|
controlPM-14
Testing, Training, and Monitoring (PM-14)
Implement a process for ensuring that organizational plans for conducting security and privacy testing, training, and monitoring activities associated with organizational systems: Review testing, training, and monitoring plans for consistency with the organizational risk management strategy and organization-wide priorities for risk response actions.
program-managementgovernancestrategy
Why These Connect
Maps To1
These are equivalent or closely aligned requirements in other frameworks.
Supports15
These related controls work together — a change to one may affect the others.
Related Controls(9)
AT-4Training Records (AT-4)
LMH
CA-7Continuous Monitoring (CA-7)LMH
CP-4Contingency Plan Testing (CP-4)LMH
IR-3Incident Response Testing (IR-3)MH
PM-12Insider Threat Program (PM-12)AT-2Literacy Training and Awareness (AT-2)LMH
AT-3Role-based Training (AT-3)LMH
SI-4System Monitoring (SI-4)LMH
PM-31Continuous Monitoring Strategy (PM-31)Cross-Framework Mappings(1)
ISO 27001ISO/IEC 27001:20221 mappingFinal
NIST OLIR informative reference — SP 800-53 Rev 5 to ISO/IEC 27001:2022