|
controlPM-12
Insider Threat Program (PM-12)
Implement an insider threat program that includes a cross-discipline insider threat incident handling team.
program-managementgovernancestrategy
Why These Connect
Maps To2
These are equivalent or closely aligned requirements in other frameworks.
Supports36
These related controls work together — a change to one may affect the others.
Related Controls(24)
AC-6Least Privilege (AC-6)
MH
AC-23Data Mining Protection (AC-23)AU-7Audit Record Reduction and Report Generation (AU-7)MH
AU-10Non-repudiation (AU-10)H
AU-12Audit Record Generation (AU-12)LMH
AU-13Monitoring for Information Disclosure (AU-13)CA-7Continuous Monitoring (CA-7)LMH
IA-4Identifier Management (IA-4)LMH
IR-4Incident Handling (IR-4)LMH
MP-7Media Use (MP-7)LMH
PE-2Physical Access Authorizations (PE-2)LMH
AT-2Literacy Training and Awareness (AT-2)LMH
AU-6Audit Record Review, Analysis, and Reporting (AU-6)LMH
PM-16Threat Awareness Program (PM-16)PS-3Personnel Screening (PS-3)LMH
PS-4Personnel Termination (PS-4)LMH
PS-5Personnel Transfer (PS-5)LMH
PS-7External Personnel Security (PS-7)LMH
PS-8Personnel Sanctions (PS-8)LMH
SC-7Boundary Protection (SC-7)LMH
SC-38Operations Security (SC-38)SI-4System Monitoring (SI-4)LMH
PM-14Testing, Training, and Monitoring (PM-14)PM-31Continuous Monitoring Strategy (PM-31)Cross-Framework Mappings(2)
ID.RA-03ID.RA-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5
ID.RA-03ID.RA-03Final
NIST OLIR informative reference — Cybersecurity Framework v2.0 to SP 800-53 Rev 5