11.02 Control Catalog

We're on control catalog release 11.02 at the moment, and things have stabilised for this release. The whole control catalog is now in place, but we have ideas to enhance and refine the control format during 2012 to align to the latest release of 800-53. Of course we'd welcome any comments or ideas you may have.

Controls are based on NIST 800-53, and there is a mapping to ISO17799 and COBIT 4.1, with ISO 27002 and PCI DSS available soon.

Using the filter gives you a quick way to hunt through the catalog e.g. 'PS-' gives you all the Personnel Security Family.

Filters
List of articles in category 11.02 Control Catalog
Title Hits
13-05 All Controls Hits: 30027
13-05 Control mapping (NIST 800-53 vs ISO 17799 / PCI-DSS v2 / COBIT 4.1 Hits: 72882
13-05 Controls catalog SQL export Hits: 10485
AC-01 Access Control Policies and Procedures Hits: 47210
AC-02 Account Management Hits: 31254
AC-03 Access Enforcement Hits: 34448
AC-04 Information Flow Enforcement Hits: 35750
AC-05 Separation Of Duties Hits: 19539
AC-06 Least Privilege Hits: 19434
AC-07 Unsuccessful Login Attempts Hits: 18221
AC-08 System Use Notification Hits: 15797
AC-09 Previous Logon Notification Hits: 13490
AC-10 Concurrent Session Control Hits: 15016
AC-11 Session Lock Hits: 17558
AC-12 Session Termination Hits: 16403
AC-13 Supervision And Review -- Access Control Hits: 12036
AC-14 Permitted Actions Without Identification Or Authentication Hits: 10668
AC-15 Automated Marking Hits: 9269
AC-16 Automated Labeling Hits: 8576
AC-17 Remote Access Hits: 17757
AC-18 Wireless Access Restrictions Hits: 16339
AC-19 Access Control For Portable And Mobile Devices Hits: 16091
AC-20 Use Of External Information Systems Hits: 15911
AT-01 Security Awareness And Training Policy And Procedures Hits: 18115
AT-02 Security Awareness Hits: 16427
AT-03 Security Training Hits: 15866
AT-04 Security Training Records Hits: 10951
AT-05 Contacts With Security Groups And Associations Hits: 8978
AU-01 Audit And Accountability Policy And Procedures Hits: 19390
AU-02 Auditable Events Hits: 25930
AU-03 Content Of Audit Records Hits: 16031
AU-04 Audit Storage Capacity Hits: 12936
AU-05 Response To Audit Processing Failures Hits: 16021
AU-06 Audit Monitoring, Analysis, And Reporting Hits: 33394
AU-07 Audit Reduction And Report Generation Hits: 15959
AU-08 Time Stamps Hits: 12713
AU-09 Protection Of Audit Information Hits: 16287
AU-10 Non-Repudiation Hits: 16819
AU-11 Audit Record Retention Hits: 14509
CA-01 Certification, Accreditation, And Security Assessment Policies And Procedures Hits: 16143
CA-02 Security Assessments Hits: 20030
CA-03 Information System Connections Hits: 11824
CA-04 Security Certification Hits: 14792
CA-05 Plan Of Action And Milestones Hits: 10696
CA-06 Security Accreditation Hits: 12439
CA-07 Continuous Monitoring Hits: 18366
CM-01 Configuration Management Policy And Procedures Hits: 17335
CM-02 Baseline Configuration Hits: 20245
CM-03 Configuration Change Control Hits: 18635
CM-04 Monitoring Configuration Changes Hits: 12520
CM-05 Access Restrictions For Change Hits: 15530
CM-06 Configuration Settings Hits: 15972
CM-07 Least Functionality Hits: 22624
CM-08 Information System Component Inventory Hits: 16515
CP-01 Contingency Planning Policy And Procedures Hits: 12416
CP-02 Contingency Plan Hits: 12696
CP-03 Contingency Training Hits: 10528
CP-04 Contingency Plan Testing And Exercises Hits: 18225
CP-05 Contingency Plan Update Hits: 9642
CP-06 Alternate Storage Site Hits: 10969
CP-07 Alternate Processing Site Hits: 13239
CP-08 Telecommunications Services Hits: 8057
CP-09 Information System Backup Hits: 16110
CP-10 Information System Recovery And Reconstitution Hits: 15105
IA-01 Identification And Authentication Policy And Procedures Hits: 18899
IA-02 User Identification And Authentication Hits: 26111
IA-03 Device Identification And Authentication Hits: 22143
IA-04 Identifier Management Hits: 15910
IA-05 Authenticator Management Hits: 18510
IA-06 Authenticator Feedback Hits: 13099
IA-07 Cryptographic Module Authentication Hits: 18872
IR-01 Incident Response Policy And Procedures Hits: 13895
IR-02 Incident Response Training Hits: 12045
IR-03 Incident Response Testing And Exercises Hits: 14377
IR-04 Incident Handling Hits: 22403
IR-05 Incident Monitoring Hits: 12271
IR-06 Incident Reporting Hits: 12172
IR-07 Incident Response Assistance Hits: 12477
