Moderate Uplift (138)

Controls List

  1. AC: Access Control (28)
  2. AT: Awareness and Training (1)
  3. AU: Audit and Accountability (6)
  4. CA: Assessment, Authorization, and Monitoring (2)
  5. CM: Configuration Management (15)
  6. CP: Contingency Planning (17)
  7. IA: Identification and Authentication (8)
  8. IR: Incident Response (6)
  9. MA: Maintenance (5)
  10. MP: Media Protection (3)
  11. PE: Physical and Environmental Protection (8)
  12. PL: Planning (1)
  13. PS: Personnel Security (0)
  14. RA: Risk Assessment (2)
  15. SA: System and Services Acquisition (8)
  16. SC: System and Communications Protection (15)
  17. SI: System and Information Integrity (12)
  18. SR: Supply Chain Risk Management (1)

Controls IDs

  • AC-2 (1), AC-2 (2), AC-2 (3), AC-2 (4), AC-2 (5), AC-2 (13), AC-4, AC-5, AC-6, AC-6 (1), AC-6 (2), AC-6 (5), AC-6 (7), AC-6 (9), AC-6 (10), AC-11, AC-11 (1), AC-12, AC-17 (1), AC-17 (2), AC-17 (3), AC-17 (4), AC-18 (1), AC-18 (3), AC-19 (5), AC-20 (1), AC-20 (2), AC-21, AT-2 (3), AU-3 (1), AU-6 (1), AU-6 (3), AU-7, AU-7 (1), AU-9 (4), CA-2 (1), CA-7 (1), CM-2 (2), CM-2 (3), CM-2 (7), CM-3, CM-3 (2), CM-3 (4), CM-4 (2), CM-7 (1), CM-7 (2), CM-7 (5), CM-8 (1), CM-8 (3), CM-9, CM-12, CM-12 (1), CP-2 (1), CP-2 (3), CP-2 (8), CP-4 (1), CP-6, CP-6 (1), CP-6 (3), CP-7, CP-7 (1), CP-7 (2), CP-7 (3), CP-8, CP-8 (1), CP-8 (2), CP-9 (1), CP-9 (8), CP-10 (2), IA-3, IA-4 (4), IA-5 (2), IA-5 (6), IA-12, IA-12 (2), IA-12 (3), IA-12 (5), IR-3, IR-3 (2), IR-4 (1), IR-6 (1), IR-6 (3), IR-7 (1), MA-3, MA-3 (1), MA-3 (2), MA-3 (3), MA-6, MP-3, MP-4, MP-5, PE-4, PE-5, PE-6 (1), PE-9, PE-10, PE-11, PE-13 (1), PE-17, PL-8, RA-5 (5), RA-9, SA-4 (1), SA-4 (2), SA-4 (9), SA-9 (2), SA-10, SA-11, SA-15, SA-15 (3), SC-2, SC-4, SC-7 (3), SC-7 (4), SC-7 (5), SC-7 (7), SC-7 (8), SC-8, SC-8 (1), SC-10, SC-17, SC-18, SC-23, SC-28, SC-28 (1), SI-2 (2), SI-4 (2), SI-4 (4), SI-4 (5), SI-7, SI-7 (1), SI-7 (7), SI-8, SI-8 (2), SI-10, SI-11, SI-16, SR-6