11.02 Control Catalog

We're on control catalog release 11.02 at the moment, and things have stabilised for this release. The whole control catalog is now in place, but we have ideas to enhance and refine the control format during 2012 to align to the latest release of 800-53. Of course we'd welcome any comments or ideas you may have.

Controls are based on NIST 800-53, and there is a mapping to ISO17799 and COBIT 4.1, with ISO 27002 and PCI DSS available soon.

Using the filter gives you a quick way to hunt through the catalog e.g. 'PS-' gives you all the Personnel Security Family.

Filters
List of articles in category 11.02 Control Catalog
Title Hits
13-05 All Controls Hits: 28284
13-05 Control mapping (NIST 800-53 vs ISO 17799 / PCI-DSS v2 / COBIT 4.1 Hits: 70281
13-05 Controls catalog SQL export Hits: 9864
AC-01 Access Control Policies and Procedures Hits: 44960
AC-02 Account Management Hits: 28823
AC-03 Access Enforcement Hits: 32257
AC-04 Information Flow Enforcement Hits: 33366
AC-05 Separation Of Duties Hits: 18288
AC-06 Least Privilege Hits: 18197
AC-07 Unsuccessful Login Attempts Hits: 17147
AC-08 System Use Notification Hits: 14810
AC-09 Previous Logon Notification Hits: 12827
AC-10 Concurrent Session Control Hits: 14300
AC-11 Session Lock Hits: 16638
AC-12 Session Termination Hits: 15332
AC-13 Supervision And Review -- Access Control Hits: 11217
AC-14 Permitted Actions Without Identification Or Authentication Hits: 10063
AC-15 Automated Marking Hits: 8530
AC-16 Automated Labeling Hits: 7977
AC-17 Remote Access Hits: 16742
AC-18 Wireless Access Restrictions Hits: 15458
AC-19 Access Control For Portable And Mobile Devices Hits: 15173
AC-20 Use Of External Information Systems Hits: 15044
AT-01 Security Awareness And Training Policy And Procedures Hits: 17262
AT-02 Security Awareness Hits: 15485
AT-03 Security Training Hits: 14922
AT-04 Security Training Records Hits: 10292
AT-05 Contacts With Security Groups And Associations Hits: 8486
AU-01 Audit And Accountability Policy And Procedures Hits: 18631
AU-02 Auditable Events Hits: 24364
AU-03 Content Of Audit Records Hits: 14988
AU-04 Audit Storage Capacity Hits: 12180
AU-05 Response To Audit Processing Failures Hits: 15184
AU-06 Audit Monitoring, Analysis, And Reporting Hits: 30966
AU-07 Audit Reduction And Report Generation Hits: 15229
AU-08 Time Stamps Hits: 11866
AU-09 Protection Of Audit Information Hits: 15123
AU-10 Non-Repudiation Hits: 16050
AU-11 Audit Record Retention Hits: 13710
CA-01 Certification, Accreditation, And Security Assessment Policies And Procedures Hits: 15231
CA-02 Security Assessments Hits: 18974
CA-03 Information System Connections Hits: 11171
CA-04 Security Certification Hits: 13915
CA-05 Plan Of Action And Milestones Hits: 10070
CA-06 Security Accreditation Hits: 11703
CA-07 Continuous Monitoring Hits: 17315
CM-01 Configuration Management Policy And Procedures Hits: 16494
CM-02 Baseline Configuration Hits: 19007
CM-03 Configuration Change Control Hits: 17142
CM-04 Monitoring Configuration Changes Hits: 11638
CM-05 Access Restrictions For Change Hits: 14727
CM-06 Configuration Settings Hits: 14168
CM-07 Least Functionality Hits: 21489
CM-08 Information System Component Inventory Hits: 15367
CP-01 Contingency Planning Policy And Procedures Hits: 11860
CP-02 Contingency Plan Hits: 11973
CP-03 Contingency Training Hits: 9953
CP-04 Contingency Plan Testing And Exercises Hits: 17383
CP-05 Contingency Plan Update Hits: 9085
CP-06 Alternate Storage Site Hits: 10349
CP-07 Alternate Processing Site Hits: 12641
CP-08 Telecommunications Services Hits: 7575
CP-09 Information System Backup Hits: 15213
CP-10 Information System Recovery And Reconstitution Hits: 14314
IA-01 Identification And Authentication Policy And Procedures Hits: 17999
IA-02 User Identification And Authentication Hits: 24521
IA-03 Device Identification And Authentication Hits: 20852
IA-04 Identifier Management Hits: 14597
IA-05 Authenticator Management Hits: 17593
IA-06 Authenticator Feedback Hits: 12154
IA-07 Cryptographic Module Authentication Hits: 17888
IR-01 Incident Response Policy And Procedures Hits: 13261
IR-02 Incident Response Training Hits: 11386
IR-03 Incident Response Testing And Exercises Hits: 13746
IR-04 Incident Handling Hits: 20959
IR-05 Incident Monitoring Hits: 11535
IR-06 Incident Reporting Hits: 11460
IR-07 Incident Response Assistance Hits: 11783