MA-01 System Maintenance Policy And Procedures Hits: 12507
MA-02 Controlled Maintenance Hits: 13425
MA-03 Maintenance Tools Hits: 11554
MA-04 Remote Maintenance Hits: 13392
MA-05 Maintenance Personnel Hits: 9512
MA-06 Timely Maintenance Hits: 10619
MP-01 Media Protection Policy And Procedures Hits: 12094
MP-02 Media Access Hits: 12269
MP-03 Media Labeling Hits: 8773
MP-04 Media Storage Hits: 9240
MP-05 Media Transport Hits: 9375
MP-06 Media Sanitization And Disposal Hits: 10300
PE-01 Physical And Environmental Protection Policy And Procedures Hits: 11671
PE-02 Physical Access Authorizations Hits: 10293
PE-03 Physical Access Control Hits: 13395
PE-04 Access Control For Transmission Medium Hits: 9947
PE-05 Access Control For Display Medium Hits: 9178
PE-06 Monitoring Physical Access Hits: 11870
PE-07 Visitor Control Hits: 8089
PE-08 Access Records Hits: 7016
PE-09 Power Equipment And Power Cabling Hits: 9617
PE-10 Emergency Shutoff Hits: 9129
PE-11 Emergency Power Hits: 8734
PE-12 Emergency Lighting Hits: 8863
PE-13 Fire Protection Hits: 9240
PE-14 Temperature And Humidity Controls Hits: 8736
PE-15 Water Damage Protection Hits: 8934
PE-16 Delivery And Removal Hits: 9178
PE-17 Alternate Work Site Hits: 7211
PE-18 Location Of Information System Components Hits: 7208
PE-19 Information Leakage Hits: 8893
PL-01 Security Planning Policy And Procedures Hits: 16014
PL-02 System Security Plan Hits: 11292
PL-03 System Security Plan Update Hits: 6481
PL-04 Rules Of Behavior Hits: 12571
PL-05 Privacy Impact Assessment Hits: 8672
PL-06 Security-Related Activity Planning Hits: 6785
PS-01 Personnel Security Policy And Procedures Hits: 13209
PS-02 Position Categorization Hits: 7545
PS-03 Personnel Screening Hits: 8333
PS-04 Personnel Termination Hits: 6935
PS-05 Personnel Transfer Hits: 6506
PS-06 Access Agreements Hits: 11877
PS-07 Third-Party Personnel Security Hits: 11470
PS-08 Personnel Sanctions Hits: 8301
RA-01 Risk Assessment Policy And Procedures Hits: 12108
RA-02 Security Categorization Hits: 14729
RA-03 Risk Assessment Hits: 16786
RA-04 Risk Assessment Update Hits: 11332
RA-05 Vulnerability Scanning Hits: 19785
SA-01 System And Services Acquisition Policy And Procedures Hits: 16647
SA-02 Allocation Of Resources Hits: 12702
SA-03 Life Cycle Support Hits: 14847
SA-04 Acquisitions Hits: 13875
SA-05 Information System Documentation Hits: 23328
SA-06 Software Usage Restrictions Hits: 11185
SA-07 User Installed Software Hits: 10871
SA-08 Security Engineering Principles Hits: 18250
SA-09 External Information System Services Hits: 13546
SA-10 Developer Configuration Management Hits: 12157
SA-11 Developer Security Testing Hits: 10605
SC-01 System And Communications Protection Policy And Procedures Hits: 14605
SC-02 Application Partitioning Hits: 13750
SC-03 Security Function Isolation Hits: 16576
SC-04 Information Remnance Hits: 17614
SC-05 Denial Of Service Protection Hits: 16474
SC-06 Resource Priority Hits: 11259
SC-07 Boundary Protection Hits: 28010
SC-08 Transmission Integrity Hits: 19083
SC-09 Transmission Confidentiality Hits: 17846
SC-10 Network Disconnect Hits: 11814
SC-11 Trusted Path Hits: 14400
SC-12 Cryptographic Key Establishment And Management Hits: 15611
SC-13 Use Of Cryptography Hits: 16986
SC-14 Public Access Protections Hits: 9946
SC-15 Collaborative Computing Hits: 12626
SC-16 Transmission Of Security Parameters Hits: 7577
SC-17 Public Key Infrastructure Certificates Hits: 8553
SC-18 Mobile Code Hits: 17641
SC-19 Voice Over Internet Protocol Hits: 7144
SC-20 Secure Name / Address Resolution Service (Authoritative Source) Hits: 17050
SC-21 Secure Name / Address Resolution Service (Recursive Or Caching Resolver) Hits: 9663
SC-22 Architecture And Provisioning For Name / Address Resolution Service Hits: 9400
SC-23 Session Authenticity Hits: 18116
SI-01 System And Information Integrity Policy And Procedures Hits: 13225
SI-02 Flaw Remediation Hits: 24544
SI-03 Malicious Code Protection Hits: 22132
SI-04 Information System Monitoring Tools And Techniques Hits: 24265
SI-05 Security Alerts And Advisories Hits: 13098
SI-06 Security Functionality Verification Hits: 18610
SI-07 Software And Information Integrity Hits: 17427
SI-08 Spam Protection Hits: 8524
SI-09 Information Input Restrictions Hits: 8815
SI-10 Information Accuracy, Completeness, Validity, And Authenticity Hits: 17639
SI-11 Error Handling Hits: 13320
SI-12 Information Output Handling And Retention Hits: 10425