Audit and Assurance (A&A)
Level N/A
Conduct independent audit and assurance assessments according to relevant standards at least annually.
Parent
Compliance Framework
CCM v4.0.10
Control Number
A&A-02
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Audit and Assurance (A&A)
Level N/A
Perform independent audit and assurance assessments according to risk-based plans and policies.
Parent
Compliance Framework
CCM v4.0.10
Control Number
A&A-03
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Audit and Assurance (A&A)
Level N/A
Verify compliance with all relevant standards, regulations, legal/contractual, and statutory requirements applicable to the audit.
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Audit and Assurance (A&A)
Level N/A
Define and implement an Audit Management process to support audit planning, risk analysis, security control assessment, conclusion, remediation schedules, report generation, and review of past reports and supporting evidence.
Parent
Compliance Framework
CCM v4.0.10
Control Number
A&A-05
Related
Compliance Framework
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Audit and Assurance (A&A)
Level N/A
Establish, document, approve, communicate, apply, evaluate and maintain a risk-based corrective action plan to remediate audit findings, review and report remediation status to relevant stakeholders.
Parent
Compliance Framework
CCM v4.0.10
Control Number
A&A-06
Related
Compliance Framework
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Application and Interface Security (AIS)
Establish, document, approve, communicate, apply, evaluate and maintain policies and procedures for application security to provide guidance to the appropriate planning, delivery and support of the organization's application security capabilities. Review and update the policies and procedures at least annually.
Parent
Compliance Framework
CCM v4.0.10
Control Number
AIS-01
Related
Compliance Framework
CIS v8.0
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Application and Interface Security (AIS)
Establish, document and maintain baseline requirements for securing different applications.
Parent
Compliance Framework
CCM v4.0.10
Control Number
AIS-02
Related
Compliance Framework
CIS v8.0
ISO 27002:2022
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Application and Interface Security (AIS)
Level N/A
Define and implement technical and operational metrics in alignment with business objectives, security requirements, and compliance obligations.
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Application and Interface Security (AIS)
Define and implement a SDLC process for application design, development, deployment, and operation in accordance with security requirements defined by the organization.
Parent
Compliance Framework
CCM v4.0.10
Control Number
AIS-04
Related
Compliance Framework
CIS v8.0
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Control Number
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Application and Interface Security (AIS)
Level N/A
Implement a testing strategy, including criteria for acceptance of new information systems, upgrades and new versions, which provides application security assurance and maintains compliance while enabling organizational speed of delivery goals. Automate when applicable and possible.
Parent
Compliance Framework
CCM v4.0.10
Control Number
AIS-05
Related
Compliance Framework
CIS v8.0
CIS v8.0
ISO 27002:2022
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