MA-01 System Maintenance Policy And Procedures Hits: 11958
MA-02 Controlled Maintenance Hits: 12633
MA-03 Maintenance Tools Hits: 10964
MA-04 Remote Maintenance Hits: 12552
MA-05 Maintenance Personnel Hits: 8975
MA-06 Timely Maintenance Hits: 10060
MP-01 Media Protection Policy And Procedures Hits: 11559
MP-02 Media Access Hits: 11435
MP-03 Media Labeling Hits: 8246
MP-04 Media Storage Hits: 8704
MP-05 Media Transport Hits: 8861
MP-06 Media Sanitization And Disposal Hits: 9734
PE-01 Physical And Environmental Protection Policy And Procedures Hits: 11135
PE-02 Physical Access Authorizations Hits: 9713
PE-03 Physical Access Control Hits: 12502
PE-04 Access Control For Transmission Medium Hits: 9470
PE-05 Access Control For Display Medium Hits: 8654
PE-06 Monitoring Physical Access Hits: 11247
PE-07 Visitor Control Hits: 7661
PE-08 Access Records Hits: 6648
PE-09 Power Equipment And Power Cabling Hits: 9117
PE-10 Emergency Shutoff Hits: 8583
PE-11 Emergency Power Hits: 8217
PE-12 Emergency Lighting Hits: 8363
PE-13 Fire Protection Hits: 8731
PE-14 Temperature And Humidity Controls Hits: 8263
PE-15 Water Damage Protection Hits: 8364
PE-16 Delivery And Removal Hits: 8683
PE-17 Alternate Work Site Hits: 6847
PE-18 Location Of Information System Components Hits: 6866
PE-19 Information Leakage Hits: 8405
PL-01 Security Planning Policy And Procedures Hits: 15333
PL-02 System Security Plan Hits: 10445
PL-03 System Security Plan Update Hits: 6140
PL-04 Rules Of Behavior Hits: 11715
PL-05 Privacy Impact Assessment Hits: 8232
PL-06 Security-Related Activity Planning Hits: 6442
PS-01 Personnel Security Policy And Procedures Hits: 12595
PS-02 Position Categorization Hits: 7159
PS-03 Personnel Screening Hits: 7818
PS-04 Personnel Termination Hits: 6541
PS-05 Personnel Transfer Hits: 6159
PS-06 Access Agreements Hits: 11121
PS-07 Third-Party Personnel Security Hits: 10860
PS-08 Personnel Sanctions Hits: 7913
RA-01 Risk Assessment Policy And Procedures Hits: 11535
RA-02 Security Categorization Hits: 13969
RA-03 Risk Assessment Hits: 15857
RA-04 Risk Assessment Update Hits: 10676
RA-05 Vulnerability Scanning Hits: 18307
SA-01 System And Services Acquisition Policy And Procedures Hits: 15921
SA-02 Allocation Of Resources Hits: 11855
SA-03 Life Cycle Support Hits: 13953
SA-04 Acquisitions Hits: 13071
SA-05 Information System Documentation Hits: 21773
SA-06 Software Usage Restrictions Hits: 10558
SA-07 User Installed Software Hits: 10267
SA-08 Security Engineering Principles Hits: 17508
SA-09 External Information System Services Hits: 12865
SA-10 Developer Configuration Management Hits: 11480
SA-11 Developer Security Testing Hits: 10076
SC-01 System And Communications Protection Policy And Procedures Hits: 13942
SC-02 Application Partitioning Hits: 12980
SC-03 Security Function Isolation Hits: 15630
SC-04 Information Remnance Hits: 16730
SC-05 Denial Of Service Protection Hits: 15456
SC-06 Resource Priority Hits: 10582
SC-07 Boundary Protection Hits: 26372
SC-08 Transmission Integrity Hits: 17954
SC-09 Transmission Confidentiality Hits: 16775
SC-10 Network Disconnect Hits: 11146
SC-11 Trusted Path Hits: 13600
SC-12 Cryptographic Key Establishment And Management Hits: 14749
SC-13 Use Of Cryptography Hits: 15684
SC-14 Public Access Protections Hits: 9398
SC-15 Collaborative Computing Hits: 12047
SC-16 Transmission Of Security Parameters Hits: 7150
SC-17 Public Key Infrastructure Certificates Hits: 8043
SC-18 Mobile Code Hits: 16436
SC-19 Voice Over Internet Protocol Hits: 6796
SC-20 Secure Name / Address Resolution Service (Authoritative Source) Hits: 15983
SC-21 Secure Name / Address Resolution Service (Recursive Or Caching Resolver) Hits: 9179
SC-22 Architecture And Provisioning For Name / Address Resolution Service Hits: 8771
SC-23 Session Authenticity Hits: 17108
SI-01 System And Information Integrity Policy And Procedures Hits: 12605
SI-02 Flaw Remediation Hits: 22638
SI-03 Malicious Code Protection Hits: 20992
SI-04 Information System Monitoring Tools And Techniques Hits: 23085
SI-05 Security Alerts And Advisories Hits: 12390
SI-06 Security Functionality Verification Hits: 17548
SI-07 Software And Information Integrity Hits: 16624
SI-08 Spam Protection Hits: 7991
SI-09 Information Input Restrictions Hits: 8229
SI-10 Information Accuracy, Completeness, Validity, And Authenticity Hits: 16937
SI-11 Error Handling Hits: 12398
SI-12 Information Output Handling And Retention Hits: 9852