny by default - allow by exception
System and communications protection
Transmission and storage confidentiality
System and communications protection
Cryptographic key establishment and management
System and communications protection
Collaborative computing devices and applications
System and communications protection
Security alerts, advisories, and directives
System and information integrity