11.02 Control Catalog

We're on control catalog release 11.02 at the moment, and things have stabilised for this release. The whole control catalog is now in place, but we have ideas to enhance and refine the control format during 2012 to align to the latest release of 800-53. Of course we'd welcome any comments or ideas you may have.

Controls are based on NIST 800-53, and there is a mapping to ISO17799 and COBIT 4.1, with ISO 27002 and PCI DSS available soon.

Using the filter gives you a quick way to hunt through the catalog e.g. 'PS-' gives you all the Personnel Security Family.

Filters
List of articles in category 11.02 Control Catalog
Title Hits
13-05 All Controls Hits: 31898
13-05 Control mapping (NIST 800-53 vs ISO 17799 / PCI-DSS v2 / COBIT 4.1 Hits: 76260
13-05 Controls catalog SQL export Hits: 11421
AC-01 Access Control Policies and Procedures Hits: 50272
AC-02 Account Management Hits: 34577
AC-03 Access Enforcement Hits: 37693
AC-04 Information Flow Enforcement Hits: 39690
AC-05 Separation Of Duties Hits: 21319
AC-06 Least Privilege Hits: 21207
AC-07 Unsuccessful Login Attempts Hits: 19783
AC-08 System Use Notification Hits: 17923
AC-09 Previous Logon Notification Hits: 14541
AC-10 Concurrent Session Control Hits: 16162
AC-11 Session Lock Hits: 18781
AC-12 Session Termination Hits: 17974
AC-13 Supervision And Review -- Access Control Hits: 13200
AC-14 Permitted Actions Without Identification Or Authentication Hits: 11430
AC-15 Automated Marking Hits: 10275
AC-16 Automated Labeling Hits: 9412
AC-17 Remote Access Hits: 19404
AC-18 Wireless Access Restrictions Hits: 17914
AC-19 Access Control For Portable And Mobile Devices Hits: 17697
AC-20 Use Of External Information Systems Hits: 17182
AT-01 Security Awareness And Training Policy And Procedures Hits: 19738
AT-02 Security Awareness Hits: 17833
AT-03 Security Training Hits: 17324
AT-04 Security Training Records Hits: 12005
AT-05 Contacts With Security Groups And Associations Hits: 9748
AU-01 Audit And Accountability Policy And Procedures Hits: 20637
AU-02 Auditable Events Hits: 28344
AU-03 Content Of Audit Records Hits: 17666
AU-04 Audit Storage Capacity Hits: 14061
AU-05 Response To Audit Processing Failures Hits: 17348
AU-06 Audit Monitoring, Analysis, And Reporting Hits: 37309
AU-07 Audit Reduction And Report Generation Hits: 17003
AU-08 Time Stamps Hits: 13960
AU-09 Protection Of Audit Information Hits: 18126
AU-10 Non-Repudiation Hits: 18056
AU-11 Audit Record Retention Hits: 15712
CA-01 Certification, Accreditation, And Security Assessment Policies And Procedures Hits: 18130
CA-02 Security Assessments Hits: 21745
CA-03 Information System Connections Hits: 12818
CA-04 Security Certification Hits: 16279
CA-05 Plan Of Action And Milestones Hits: 12043
CA-06 Security Accreditation Hits: 13617
CA-07 Continuous Monitoring Hits: 20154
CM-01 Configuration Management Policy And Procedures Hits: 18758
CM-02 Baseline Configuration Hits: 21828
CM-03 Configuration Change Control Hits: 20631
CM-04 Monitoring Configuration Changes Hits: 13973
CM-05 Access Restrictions For Change Hits: 16955
CM-06 Configuration Settings Hits: 19128
CM-07 Least Functionality Hits: 24276
CM-08 Information System Component Inventory Hits: 18104
CP-01 Contingency Planning Policy And Procedures Hits: 13321
CP-02 Contingency Plan Hits: 13905
CP-03 Contingency Training Hits: 11390
CP-04 Contingency Plan Testing And Exercises Hits: 19348
CP-05 Contingency Plan Update Hits: 10420
CP-06 Alternate Storage Site Hits: 12024
CP-07 Alternate Processing Site Hits: 14314
CP-08 Telecommunications Services Hits: 8698
CP-09 Information System Backup Hits: 17388
CP-10 Information System Recovery And Reconstitution Hits: 16301
IA-01 Identification And Authentication Policy And Procedures Hits: 20529
IA-02 User Identification And Authentication Hits: 28407
IA-03 Device Identification And Authentication Hits: 24259
IA-04 Identifier Management Hits: 17716
IA-05 Authenticator Management Hits: 19775
IA-06 Authenticator Feedback Hits: 14412
IA-07 Cryptographic Module Authentication Hits: 20423
IR-01 Incident Response Policy And Procedures Hits: 14992
IR-02 Incident Response Training Hits: 13230
IR-03 Incident Response Testing And Exercises Hits: 15348
IR-04 Incident Handling Hits: 24741
IR-05 Incident Monitoring Hits: 13431
IR-06 Incident Reporting Hits: 13244
IR-07 Incident Response Assistance Hits: 13792
MA-01 System Maintenance Policy And Procedures Hits: 13317
