CyberStrikeus/CyberStrike - Page 113

sp-800-171-03-05-10-030510

03.05.10

incident-handling-03-06-01-incident-handling

Incident Handling

incident-response-plan-03-06-05-incident-response-plan

Develop an incident response plan that: Provides the organization with a roadmap for implementing its incident response capability, Describes the stru

incident-response-testing-03-06-03-incident-response-testing

Incident Response Testing

incident-response-training-03-06-04-incident-response-training

Provide incident response training to system users consistent with assigned roles and responsibilities: Within [organization-defined] of assuming an i

maintenance-personnel-03-07-06-maintenance-personnel

Establish a process for maintenance personnel authorization.

maintenance-tools-03-07-04-maintenance-tools

Approve, control, and monitor the use of system maintenance tools.

nonlocal-maintenance-03-07-05-nonlocal-maintenance

Approve and monitor nonlocal maintenance and diagnostic activities.

sp-800-171-03-07-01-030701

03.07.01

sp-800-171-03-07-02-030702

03.07.02

sp-800-171-03-07-03-030703

03.07.03

media-access-03-08-02-media-access

Media Access

media-marking-03-08-04-media-marking

Media Marking

media-sanitization-03-08-03-media-sanitization

Media Sanitization

media-storage-03-08-01-media-storage

Media Storage

media-transport-03-08-05-media-transport

Protect and control system media that contain CUI during transport outside of controlled areas.

media-use-03-08-07-media-use

Restrict or prohibit the use of [organization-defined].

sp-800-171-03-08-06-030806

03.08.06

sp-800-171-03-08-08-030808

03.08.08

personnel-screening-03-09-01-personnel-screening

Screen individuals prior to authorizing access to the system.

alternate-work-site-03-10-06-alternate-work-site

Determine alternate work sites allowed for use by employees.

monitoring-physical-access-03-10-02-monitoring-physical-access

Monitor physical access to the facility where the system resides to detect and respond to physical security incidents.

physical-access-control-03-10-07-physical-access-control

Enforce physical access authorizations at entry and exit points to the facility where the system resides by: Verifying individual physical access auth

sp-800-171-03-10-03-031003

03.10.03

sp-800-171-03-10-04-031004

03.10.04

sp-800-171-03-10-05-031005

03.10.05

risk-assessment-03-11-01-risk-assessment

Assess the risk (including supply chain risk) of unauthorized disclosure resulting from the processing, storage, or transmission of CUI.

risk-response-03-11-04-risk-response

Risk Response

sp-800-171-03-11-03-031103

03.11.03

continuous-monitoring-03-12-03-continuous-monitoring

Continuous Monitoring

information-exchange-03-12-05-information-exchange

Approve and manage the exchange of CUI between the system and other systems using [organization-defined].

security-assessment-03-12-01-security-assessment

Security Assessment

sp-800-171-03-12-04-031204

03.12.04

boundary-protection-03-13-01-boundary-protection

Monitor and control communications at external managed interfaces to the system and key internal managed interfaces within the system.

cryptographic-protection-03-13-11-cryptographic-protection

Cryptographic Protection

mobile-code-03-13-13-mobile-code

Define acceptable mobile code and mobile code technologies.

network-disconnect-03-13-09-network-disconnect

Network Disconnect

session-authenticity-03-13-15-session-authenticity

Session Authenticity

sp-800-171-03-13-02-031302

03.13.02

sp-800-171-03-13-03-031303

03.13.03