N
|
controlPM-11

Mission and Business Process Definition (PM-11)

Define organizational mission and business processes with consideration for information security and privacy and the resulting risk to organizational operations, organizational assets, individuals, other organizations, and the Nation; and Determine information protection and personally identifiable information processing needs arising from the defined mission and business processes; and Review and revise the mission and business processes [organization-defined].

program-managementgovernancestrategy

Why These Connect

Maps To13

These are equivalent or closely aligned requirements in other frameworks.

Supports12

These related controls work together — a change to one may affect the others.

Related Controls(8)

CP-2Contingency Plan (CP-2)
LMH
PL-2System Security and Privacy Plans (PL-2)
LMH
PM-7Enterprise Architecture (PM-7)PM-8Critical Infrastructure Plan (PM-8)RA-2Security Categorization (RA-2)
LMH
RA-3Risk Assessment (RA-3)
LMH
RA-9Criticality Analysis (RA-9)
MH
SA-2Allocation of Resources (SA-2)
LMH

Cross-Framework Mappings(13)

ID.RA-04ID.RA-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
GV.OC-04GV.OC-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
GV.OC-05GV.OC-05Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
GV.OC-01GV.OC-01Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
DE.AE-04DE.AE-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RC.RP-04RC.RP-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
ISO 27001ISO/IEC 27001:20221 mappingFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022
ID.RA-04ID.RA-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
GV.OC-04GV.OC-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
GV.OC-05GV.OC-05Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
GV.OC-01GV.OC-01Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
DE.AE-04DE.AE-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
RC.RP-04RC.RP-04Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5

See Also

@SP 800-53 Overview⚖Compare Baselines