MA-02 Controlled Maintenance Hits: 14593
MA-03 Maintenance Tools Hits: 12418
MA-04 Remote Maintenance Hits: 14639
MA-05 Maintenance Personnel Hits: 10304
MA-06 Timely Maintenance Hits: 11350
MP-01 Media Protection Policy And Procedures Hits: 12967
MP-02 Media Access Hits: 13426
MP-03 Media Labeling Hits: 9563
MP-04 Media Storage Hits: 10028
MP-05 Media Transport Hits: 10177
MP-06 Media Sanitization And Disposal Hits: 11254
PE-01 Physical And Environmental Protection Policy And Procedures Hits: 12474
PE-02 Physical Access Authorizations Hits: 11073
PE-03 Physical Access Control Hits: 14760
PE-04 Access Control For Transmission Medium Hits: 10771
PE-05 Access Control For Display Medium Hits: 9914
PE-06 Monitoring Physical Access Hits: 12862
PE-07 Visitor Control Hits: 8782
PE-08 Access Records Hits: 7579
PE-09 Power Equipment And Power Cabling Hits: 10356
PE-10 Emergency Shutoff Hits: 10089
PE-11 Emergency Power Hits: 9522
PE-12 Emergency Lighting Hits: 9575
PE-13 Fire Protection Hits: 10035
PE-14 Temperature And Humidity Controls Hits: 9406
PE-15 Water Damage Protection Hits: 9809
PE-16 Delivery And Removal Hits: 9892
PE-17 Alternate Work Site Hits: 7739
PE-18 Location Of Information System Components Hits: 7770
PE-19 Information Leakage Hits: 9685
PL-01 Security Planning Policy And Procedures Hits: 17138
PL-02 System Security Plan Hits: 12537
PL-03 System Security Plan Update Hits: 7077
PL-04 Rules Of Behavior Hits: 13897
PL-05 Privacy Impact Assessment Hits: 9376
PL-06 Security-Related Activity Planning Hits: 7339
PS-01 Personnel Security Policy And Procedures Hits: 14139
PS-02 Position Categorization Hits: 8126
PS-03 Personnel Screening Hits: 9016
PS-04 Personnel Termination Hits: 7490
PS-05 Personnel Transfer Hits: 7058
PS-06 Access Agreements Hits: 13074
PS-07 Third-Party Personnel Security Hits: 12368
PS-08 Personnel Sanctions Hits: 8926
RA-01 Risk Assessment Policy And Procedures Hits: 12987
RA-02 Security Categorization Hits: 15927
RA-03 Risk Assessment Hits: 18243
RA-04 Risk Assessment Update Hits: 12426
RA-05 Vulnerability Scanning Hits: 21874
SA-01 System And Services Acquisition Policy And Procedures Hits: 17691
SA-02 Allocation Of Resources Hits: 13988
SA-03 Life Cycle Support Hits: 16164
SA-04 Acquisitions Hits: 15109
SA-05 Information System Documentation Hits: 25725
SA-06 Software Usage Restrictions Hits: 12200
SA-07 User Installed Software Hits: 11838
SA-08 Security Engineering Principles Hits: 19457
SA-09 External Information System Services Hits: 14532
SA-10 Developer Configuration Management Hits: 13313
SA-11 Developer Security Testing Hits: 11461
SC-01 System And Communications Protection Policy And Procedures Hits: 15518
SC-02 Application Partitioning Hits: 14927
SC-03 Security Function Isolation Hits: 18099
SC-04 Information Remnance Hits: 18936
SC-05 Denial Of Service Protection Hits: 18033
SC-06 Resource Priority Hits: 12329
SC-07 Boundary Protection Hits: 30431
SC-08 Transmission Integrity Hits: 20793
SC-09 Transmission Confidentiality Hits: 19463
SC-10 Network Disconnect Hits: 12940
SC-11 Trusted Path Hits: 15655
SC-12 Cryptographic Key Establishment And Management Hits: 17002
SC-13 Use Of Cryptography Hits: 18889
SC-14 Public Access Protections Hits: 10692
SC-15 Collaborative Computing Hits: 13451
SC-16 Transmission Of Security Parameters Hits: 8186
SC-17 Public Key Infrastructure Certificates Hits: 9233
SC-18 Mobile Code Hits: 19361
SC-19 Voice Over Internet Protocol Hits: 7727
SC-20 Secure Name / Address Resolution Service (Authoritative Source) Hits: 18828
SC-21 Secure Name / Address Resolution Service (Recursive Or Caching Resolver) Hits: 10515
SC-22 Architecture And Provisioning For Name / Address Resolution Service Hits: 10346
SC-23 Session Authenticity Hits: 19788
SI-01 System And Information Integrity Policy And Procedures Hits: 14077
SI-02 Flaw Remediation Hits: 27060
SI-03 Malicious Code Protection Hits: 23654
SI-04 Information System Monitoring Tools And Techniques Hits: 26394
SI-05 Security Alerts And Advisories Hits: 14592
SI-06 Security Functionality Verification Hits: 20247
SI-07 Software And Information Integrity Hits: 18759
SI-08 Spam Protection Hits: 9373
SI-09 Information Input Restrictions Hits: 9567
SI-10 Information Accuracy, Completeness, Validity, And Authenticity Hits: 18703
SI-11 Error Handling Hits: 14546
SI-12 Information Output Handling And Retention Hits: 11185