ID.RM-01_idrm-01
Risk management processes are established, managed, and agreed to by organizational stakeholders
1.21k repo starsObserved in 1 repos
DevOps & Security
DevOps & Security skills
Browse reusable Agent Skills, each with a clear purpose and practical guidance.
ID.RM-02_idrm-02
Organizational risk tolerance is determined and clearly expressed
1.21k repo starsObserved in 1 repos
DevOps & Security
ID.SC-01_idsc-01
Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders
1.21k repo starsObserved in 1 repos
DevOps & Security
ID.SC-02_idsc-02
Suppliers and third party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply cha
1.21k repo starsObserved in 1 repos
DevOps & Security
ID.SC-03_idsc-03
Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s cybe
1.21k repo starsObserved in 1 repos
DevOps & Security
ID.SC-04_idsc-04
Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their
1.21k repo starsObserved in 1 repos
DevOps & Security
ID.SC-05_idsc-05
Response and recovery planning and testing are conducted with suppliers and third-party providers
1.21k repo starsObserved in 1 repos
DevOps & Security
Identify and Confirm Vulnerabilities on an Ongoing Basis (RV.1)_identify-and-confirm-vulnerabilities-on-an-ongoing-basis
Help ensure that vulnerabilities are identified more quickly so that they can be remediated more quickly in accordance with risk, reducing the window
1.21k repo starsObserved in 1 repos
DevOps & Security
Identity Management, Authentication and Access Control (PR.AC)_identity-management-authentication-and-access-control
Identity Management, Authentication and Access Control
1.21k repo starsObserved in 1 repos
DevOps & Security
Impact Analyses (03.04.04)_impact-analyses
Analyze changes to the system to determine potential security impacts prior to change implementation.
1.21k repo starsObserved in 1 repos
DevOps & Security