Supply Chain Management and Transparency and Accountability (STA)
Level N/A
Periodically review the organization's supply chain partners' IT governance policies and procedures.
Parent
Compliance Framework
CCM v4.0.10
Control Number
STA-13
Related
Compliance Framework
CIS v8.0
ISO 27002:2022
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Supply Chain Management and Transparency and Accountability (STA)
Level N/A
Define and implement a process for conducting security assessments periodically for all organizations within the supply chain.
Parent
Compliance Framework
CCM v4.0.10
Control Number
STA-14
Related
Compliance Framework
CIS v8.0
ISO 27002:2022
ISO 27002:2022
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Threat and Vulnerability Management (TVM)
Establish, document, approve, communicate, apply, evaluate and maintain policies and procedures to identify, report and prioritize the remediation of vulnerabilities, in order to protect systems against vulnerability exploitation. Review and update the policies and procedures at least annually.
Parent
Compliance Framework
CCM v4.0.10
Control Number
TVM-01
Related
Compliance Framework
CIS v8.0
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Threat and Vulnerability Management (TVM)
Level N/A
Establish, document, approve, communicate, apply, evaluate and maintain policies and procedures to protect against malware on managed assets. Review and update the policies and procedures at least annually.
Parent
Compliance Framework
CCM v4.0.10
Control Number
TVM-02
Related
Compliance Framework
CIS v8.0
CIS v8.0
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Threat and Vulnerability Management (TVM)
Level N/A
Define, implement and evaluate processes, procedures and technical measures to enable both scheduled and emergency responses to vulnerability identifications, based on the identified risk.
Parent
Compliance Framework
CCM v4.0.10
Control Number
TVM-03
Related
Compliance Framework
CIS v8.0
CIS v8.0
CIS v8.0
ISO 27002:2022
ISO 27002:2022
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Threat and Vulnerability Management (TVM)
Level N/A
Define, implement and evaluate processes, procedures and technical measures to update detection tools, threat signatures, and indicators of compromise on a weekly, or more frequent basis.
Parent
Compliance Framework
CCM v4.0.10
Control Number
TVM-04
Related
Compliance Framework
CIS v8.0
ISO 27002:2022
ISO 27002:2022
ISO 27002:2022
ISO 27002:2022
ISO 27002:2022
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Threat and Vulnerability Management (TVM)
Level N/A
Define, implement and evaluate processes, procedures and technical measures to identify updates for applications which use third party or open source libraries according to the organization's vulnerability management policy.
Parent
Compliance Framework
CCM v4.0.10
Control Number
TVM-05
Related
Compliance Framework
CIS v8.0
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Threat and Vulnerability Management (TVM)
Level N/A
Define, implement and evaluate processes, procedures and technical measures for the periodic performance of penetration testing by independent third parties.
Parent
Compliance Framework
CCM v4.0.10
Control Number
TVM-06
Related
Compliance Framework
CIS v8.0
CIS v8.0
ISO 27002:2022
ISO 27002:2022
ISO 27002:2022
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Threat and Vulnerability Management (TVM)
Level N/A
Define, implement and evaluate processes, procedures and technical measures for the detection of vulnerabilities on organizationally managed assets at least monthly.
Parent
Compliance Framework
CCM v4.0.10
Control Number
TVM-07
Related
Compliance Framework
CIS v8.0
CIS v8.0
CIS v8.0
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
Threat and Vulnerability Management (TVM)
Level N/A
Use a risk-based model for effective prioritization of vulnerability remediation using an industry recognized framework.
Parent
Compliance Framework
CCM v4.0.10
Control Number
TVM-08
Related
Compliance Framework
CIS v8.0
CIS v8.0
CIS v8.0
ISO 27002:2022
ISO 27002:2022
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST 800-53 Rev 5
NIST CSF v1.1
NIST CSF v1.1
NIST CSF v1.1
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Secure Controls Framework 2023.4
Create new POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Create new Exception
When a controller is not technically or procedurally relevant to the organization, set control status to "Not Applicable" and document the justification using an Exception.
Assign to POAM
A POAM must have at least one milestone and assigned to at least one Framework control.
Assign to Exception
Select the Exception that you want to assign to this control
