KSI ↔ NIST 800-53 crosswalk explorer
Free searchable crosswalk between FedRAMP 20x Key Security Indicators and NIST SP 800-53 Rev5 controls, with the official related-control citation for every mapping. Client-side, no signup.
558 official related-control mappings across 45 Key Security Indicators and 302 distinct NIST SP 800-53 Rev5 controls. Mappings are the official “Related SP 800-53 Controls” citations from the FedRAMP 20x KSI reference (retrieved 2026-09-27); source. Indicators with no official citation are shown as provisional. scm.cc is not a 3PAO and makes no certification claim.
559 rows
| KSI indicator | Family | NIST SP 800-53 Rev5 | Source |
|---|---|---|---|
| KSI-CED-RATReviewing All Training | Cybersecurity Education | AT-2 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | AT-2.2 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | AT-2.3 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | AT-3 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | AT-3.5 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | AT-4 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | CM-11 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | CP-3 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | CP-3.1 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | IR-2 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | IR-2.1 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | IR-2.2 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | IR-2.3 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | IR-9.2 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | IR-9.4 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | PL-4 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | PL-4.1 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | PS-6 | Official related control |
| KSI-CED-RATReviewing All Training | Cybersecurity Education | SR-11.1 | Official related control |
| KSI-CMT-LMCLogging Changes | Change Management | AU-2 | Official related control |
| KSI-CMT-LMCLogging Changes | Change Management | CA-7.4 | Official related control |
| KSI-CMT-LMCLogging Changes | Change Management | CM-3 | Official related control |
| KSI-CMT-LMCLogging Changes | Change Management | CM-3.1 | Official related control |
| KSI-CMT-LMCLogging Changes | Change Management | CM-3.2 | Official related control |
| KSI-CMT-LMCLogging Changes | Change Management | CM-3.6 | Official related control |
| KSI-CMT-LMCLogging Changes | Change Management | CM-4.2 | Official related control |
| KSI-CMT-LMCLogging Changes | Change Management | CM-6 | Official related control |
| KSI-CMT-LMCLogging Changes | Change Management | CM-8.3 | Official related control |
| KSI-CMT-RMVRedeploying vs Modifying | Change Management | CM-2 | Official related control |
| KSI-CMT-RMVRedeploying vs Modifying | Change Management | CM-3 | Official related control |
| KSI-CMT-RMVRedeploying vs Modifying | Change Management | CM-5 | Official related control |
| KSI-CMT-RMVRedeploying vs Modifying | Change Management | CM-6 | Official related control |
| KSI-CMT-RMVRedeploying vs Modifying | Change Management | CM-7 | Official related control |
| KSI-CMT-RMVRedeploying vs Modifying | Change Management | CM-8.1 | Official related control |
| KSI-CMT-RMVRedeploying vs Modifying | Change Management | SI-3 | Official related control |
| KSI-CMT-RVPReviewing Change Procedures | Change Management | CM-3 | Official related control |
| KSI-CMT-RVPReviewing Change Procedures | Change Management | CM-3.2 | Official related control |
| KSI-CMT-RVPReviewing Change Procedures | Change Management | CM-3.4 | Official related control |
| KSI-CMT-RVPReviewing Change Procedures | Change Management | CM-5 | Official related control |
| KSI-CMT-RVPReviewing Change Procedures | Change Management | CM-7.1 | Official related control |
| KSI-CMT-RVPReviewing Change Procedures | Change Management | CM-9 | Official related control |
| KSI-CMT-VTDValidating Throughout Deployment | Change Management | CM-3 | Official related control |
| KSI-CMT-VTDValidating Throughout Deployment | Change Management | CM-3.2 | Official related control |
| KSI-CMT-VTDValidating Throughout Deployment | Change Management | CM-4.2 | Official related control |
| KSI-CMT-VTDValidating Throughout Deployment | Change Management | CM-6.2 | Official related control |
| KSI-CMT-VTDValidating Throughout Deployment | Change Management | IR-9.4 | Official related control |
| KSI-CMT-VTDValidating Throughout Deployment | Change Management | SI-2 | Official related control |
| KSI-CNA-DFPDefining Functionality and Privileges | Cloud Native Architecture | CM-2 | Official related control |
| KSI-CNA-DFPDefining Functionality and Privileges | Cloud Native Architecture | CM-8.4 | Official related control |
| KSI-CNA-DFPDefining Functionality and Privileges | Cloud Native Architecture | CP-10.4 | Official related control |
| KSI-CNA-DFPDefining Functionality and Privileges | Cloud Native Architecture | IR-9.4 | Official related control |
| KSI-CNA-DFPDefining Functionality and Privileges | Cloud Native Architecture | SI-3 | Official related control |
| KSI-CNA-EISEnforcing Intended State | Cloud Native Architecture | CA-2.1 | Official related control |
| KSI-CNA-EISEnforcing Intended State | Cloud Native Architecture | CM-11 | Official related control |
| KSI-CNA-EISEnforcing Intended State | Cloud Native Architecture | CM-6.2 | Official related control |
| KSI-CNA-EISEnforcing Intended State | Cloud Native Architecture | CP-10.4 | Official related control |
