{
    "profile": {
        "uuid": "5c01fb1e-7f27-5630-96cc-dba707718a32",
        "name": "CRI Cloud Profile v2.0 — Baseline Risk Level",
        "confidentiality": "Moderate",
        "integrity": "Moderate",
        "availability": "Moderate",
        "category": "Moderate",
        "isPublic": true
    },
    "mappings": [
        {
            "profileMappingId": 0,
            "controlId": 21824,
            "controlIdentifier": "GV.OC-03.01",
            "controlGuid": "7669d03f-c121-58f2-b9e7-a3a5f760d26d",
            "controlTitle": "GV.OC-03.01 - Legal, contractual, and regulatory obligations",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21825,
            "controlIdentifier": "GV.OC-03.02",
            "controlGuid": "45959f63-7802-57c5-a69c-e85ce935b633",
            "controlTitle": "GV.OC-03.02 - Data Privacy Policy",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21836,
            "controlIdentifier": "GV.RM-01.03",
            "controlGuid": "29e2eee5-f186-5707-84a2-db3245069ea3",
            "controlTitle": "GV.RM-01.03 - Technology and cybersecurity program objectives",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21863,
            "controlIdentifier": "GV.RR-01.04",
            "controlGuid": "2970fe5f-3fc4-5aac-995d-1dc5dee11ee3",
            "controlTitle": "GV.RR-01.04 - Cybersecurity Officer designation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21865,
            "controlIdentifier": "GV.RR-02.01",
            "controlGuid": "5f44b4d8-aac9-5ca5-b4c4-19af1aeb80a7",
            "controlTitle": "GV.RR-02.01 - Cybersecurity roles and responsibilities",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21875,
            "controlIdentifier": "GV.RR-04.01",
            "controlGuid": "4e46c769-0235-5578-85f8-684074288cf8",
            "controlTitle": "GV.RR-04.01 - Background checks",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21876,
            "controlIdentifier": "GV.RR-04.02",
            "controlGuid": "5dec958f-0bc2-55ee-931f-3b87e4134dc6",
            "controlTitle": "GV.RR-04.02 - Employment termination",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21878,
            "controlIdentifier": "GV.PO-01.01",
            "controlGuid": "d03649ce-02ee-5aa8-ab8a-723d944b871e",
            "controlTitle": "GV.PO-01.01 - Policy documentation and approval",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21880,
            "controlIdentifier": "GV.PO-01.03",
            "controlGuid": "ae778b3d-38ed-5390-a42e-6f2ac291e80a",
            "controlTitle": "GV.PO-01.03 - Incentive and accountability program alignment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21883,
            "controlIdentifier": "GV.PO-01.06",
            "controlGuid": "ae8102a7-a1aa-5465-9be4-bb41e906a04f",
            "controlTitle": "GV.PO-01.06 - Physical and environmental security policies",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21884,
            "controlIdentifier": "GV.PO-01.07",
            "controlGuid": "9b1cfef7-d2f4-5386-bfc2-6282b528be11",
            "controlTitle": "GV.PO-01.07 - Business continuity and resilience program policies",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21885,
            "controlIdentifier": "GV.PO-01.08",
            "controlGuid": "658cc1c9-042b-502a-bb9c-1bc6db0a91b1",
            "controlTitle": "GV.PO-01.08 - Third-party risk management policies",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21886,
            "controlIdentifier": "GV.PO-02.01",
            "controlGuid": "0a523397-794c-5843-a97e-d99089c44b6a",
            "controlTitle": "GV.PO-02.01 - Policy review and update",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21896,
            "controlIdentifier": "GV.SC-02.01",
            "controlGuid": "26110f31-f0a9-526c-a5f4-268aed7a7bc1",
            "controlTitle": "GV.SC-02.01 - Designated organization and third-party responsibilities",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21917,
            "controlIdentifier": "ID.AM-01.01",
            "controlGuid": "6469e1a9-38b9-5221-bd1e-3102a87673fc",
            "controlTitle": "ID.AM-01.01 - Physical device asset inventory",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21918,
            "controlIdentifier": "ID.AM-02.01",
            "controlGuid": "175d2a64-51e1-5f0f-bb61-670bd7943e37",
            "controlTitle": "ID.AM-02.01 - Software and applications asset inventory",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21925,
            "controlIdentifier": "ID.AM-08.02",
            "controlGuid": "eb9295b5-0cda-5aee-bc84-7b1ea1f94d79",
            "controlTitle": "ID.AM-08.02 - Ungoverned technology assets",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21932,
            "controlIdentifier": "ID.RA-01.03",
            "controlGuid": "c6246a27-300d-5eca-a04a-7213a2e99a69",
            "controlTitle": "ID.RA-01.03 - Vulnerability management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21943,
            "controlIdentifier": "ID.RA-05.04",
            "controlGuid": "86486ec4-9333-5648-a803-cca8cb45274a",
