Eleos | Home

Risk Management

Supply Chain Risk Management (SCRM) Plan

Level N/A

Mechanisms exist to develop a plan for Supply Chain Risk Management (SCRM) associated with the development, acquisition, maintenance and disposal of systems, system components and services, including documenting selected mitigating actions and monitoring performance against those plans.

Parent

Compliance Framework

Secure Controls Framework 2023.4

Control Number

RSK-09

Related

Compliance Framework

CIS v8.0

CCM v4.0.10

ISO 27002:2022

NIST 800-53 Rev 5

NIST CSF v1.1

SEC Regulation S-K 17.2.229 v2024.01.02

CMMC v2.11

Control Number

15.2

STA-02

STA-03

STA-07

STA-08

STA-12

STA-13

5.21

PM-29

PM-30

SR-2

SR-7

ID.SC-1

ID.SC-3

229.106(b)(1)(iii)

RA.L3-3.11.7e

Solutions
Community

Risk Management

Supply Chain Risk Assessment

Level N/A

Mechanisms exist to periodically assess supply chain risks associated with systems, system components and services.

Parent

Compliance Framework

Secure Controls Framework 2023.4

Control Number

RSK-09.1

Related

Compliance Framework

CCM v4.0.10

NIST 800-53 Rev 5

SEC Regulation S-K 17.2.229 v2024.01.02

CMMC v2.11

Control Number

STA-07

STA-08

STA-13

STA-14

RA-3(1)

229.106(b)(1)(iii)

RA.L3-3.11.6e

Solutions
Community

Risk Management

AI & Autonomous Technologies Supply Chain Impacts

Level N/A

Mechanisms exist to address Artificial Intelligence (AI) and Autonomous Technologies (AAT)-related risks and benefits arising from the organization's supply chain, including third-party software and data.

Solutions
Community

Risk Management

Data Protection Impact Assessment (DPIA)

Level N/A

Mechanisms exist to conduct a Data Protection Impact Assessment (DPIA) on systems, applications and services that store, process and/or transmit Personal Data (PD) to identify and remediate reasonably-expected risks.

Parent

Compliance Framework

Secure Controls Framework 2023.4

Control Number

RSK-10

Related

Compliance Framework

CCM v4.0.10

ISO 27002:2022

NIST 800-53 Rev 5

CERT RMM v1.2

Control Number

DSP-09

STA-14

5.33

RA-8

OPD:SG1.SP1

RISK:SG5.SP1

RISK:SG5.SP2

Solutions
Community

Risk Management

Risk Monitoring

Level N/A

Mechanisms exist to ensure risk monitoring as an integral part of the continuous monitoring strategy that includes monitoring the effectiveness of cybersecurity & data privacy controls, compliance and change management.

Parent

Compliance Framework

Secure Controls Framework 2023.4

Control Number

RSK-11

Related

Compliance Framework

NIST 800-53 Rev 5

Control Number

CA-7(4)

Solutions
Community

Risk Management

Risk Culture

Level N/A

Mechanisms exist to ensure teams are committed to a culture that considers and communicates technology-related risk.

Solutions
Community

Secure Engineering & Architecture

Secure Engineering Principles

Level N/A

Mechanisms exist to facilitate the implementation of industry-recognized cybersecurity & data privacy practices in the specification, design, development, implementation and modification of systems and services.

Parent

Compliance Framework

Secure Controls Framework 2023.4

Control Number

SEA-01

Related

Compliance Framework

CIS v8.0

CCM v4.0.10

ISO 27002:2022

NIST 800-53 Rev 5

NIST CSF v1.1

CERT RMM v1.2

CMMC v2.11

Control Number

12.2

12.6

16.1

DSP-07

DSP-08

IVS-01

IVS-09

8.12

8.26

8.27

PT-1

SA-8

SC-1

SC-7(18)

SI-1

SA-15(5)

PR.IP-1

PR.PT-5

EXD:SG3.SP2

EXD:SG3.SP4

EXD:SG4.SP1

RRD:SG2.SP1

RRD:SG3.SP2

RRD:SG3.SP3

RTSE:SG1.SP2

RTSE:SG1.SP3

TM:SG1.SP2

TM:SG2.SP1

SC.L1-b.1.x

SC.L2-3.13.2

SI.L3-3.14.3e

Solutions
Community

Secure Engineering & Architecture

Centralized Management of Cybersecurity & Data Privacy Controls

Level N/A

Mechanisms exist to centrally-manage the organization-wide management and implementation of cybersecurity & data privacy controls and related processes.

Parent

Compliance Framework

Secure Controls Framework 2023.4

Control Number

SEA-01.1

Related

Compliance Framework

CIS v8.0

ISO 27002:2022

NIST 800-53 Rev 5

CERT RMM v1.2

Control Number

16.1

8.12

PL-9

EF:SG2.SP2

Solutions
Community

Secure Engineering & Architecture

Achieving Resilience Requirements

Level N/A

Mechanisms exist to achieve resilience requirements in normal and adverse situations.

Solutions
Community

Secure Engineering & Architecture

Alignment With Enterprise Architecture

Level N/A

Mechanisms exist to develop an enterprise architecture, aligned with industry-recognized leading practices, with consideration for cybersecurity & data privacy principles that addresses risk to organizational operations, assets, individuals, other organizations.

Parent

Compliance Framework

Secure Controls Framework 2023.4

Control Number

SEA-02

Related

Compliance Framework

CIS v8.0

ISO 27002:2022

NIST 800-53 Rev 5

CERT RMM v1.2

Control Number

12.2

16.1

5.8

8.26

PL-8

PM-7

CTRL:SG2.SP1

EC:SG3.SP1

EC:SG3.SP2

EF:SG1.SP2

EF:SG1.SP3

EF:SG2.SP1

EXD:SG1.SP1

KIM:SG3.SP1

PM:SG2.SP1

PM:SG2.SP2

RRD:SG2.SP2

RRM:SG1.SP1

RRM:SG1.SP5

RTSE:SG1.SP3

RTSE:SG2.SP2

SC:SG1.SP2

TM:SG1.SP2

TM:SG2.SP2

TM:SG3.SP1

TM:SG3.SP2

Solutions
Community

Risk Management

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Risk Management

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Risk Management

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Risk Management

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Risk Management

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Risk Management

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Secure Engineering & Architecture

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Secure Engineering & Architecture

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Secure Engineering & Architecture

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Secure Engineering & Architecture

Create new POAM

Create new Exception

Assign to POAM

Assign to Exception

Organization Passcode

Only share this code with people you trust. Users will become a member of your organization and view your SSP and reports.