| KSI-CNA-EISEnforcing Intended State | Cloud Native Architecture | IR-9.4 | Official related control |
| KSI-CNA-EISEnforcing Intended State | Cloud Native Architecture | SC-24 | Official related control |
| KSI-CNA-EISEnforcing Intended State | Cloud Native Architecture | SC-7.18 | Official related control |
| KSI-CNA-EISEnforcing Intended State | Cloud Native Architecture | SI-4.22 | Official related control |
| KSI-CNA-EISEnforcing Intended State | Cloud Native Architecture | SI-7 | Official related control |
| KSI-CNA-EISEnforcing Intended State | Cloud Native Architecture | SI-7.1 | Official related control |
| KSI-CNA-EISEnforcing Intended State | Cloud Native Architecture | SI-7.5 | Official related control |
| KSI-CNA-EISEnforcing Intended State | Cloud Native Architecture | SI-7.7 | Official related control |
| KSI-CNA-IBPImplementing Best Practices | Cloud Native Architecture | AC-17.3 | Official related control |
| KSI-CNA-IBPImplementing Best Practices | Cloud Native Architecture | CM-2 | Official related control |
| KSI-CNA-IBPImplementing Best Practices | Cloud Native Architecture | PL-10 | Official related control |
| KSI-CNA-IBPImplementing Best Practices | Cloud Native Architecture | SC-7.18 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | AC-17.3 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | AC-18.1 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | AC-18.3 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | AC-20.1 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | CA-9 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | SC-10 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | SC-7.18 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | SC-7.3 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | SC-7.4 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | SC-7.5 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | SC-7.8 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | SC-8 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | SI-10 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | SI-11 | Official related control |
| KSI-CNA-MATMinimizing Attack Surface | Cloud Native Architecture | SI-16 | Official related control |
| KSI-CNA-OFAOptimizing for Availability | Cloud Native Architecture | CP-2.5 | Official related control |
| KSI-CNA-OFAOptimizing for Availability | Cloud Native Architecture | SC-12.1 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | AC-17.3 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | CA-9 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | CM-7.1 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | SC-7.10 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | SC-7.18 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | SC-7.20 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | SC-7.21 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | SC-7.5 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | SI-10 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | SI-4.11 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | SI-4.18 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | SI-4.4 | Official related control |
| KSI-CNA-RNTRestricting Network Traffic | Cloud Native Architecture | SI-8 | Official related control |
| KSI-CNA-RVPReviewing Protections | Cloud Native Architecture | IR-4.2 | Official related control |
| KSI-CNA-RVPReviewing Protections | Cloud Native Architecture | SC-5 | Official related control |
| KSI-CNA-RVPReviewing Protections | Cloud Native Architecture | SC-7.18 | Official related control |
| KSI-CNA-RVPReviewing Protections | Cloud Native Architecture | SI-8 | Official related control |
| KSI-CNA-RVPReviewing Protections | Cloud Native Architecture | SI-8.2 | Official related control |
| KSI-CNA-ULNUsing Logical Networking | Cloud Native Architecture | AC-12 | Official related control |
| KSI-CNA-ULNUsing Logical Networking | Cloud Native Architecture | AC-17.3 | Official related control |
| KSI-CNA-ULNUsing Logical Networking | Cloud Native Architecture | AC-4.21 | Official related control |
| KSI-CNA-ULNUsing Logical Networking | Cloud Native Architecture | CA-9 | Official related control |
| KSI-CNA-ULNUsing Logical Networking | Cloud Native Architecture | CM-11 | Official related control |
| KSI-CNA-ULNUsing Logical Networking | Cloud Native Architecture | SC-10 | Official related control |
| KSI-CNA-ULNUsing Logical Networking | Cloud Native Architecture | SC-4 | Official related control |
| KSI-CNA-ULNUsing Logical Networking | Cloud Native Architecture | SC-7 | Official related control |
| KSI-CNA-ULNUsing Logical Networking | Cloud Native Architecture | SC-7.20 | Official related control |
| KSI-CNA-ULNUsing Logical Networking | Cloud Native Architecture | SC-7.21 | Official related control |
| KSI-CNA-ULNUsing Logical Networking | Cloud Native Architecture | SC-7.7 | Official related control |
| KSI-CNA-ULNUsing Logical Networking | Cloud Native Architecture | SC-8 | Official related control |
| KSI-IAM-AAMAutomating Account Management | Identity and Access Management | AC-2.13 | Official related control |
| KSI-IAM-AAMAutomating Account Management | Identity and Access Management | AC-2.2 | Official related control |
| KSI-IAM-AAMAutomating Account Management | Identity and Access Management | AC-2.3 | Official related control |
| KSI-IAM-AAMAutomating Account Management | Identity and Access Management | AC-6.7 | Official related control |