            "controlTitle": "ID.RA-05.04 - Scenario planning and table-top-exercises",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21948,
            "controlIdentifier": "ID.RA-06.05",
            "controlGuid": "8b3e98f5-1448-59f0-aef3-25f4ace1814a",
            "controlTitle": "ID.RA-06.05 - Prioritization of vulnerability remediation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21950,
            "controlIdentifier": "ID.RA-07.01",
            "controlGuid": "c8ca2970-6c7b-5e9e-8dc9-f31c7eb9bd9d",
            "controlTitle": "ID.RA-07.01 - Change management standards and procedures",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21954,
            "controlIdentifier": "ID.RA-07.05",
            "controlGuid": "f69577c5-963f-5551-8535-e121aa4cca94",
            "controlTitle": "ID.RA-07.05 - Vulnerability exception management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21955,
            "controlIdentifier": "ID.RA-08.01",
            "controlGuid": "76089caa-ddaa-5a4d-962e-ed95e54ec5e5",
            "controlTitle": "ID.RA-08.01 - Vulnerability disclosure receipt",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21957,
            "controlIdentifier": "ID.IM-01.01",
            "controlGuid": "f56e25af-491c-5825-ba7a-8822294e0153",
            "controlTitle": "ID.IM-01.01 - Control testing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21962,
            "controlIdentifier": "ID.IM-02.01",
            "controlGuid": "8afe162c-add1-51ee-87e2-8da68b455006",
            "controlTitle": "ID.IM-02.01 - Penetration testing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21965,
            "controlIdentifier": "ID.IM-02.04",
            "controlGuid": "e8ed1f6f-b326-54f5-91f9-4bfc6c6a52ae",
            "controlTitle": "ID.IM-02.04 - Resilience strategy and plan testing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21966,
            "controlIdentifier": "ID.IM-02.05",
            "controlGuid": "29535f50-3228-5184-bf14-4898d34fd566",
            "controlTitle": "ID.IM-02.05 - Resilience testing scenarios",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21967,
            "controlIdentifier": "ID.IM-02.06",
            "controlGuid": "52996060-bc5f-5e77-9e3a-01fdd4f521a2",
            "controlTitle": "ID.IM-02.06 - Accurate data recovery",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21973,
            "controlIdentifier": "ID.IM-04.01",
            "controlGuid": "73a8a64e-ac39-58e4-bfd1-760cba6a86b3",
            "controlTitle": "ID.IM-04.01 - Alignment of business continuity, disaster recovery, and response programs",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21979,
            "controlIdentifier": "ID.IM-04.07",
            "controlGuid": "b5f538e3-dbdb-5f50-8d16-3e49ec111ca1",
            "controlTitle": "ID.IM-04.07 - Incident management support resources",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21980,
            "controlIdentifier": "ID.IM-04.08",
            "controlGuid": "ed1fdefd-e6a9-5836-ba33-596669801ebf",
            "controlTitle": "ID.IM-04.08 - Response program improvement",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21981,
            "controlIdentifier": "PR.AA-01.01",
            "controlGuid": "139047dc-6f5f-5870-9de3-38b88013b585",
            "controlTitle": "PR.AA-01.01 - Identity and credential management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21982,
            "controlIdentifier": "PR.AA-01.02",
            "controlGuid": "bb735ee5-1d89-5010-b067-691759356d43",
            "controlTitle": "PR.AA-01.02 - Physical and logical access",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21983,
            "controlIdentifier": "PR.AA-02.01",
            "controlGuid": "6a0ee84b-c8c1-5567-b2fc-daca8ace9946",
            "controlTitle": "PR.AA-02.01 - Authentication of identity",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21984,
            "controlIdentifier": "PR.AA-03.01",
            "controlGuid": "048f531a-c0f8-5665-92f2-69c090aabc03",
            "controlTitle": "PR.AA-03.01 - Authentication requirements",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21986,
            "controlIdentifier": "PR.AA-03.03",
            "controlGuid": "9e06cd77-8b8f-525e-9111-ed12340032ec",
            "controlTitle": "PR.AA-03.03 - Email verification mechanisms",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21987,
            "controlIdentifier": "PR.AA-04.01",
            "controlGuid": "7072b942-5e38-5bf5-a50d-934c7f4a2562",
            "controlTitle": "PR.AA-04.01 - Access control within and across security perimeters",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21988,
            "controlIdentifier": "PR.AA-05.01",
            "controlGuid": "2cffd0e7-8f07-5b34-af6b-be0fba1a7b75",
            "controlTitle": "PR.AA-05.01 - Access privilege limitation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21989,
            "controlIdentifier": "PR.AA-05.02",
            "controlGuid": "dfe058c0-5a44-5229-8c53-ec8aad488659",
