{"framework":{"id":"fips_140","name":"FIPS 140-3"},"data":[{"control_id":"AC-02","control_name":"Account Management","family":"AC","mappings":["FIPS 140-3 §7.4"]},{"control_id":"AC-04","control_name":"Information Flow Enforcement","family":"AC","mappings":["FIPS 140-3 §7.3"]},{"control_id":"AC-05","control_name":"Separation of Duties","family":"AC","mappings":["FIPS 140-3 §7.4"]},{"control_id":"AC-06","control_name":"Least Privilege","family":"AC","mappings":["FIPS 140-3 §7.4"]},{"control_id":"AC-07","control_name":"Unsuccessful Logon Attempts","family":"AC","mappings":["FIPS 140-3 §7.4"]},{"control_id":"CA-08","control_name":"Penetration Testing","family":"CA","mappings":["FIPS 140-3 §7.10"]},{"control_id":"CM-02","control_name":"Baseline Configuration","family":"CM","mappings":["FIPS 140-3 §7.6"]},{"control_id":"CM-03","control_name":"Configuration Change Control","family":"CM","mappings":["FIPS 140-3 §7.11"]},{"control_id":"CM-05","control_name":"Access Restrictions for Change","family":"CM","mappings":["FIPS 140-3 §7.11"]},{"control_id":"CM-06","control_name":"Configuration Settings","family":"CM","mappings":["FIPS 140-3 §7.2","FIPS 140-3 §7.6"]},{"control_id":"CM-07","control_name":"Least Functionality","family":"CM","mappings":["FIPS 140-3 §7.6"]},{"control_id":"CM-14","control_name":"Signed Components","family":"CM","mappings":["FIPS 140-3 §7.5"]},{"control_id":"IA-02","control_name":"Identification and Authentication (Organizational Users)","family":"IA","mappings":["FIPS 140-3 §7.4"]},{"control_id":"IA-05","control_name":"Authenticator Management","family":"IA","mappings":["FIPS 140-3 §7.4","FIPS 140-3 §7.9"]},{"control_id":"IA-07","control_name":"Cryptographic Module Authentication","family":"IA","mappings":["FIPS 140-3 §7.4"]},{"control_id":"MP-06","control_name":"Media Sanitization","family":"MP","mappings":["FIPS 140-3 §7.9"]},{"control_id":"PE-03","control_name":"Physical Access Control","family":"PE","mappings":["FIPS 140-3 §7.7"]},{"control_id":"PE-04","control_name":"Access Control for Transmission","family":"PE","mappings":["FIPS 140-3 §7.7"]},{"control_id":"PE-05","control_name":"Access Control for Output Devices","family":"PE","mappings":["FIPS 140-3 §7.7"]},{"control_id":"PE-06","control_name":"Monitoring Physical Access","family":"PE","mappings":["FIPS 140-3 §7.7"]},{"control_id":"PE-19","control_name":"Information Leakage","family":"PE","mappings":["FIPS 140-3 §7.7","FIPS 140-3 §7.8"]},{"control_id":"PE-20","control_name":"Asset Monitoring and Tracking","family":"PE","mappings":["FIPS 140-3 §7.7"]},{"control_id":"RA-03","control_name":"Risk Assessment","family":"RA","mappings":["FIPS 140-3 §7.8","FIPS 140-3 §7.12"]},{"control_id":"RA-05","control_name":"Vulnerability Monitoring and Scanning","family":"RA","mappings":["FIPS 140-3 §7.12"]},{"control_id":"RA-07","control_name":"Risk Response","family":"RA","mappings":["FIPS 140-3 §7.12"]},{"control_id":"SA-03","control_name":"System Development Life Cycle","family":"SA","mappings":["FIPS 140-3 §7.11"]},{"control_id":"SA-04","control_name":"Acquisition Process","family":"SA","mappings":["FIPS 140-3 §7.2","FIPS 140-3 §7.11"]},{"control_id":"SA-08","control_name":"Security and Privacy Engineering Principles","family":"SA","mappings":["FIPS 140-3 §7.2"]},{"control_id":"SA-10","control_name":"Developer Configuration Management","family":"SA","mappings":["FIPS 140-3 §7.5","FIPS 140-3 §7.11"]},{"control_id":"SA-11","control_name":"Developer Testing and Evaluation","family":"SA","mappings":["FIPS 140-3 §7.5","FIPS 140-3 §7.11","FIPS 140-3 §7.12"]},{"control_id":"SA-15","control_name":"Development Process, Standards, and Tools","family":"SA","mappings":["FIPS 140-3 §7.11"]},{"control_id":"SA-17","control_name":"Developer Security and Privacy Architecture and Design","family":"SA","mappings":["FIPS 140-3 §7.2"]},{"control_id":"SC-03","control_name":"Security Function Isolation","family":"SC","mappings":["FIPS 140-3 §7.3"]},{"control_id":"SC-07","control_name":"Boundary Protection","family":"SC","mappings":["FIPS 140-3 §7.3"]},{"control_id":"SC-12","control_name":"Cryptographic Key Establishment and Management","family":"SC","mappings":["FIPS 140-3 §7.9"]},{"control_id":"SC-13","control_name":"Cryptographic Protection","family":"SC","mappings":["FIPS 140-3 §7.2","FIPS 140-3 §7.3","FIPS 140-3 §7.9"]},{"control_id":"SC-17","control_name":"Public Key Infrastructure Certificates","family":"SC","mappings":["FIPS 140-3 §7.9"]},{"control_id":"SC-28","control_name":"Protection of Information at Rest","family":"SC","mappings":["FIPS 140-3 §7.8","FIPS 140-3 §7.9"]},{"control_id":"SC-34","control_name":"Non-modifiable Executable Programs","family":"SC","mappings":["FIPS 140-3 §7.5"]},{"control_id":"SC-39","control_name":"Process Isolation","family":"SC","mappings":["FIPS 140-3 §7.6"]},{"control_id":"SI-02","control_name":"Flaw Remediation","family":"SI","mappings":["FIPS 140-3 §7.12"]},{"control_id":"SI-03","control_name":"Malicious Code Protection","family":"SI","mappings":["FIPS 140-3 §7.6"]},{"control_id":"SI-06","control_name":"Security and Privacy Function Verification","family":"SI","mappings":["FIPS 140-3 §7.10"]},{"control_id":"SI-07","control_name":"Software, Firmware, and Information Integrity","family":"SI","mappings":["FIPS 140-3 §7.5","FIPS 140-3 §7.10"]}],"pagination":{"page":1,"per_page":50,"total":44,"total_pages":1}}