| KSI-IAM-AAMAutomating Account Management | Identity and Access Management | IA-12 | Official related control |
| KSI-IAM-AAMAutomating Account Management | Identity and Access Management | IA-12.2 | Official related control |
| KSI-IAM-AAMAutomating Account Management | Identity and Access Management | IA-12.3 | Official related control |
| KSI-IAM-AAMAutomating Account Management | Identity and Access Management | IA-12.5 | Official related control |
| KSI-IAM-AAMAutomating Account Management | Identity and Access Management | IA-4.4 | Official related control |
| KSI-IAM-AAMAutomating Account Management | Identity and Access Management | IA-8.4 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | AC-2 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | AC-3 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-2 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-2.1 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-2.2 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-2.6 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-2.8 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-5 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-5.1 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-5.2 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-5.6 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-5.8 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-6 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-8 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-8.2 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | IA-8.4 | Official related control |
| KSI-IAM-APMAdopting Passwordless Methods | Identity and Access Management | SC-23 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-12 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-14 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-17 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-17.1 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-17.2 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-17.3 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-18.4 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-2.11 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-2.5 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-2.6 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-2.7 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-2.9 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-20 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-20.1 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-21 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-3 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-4 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-6 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-6.3 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AC-6.8 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AU-12.3 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | AU-6.7 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | CM-2.7 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | CM-5.1 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | CM-5.5 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | CM-7.2 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | CM-9 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | IA-11 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | IA-2 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | IA-3 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | IA-4 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | IA-4.4 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | IA-5.2 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | IA-5.6 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | IR-4.6 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | IR-9.4 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | PS-2 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | PS-3 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | PS-4 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | PS-5 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | PS-6 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | RA-5.5 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | SC-2 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | SC-20 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | SC-21 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | SC-22 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | SC-23 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | SC-3 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | SC-39 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | SC-4 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | SI-3 | Official related control |
| KSI-IAM-ELPEnsuring Least Privilege | Identity and Access Management | SI-4.19 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-17 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-17.4 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-2 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-2.1 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-2.11 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-2.2 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-2.3 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-2.4 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-2.6 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-2.7 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-20.1 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-21 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-3 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-4 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-5 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-6 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-6.1 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-6.10 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-6.2 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-6.3 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-6.5 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-6.7 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-6.8 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-6.9 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AC-7 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AU-10 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AU-12.3 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | AU-9.4 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | CA-3.6 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | CM-5 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | CM-5.1 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | CM-5.5 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | CM-7 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | CM-7.2 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | CM-7.5 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | CM-9 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | IA-4 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | IA-4.4 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | IA-7 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | IR-4.6 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | PS-2 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | PS-3 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | PS-4 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | PS-5 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | PS-6 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | PS-9 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | RA-5.5 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | SC-2 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | SC-23 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | SC-3 | Official related control |
| KSI-IAM-JITAuthorizing Just-in-Time | Identity and Access Management | SC-39 | Official related control |
| KSI-IAM-SNUSecuring Non-User Authentication | Identity and Access Management | AC-2 | Official related control |
| KSI-IAM-SNUSecuring Non-User Authentication | Identity and Access Management | AC-2.2 | Official related control |
| KSI-IAM-SNUSecuring Non-User Authentication | Identity and Access Management | AC-2.9 | Official related control |
| KSI-IAM-SNUSecuring Non-User Authentication | Identity and Access Management | AC-4 | Official related control |
| KSI-IAM-SNUSecuring Non-User Authentication | Identity and Access Management | AC-6.5 | Official related control |
| KSI-IAM-SNUSecuring Non-User Authentication | Identity and Access Management | AU-10 | Official related control |
| KSI-IAM-SNUSecuring Non-User Authentication | Identity and Access Management | IA-2.5 | Official related control |
| KSI-IAM-SNUSecuring Non-User Authentication | Identity and Access Management | IA-3 | Official related control |
| KSI-IAM-SNUSecuring Non-User Authentication | Identity and Access Management | IA-5.2 | Official related control |
| KSI-IAM-SNUSecuring Non-User Authentication | Identity and Access Management | RA-5.5 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | AC-2 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | AC-2.1 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | AC-2.11 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | AC-2.12 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | AC-2.13 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | AC-2.3 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | AC-7 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | AU-6.5 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | CM-5.1 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | CM-6.2 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | IR-4.2 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | IR-4.6 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | PS-4 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | PS-8 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | SI-4 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | SI-4.1 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | SI-4.19 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | SI-4.20 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | SI-4.22 | Official related control |
| KSI-IAM-SUSResponding to Suspicious Activity | Identity and Access Management | SI-4.4 | Official related control |
| KSI-INR-AARGenerating After Action Reports | Incident Response | IR-3 | Official related control |
| KSI-INR-AARGenerating After Action Reports | Incident Response | IR-4 | Official related control |
| KSI-INR-AARGenerating After Action Reports | Incident Response | IR-4.1 | Official related control |
| KSI-INR-AARGenerating After Action Reports | Incident Response | IR-5.1 | Official related control |
| KSI-INR-AARGenerating After Action Reports | Incident Response | IR-8 | Official related control |
| KSI-INR-AARGenerating After Action Reports | Incident Response | IR-9.3 | Official related control |
| KSI-INR-RIRReviewing Incident Response Procedures | Incident Response | IR-4 | Official related control |
| KSI-INR-RIRReviewing Incident Response Procedures | Incident Response | IR-4.1 | Official related control |
| KSI-INR-RIRReviewing Incident Response Procedures | Incident Response | IR-4.11 | Official related control |
| KSI-INR-RIRReviewing Incident Response Procedures | Incident Response | IR-6 | Official related control |
| KSI-INR-RIRReviewing Incident Response Procedures | Incident Response | IR-6.1 | Official related control |
| KSI-INR-RIRReviewing Incident Response Procedures | Incident Response | IR-6.3 | Official related control |
| KSI-INR-RIRReviewing Incident Response Procedures | Incident Response | IR-7 | Official related control |
| KSI-INR-RIRReviewing Incident Response Procedures | Incident Response | IR-7.1 | Official related control |
| KSI-INR-RIRReviewing Incident Response Procedures | Incident Response | IR-8 | Official related control |
| KSI-INR-RIRReviewing Incident Response Procedures | Incident Response | IR-8.1 | Official related control |
| KSI-INR-RIRReviewing Incident Response Procedures | Incident Response | IR-9.3 | Official related control |
| KSI-INR-RIRReviewing Incident Response Procedures | Incident Response | SI-4.5 | Official related control |
| KSI-INR-RPIReviewing Past Incidents | Incident Response | IR-3 | Official related control |
| KSI-INR-RPIReviewing Past Incidents | Incident Response | IR-4 | Official related control |
| KSI-INR-RPIReviewing Past Incidents | Incident Response | IR-4.1 | Official related control |
| KSI-INR-RPIReviewing Past Incidents | Incident Response | IR-4.11 | Official related control |
| KSI-INR-RPIReviewing Past Incidents | Incident Response | IR-4.4 | Official related control |
| KSI-INR-RPIReviewing Past Incidents | Incident Response | IR-5 | Official related control |
| KSI-INR-RPIReviewing Past Incidents | Incident Response | IR-5.1 | Official related control |
| KSI-INR-RPIReviewing Past Incidents | Incident Response | IR-8 | Official related control |
| KSI-INR-RPIReviewing Past Incidents | Incident Response | RA-5.8 | Official related control |
| KSI-MLA-ALAAuthorizing Log Access | Monitoring, Logging, and Auditing | AU-12.3 | Official related control |
| KSI-MLA-ALAAuthorizing Log Access | Monitoring, Logging, and Auditing | AU-6.7 | Official related control |
| KSI-MLA-ALAAuthorizing Log Access | Monitoring, Logging, and Auditing | SI-11 | Official related control |
| KSI-MLA-EVCEvaluating Configurations | Monitoring, Logging, and Auditing | AC-19 | Official related control |
| KSI-MLA-EVCEvaluating Configurations | Monitoring, Logging, and Auditing | CA-7 | Official related control |
| KSI-MLA-EVCEvaluating Configurations | Monitoring, Logging, and Auditing | CM-2 | Official related control |
| KSI-MLA-EVCEvaluating Configurations | Monitoring, Logging, and Auditing | CM-6 | Official related control |
| KSI-MLA-EVCEvaluating Configurations | Monitoring, Logging, and Auditing | CM-6.1 | Official related control |
| KSI-MLA-EVCEvaluating Configurations | Monitoring, Logging, and Auditing | RA-3 | Official related control |
| KSI-MLA-EVCEvaluating Configurations | Monitoring, Logging, and Auditing | SI-7.7 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | AC-17.1 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | AC-2.4 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | AC-20.1 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | AC-6.9 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | AU-10 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | AU-12 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | AU-2 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | AU-7 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | AU-7.1 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | CM-5.1 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | IR-9.4 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | SI-4.19 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | SI-4.20 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | SI-4.4 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | SI-4.5 | Official related control |
| KSI-MLA-LETLogging Event Types | Monitoring, Logging, and Auditing | SI-7.7 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AC-17.1 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AC-20.1 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-11 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-12.1 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-2 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-3 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-3.1 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-4 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-5 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-5.1 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-6.1 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-6.3 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-6.4 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-6.5 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-7 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-7.1 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-8 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | AU-9 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | IR-4.1 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | SI-4.16 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | SI-4.2 | Official related control |
| KSI-MLA-OSMOperating SIEM Capability | Monitoring, Logging, and Auditing | SI-4.4 | Official related control |
| KSI-MLA-RVLReviewing Logs | Monitoring, Logging, and Auditing | AC-2.4 | Official related control |
| KSI-MLA-RVLReviewing Logs | Monitoring, Logging, and Auditing | AC-6.9 | Official related control |
| KSI-MLA-RVLReviewing Logs | Monitoring, Logging, and Auditing | AU-2 | Official related control |
| KSI-MLA-RVLReviewing Logs | Monitoring, Logging, and Auditing | AU-6 | Official related control |
| KSI-MLA-RVLReviewing Logs | Monitoring, Logging, and Auditing | AU-6.1 | Official related control |
| KSI-MLA-RVLReviewing Logs | Monitoring, Logging, and Auditing | AU-7 | Official related control |
| KSI-MLA-RVLReviewing Logs | Monitoring, Logging, and Auditing | RA-5.8 | Official related control |
| KSI-MLA-RVLReviewing Logs | Monitoring, Logging, and Auditing | SI-4 | Official related control |
| KSI-MLA-RVLReviewing Logs | Monitoring, Logging, and Auditing | SI-4.19 | Official related control |
| KSI-MLA-RVLReviewing Logs | Monitoring, Logging, and Auditing | SI-4.4 | Official related control |
| KSI-PIY-GIVGenerating Inventories | Policy and Inventory | CM-12 | Official related control |
| KSI-PIY-GIVGenerating Inventories | Policy and Inventory | CM-12.1 | Official related control |
| KSI-PIY-GIVGenerating Inventories | Policy and Inventory | CM-2.2 | Official related control |
| KSI-PIY-GIVGenerating Inventories | Policy and Inventory | CM-7.5 | Official related control |
| KSI-PIY-GIVGenerating Inventories | Policy and Inventory | CM-8 | Official related control |
| KSI-PIY-GIVGenerating Inventories | Policy and Inventory | CM-8.1 | Official related control |
| KSI-PIY-GIVGenerating Inventories | Policy and Inventory | CM-8.2 | Official related control |
| KSI-PIY-GIVGenerating Inventories | Policy and Inventory | CM-8.4 | Official related control |
| KSI-PIY-GIVGenerating Inventories | Policy and Inventory | CP-2.8 | Official related control |
| KSI-PIY-RESReviewing Executive Support | Policy and Inventory | — | Provisional — no official citation |
| KSI-PIY-RISReviewing Investments in Security | Policy and Inventory | AC-5 | Official related control |
| KSI-PIY-RISReviewing Investments in Security | Policy and Inventory | CA-2 | Official related control |
| KSI-PIY-RISReviewing Investments in Security | Policy and Inventory | CA-2.2 | Official related control |
| KSI-PIY-RISReviewing Investments in Security | Policy and Inventory | CP-2.1 | Official related control |
| KSI-PIY-RISReviewing Investments in Security | Policy and Inventory | CP-4.1 | Official related control |
| KSI-PIY-RISReviewing Investments in Security | Policy and Inventory | IR-3.2 | Official related control |
| KSI-PIY-RISReviewing Investments in Security | Policy and Inventory | IR-4.11 | Official related control |
| KSI-PIY-RISReviewing Investments in Security | Policy and Inventory | PM-3 | Official related control |
| KSI-PIY-RISReviewing Investments in Security | Policy and Inventory | SA-2 | Official related control |
| KSI-PIY-RISReviewing Investments in Security | Policy and Inventory | SA-3 | Official related control |
| KSI-PIY-RISReviewing Investments in Security | Policy and Inventory | SR-2.1 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | AC-5 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | AU-3.3 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | CM-3.4 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | IA-5.7 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | PL-8 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | PM-7 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | RA-9 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | SA-3 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | SA-8 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | SC-18 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | SC-4 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | SI-10 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | SI-11 | Official related control |
| KSI-PIY-RSDReviewing Security in the SDLC | Policy and Inventory | SI-16 | Official related control |
| KSI-PIY-RVDReviewing Vulnerability Disclosures | Policy and Inventory | RA-5.11 | Official related control |
| KSI-RPL-ABOAligning Backups with Objectives | Recovery Planning | CM-2.3 | Official related control |
| KSI-RPL-ABOAligning Backups with Objectives | Recovery Planning | CP-6 | Official related control |
| KSI-RPL-ABOAligning Backups with Objectives | Recovery Planning | CP-9 | Official related control |
| KSI-RPL-ABOAligning Backups with Objectives | Recovery Planning | CP-10 | Official related control |
| KSI-RPL-ABOAligning Backups with Objectives | Recovery Planning | CP-10.2 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-2 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-2.1 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-2.3 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-4.1 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-6 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-6.1 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-6.3 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-7 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-7.1 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-7.2 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-7.3 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-8 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-8.1 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-8.2 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-10 | Official related control |
| KSI-RPL-ARPAligning Recovery Plan | Recovery Planning | CP-10.2 | Official related control |
| KSI-RPL-RROReviewing Recovery Objectives | Recovery Planning | CP-2.3 | Official related control |
| KSI-RPL-RROReviewing Recovery Objectives | Recovery Planning | CP-10 | Official related control |
| KSI-RPL-TRCTesting Recovery Capabilities | Recovery Planning | CP-10 | Official related control |
| KSI-RPL-TRCTesting Recovery Capabilities | Recovery Planning | CP-2.1 | Official related control |
| KSI-RPL-TRCTesting Recovery Capabilities | Recovery Planning | CP-2.3 | Official related control |
| KSI-RPL-TRCTesting Recovery Capabilities | Recovery Planning | CP-4 | Official related control |
| KSI-RPL-TRCTesting Recovery Capabilities | Recovery Planning | CP-4.1 | Official related control |
| KSI-RPL-TRCTesting Recovery Capabilities | Recovery Planning | CP-6 | Official related control |
| KSI-RPL-TRCTesting Recovery Capabilities | Recovery Planning | CP-6.1 | Official related control |
| KSI-RPL-TRCTesting Recovery Capabilities | Recovery Planning | CP-9.1 | Official related control |
| KSI-RPL-TRCTesting Recovery Capabilities | Recovery Planning | IR-3 | Official related control |
| KSI-RPL-TRCTesting Recovery Capabilities | Recovery Planning | IR-3.2 | Official related control |
| KSI-RPL-TRCTesting Recovery Capabilities | Recovery Planning | IR-9.3 | Official related control |
| KSI-RPL-TRCTesting Recovery Capabilities | Recovery Planning | SC-12.1 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | AC-19 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | AC-20 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | CA-7.4 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | RA-3 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | RA-3.1 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-10 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-11 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-11.1 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-11.2 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-15 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-15.3 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-16 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-17 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-21 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-22 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-4 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-4.1 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-4.2 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-4.5 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-4.9 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-9 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-9.1 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-9.2 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SA-9.5 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SC-18 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SI-7.1 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SI-7.15 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SR-2 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SR-3 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SR-5 | Official related control |
| KSI-SCR-MITMitigating Supply Chain Risk | Supply Chain Risk | SR-6 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | AC-19 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | AC-20 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | CA-2.3 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | CA-3 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | IR-6.3 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | PS-7 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | RA-3 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | RA-5 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | SA-9 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | SI-5 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | SR-3 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | SR-5 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | SR-6 | Official related control |
| KSI-SCR-MONMonitoring Supply Chain Risk | Supply Chain Risk | SR-8 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | AC-2.4 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | AC-6.8 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | CM-2 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | CM-2.2 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | CM-2.3 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | CM-6 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | CM-7.1 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | PL-10 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | PL-9 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | SA-5 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | SC-45 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | SC-45.1 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | SC-7.18 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | SI-5 | Official related control |
| KSI-SVC-ACMAutomating Configuration Management | Service Configuration | SR-10 | Official related control |
| KSI-SVC-ASMAutomating Secret Management | Service Configuration | AC-17.2 | Official related control |
| KSI-SVC-ASMAutomating Secret Management | Service Configuration | IA-5.2 | Official related control |
| KSI-SVC-ASMAutomating Secret Management | Service Configuration | IA-5.6 | Official related control |
| KSI-SVC-ASMAutomating Secret Management | Service Configuration | SC-12 | Official related control |
| KSI-SVC-ASMAutomating Secret Management | Service Configuration | SC-12.1 | Official related control |
| KSI-SVC-ASMAutomating Secret Management | Service Configuration | SC-17 | Official related control |
| KSI-SVC-EISEvaluating and Improving Security | Service Configuration | CA-7.4 | Official related control |
| KSI-SVC-EISEvaluating and Improving Security | Service Configuration | CM-12.1 | Official related control |
| KSI-SVC-EISEvaluating and Improving Security | Service Configuration | CM-5.5 | Official related control |
| KSI-SVC-EISEvaluating and Improving Security | Service Configuration | CM-7.1 | Official related control |
| KSI-SVC-EISEvaluating and Improving Security | Service Configuration | IR-9.4 | Official related control |
| KSI-SVC-EISEvaluating and Improving Security | Service Configuration | PL-8 | Official related control |
| KSI-SVC-EISEvaluating and Improving Security | Service Configuration | RA-3 | Official related control |
| KSI-SVC-EISEvaluating and Improving Security | Service Configuration | SC-39 | Official related control |
| KSI-SVC-EISEvaluating and Improving Security | Service Configuration | SC-7 | Official related control |
| KSI-SVC-EISEvaluating and Improving Security | Service Configuration | SI-2.2 | Official related control |
| KSI-SVC-EISEvaluating and Improving Security | Service Configuration | SI-4 | Official related control |
| KSI-SVC-EISEvaluating and Improving Security | Service Configuration | SR-10 | Official related control |
| KSI-SVC-PRRPreventing Residual Risk | Service Configuration | AC-19 | Official related control |
| KSI-SVC-PRRPreventing Residual Risk | Service Configuration | IR-9.4 | Official related control |
| KSI-SVC-PRRPreventing Residual Risk | Service Configuration | SC-12.1 | Official related control |
| KSI-SVC-PRRPreventing Residual Risk | Service Configuration | SC-4 | Official related control |
| KSI-SVC-PRRPreventing Residual Risk | Service Configuration | SC-7.18 | Official related control |
| KSI-SVC-RUDRemoving Unwanted Data | Service Configuration | IR-9 | Official related control |
| KSI-SVC-RUDRemoving Unwanted Data | Service Configuration | SI-12.3 | Official related control |
| KSI-SVC-RUDRemoving Unwanted Data | Service Configuration | SI-18.4 | Official related control |
| KSI-SVC-RUDRemoving Unwanted Data | Service Configuration | SI-8 | Official related control |
| KSI-SVC-RUDRemoving Unwanted Data | Service Configuration | SI-8.2 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | AC-11 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | AC-11.1 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | AC-17.2 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | AC-19.5 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | AC-21 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | CP-9.8 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | IR-9.4 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | SC-13 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | SC-20 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | SC-21 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | SC-22 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | SC-23 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | SC-28 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | SC-28.1 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | SC-4 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | SC-7.18 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | SC-8 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | SC-8.1 | Official related control |
| KSI-SVC-SINSecuring Information | Service Configuration | SI-4.18 | Official related control |
| KSI-SVC-VCMValidating Communications | Service Configuration | AC-10 | Official related control |
| KSI-SVC-VCMValidating Communications | Service Configuration | AC-17.4 | Official related control |
| KSI-SVC-VCMValidating Communications | Service Configuration | AC-18 | Official related control |
| KSI-SVC-VCMValidating Communications | Service Configuration | AC-19 | Official related control |
| KSI-SVC-VCMValidating Communications | Service Configuration | SC-23 | Official related control |
| KSI-SVC-VCMValidating Communications | Service Configuration | SI-4.22 | Official related control |
| KSI-SVC-VCMValidating Communications | Service Configuration | SI-7.1 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | AC-17.4 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | AC-18 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | AC-19 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | AU-9.3 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | CM-14 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | CM-2.2 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | CM-8.3 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | SC-13 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | SC-23 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | SI-7 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | SI-7.1 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | SI-7.15 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | SR-10 | Official related control |
| KSI-SVC-VRIValidating Resource Integrity | Service Configuration | SR-11 | Official related control |