            "controlTitle": "PR.AA-05.02 - Privileged system access",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21990,
            "controlIdentifier": "PR.AA-05.03",
            "controlGuid": "de5df059-4c7c-5d7c-a007-5bbd7e646c9d",
            "controlTitle": "PR.AA-05.03 - Service accounts",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21992,
            "controlIdentifier": "PR.AA-06.01",
            "controlGuid": "fe8a4b39-dd6e-5bf2-9ffd-d787f721b78a",
            "controlTitle": "PR.AA-06.01 - Physical access security",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21994,
            "controlIdentifier": "PR.AT-01.01",
            "controlGuid": "40d85577-6449-5624-81fb-e442effff59e",
            "controlTitle": "PR.AT-01.01 - Cybersecurity awareness training",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21995,
            "controlIdentifier": "PR.AT-01.02",
            "controlGuid": "cfccbb89-84c2-5bc3-9313-e4bc3ba49fba",
            "controlTitle": "PR.AT-01.02 - Cybersecurity awareness training content",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21999,
            "controlIdentifier": "PR.AT-02.02",
            "controlGuid": "370b8b5f-d6b6-51c7-9dd6-ae5732e13f54",
            "controlTitle": "PR.AT-02.02 - Training of high-risk groups",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22006,
            "controlIdentifier": "PR.DS-01.01",
            "controlGuid": "d25c649a-a9be-5c7e-8de9-77831de70582",
            "controlTitle": "PR.DS-01.01 - Data-at-rest protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22008,
            "controlIdentifier": "PR.DS-01.03",
            "controlGuid": "b6ec1730-b0f9-5046-ad82-1eab494c0718",
            "controlTitle": "PR.DS-01.03 - Removable media protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22009,
            "controlIdentifier": "PR.DS-02.01",
            "controlGuid": "f7d5f574-8241-5f49-821a-c32e8ca963f2",
            "controlTitle": "PR.DS-02.01 - Data-in-transit protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22010,
            "controlIdentifier": "PR.DS-10.01",
            "controlGuid": "708a01a7-8410-55d1-9f93-5992f8818376",
            "controlTitle": "PR.DS-10.01 - Data-in-use protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22011,
            "controlIdentifier": "PR.DS-11.01",
            "controlGuid": "7e6086d8-1077-5037-9ca7-5e310ca80e09",
            "controlTitle": "PR.DS-11.01 - Data backup and replication",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22012,
            "controlIdentifier": "PR.PS-01.01",
            "controlGuid": "3cb49ec9-951a-5e64-919a-1a64a53973ec",
            "controlTitle": "PR.PS-01.01 - Configuration baselines",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22013,
            "controlIdentifier": "PR.PS-01.02",
            "controlGuid": "d70340f4-2d32-50f0-96f3-faa94d02c5e5",
            "controlTitle": "PR.PS-01.02 - Least functionality",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22014,
            "controlIdentifier": "PR.PS-01.03",
            "controlGuid": "7c5366b7-0b37-5fe7-bb04-6313e442be6d",
            "controlTitle": "PR.PS-01.03 - Configuration deviation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22016,
            "controlIdentifier": "PR.PS-01.05",
            "controlGuid": "3137846b-e1d0-5027-a7cb-7f6bbe24680d",
            "controlTitle": "PR.PS-01.05 - Encryption standards",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22017,
            "controlIdentifier": "PR.PS-01.06",
            "controlGuid": "c678f99d-0ecd-545d-b2c7-a0c28b0669b7",
            "controlTitle": "PR.PS-01.06 - Encryption management practices",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22018,
            "controlIdentifier": "PR.PS-01.07",
            "controlGuid": "870dc954-cddf-5d3a-9488-ada1171f2dc8",
            "controlTitle": "PR.PS-01.07 - Cryptographic keys and certificates",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22019,
            "controlIdentifier": "PR.PS-01.08",
            "controlGuid": "d7af933f-0222-5044-8c8d-6fdeec795798",
            "controlTitle": "PR.PS-01.08 - End-user device protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22021,
            "controlIdentifier": "PR.PS-02.01",
            "controlGuid": "c61af87b-3275-58d3-9d19-892753839534",
            "controlTitle": "PR.PS-02.01 - Patch identification and application",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22025,
            "controlIdentifier": "PR.PS-04.01",
            "controlGuid": "0d38cb3c-c9a3-58cc-acd4-ef0576551877",
            "controlTitle": "PR.PS-04.01 - Log management standards",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22026,
            "controlIdentifier": "PR.PS-04.02",
            "controlGuid": "6a4613df-4eb0-5f85-9b52-2e29d736124a",
            "controlTitle": "PR.PS-04.02 - Log coverage",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22027,
            "controlIdentifier": "PR.PS-04.03",
            "controlGuid": "f9e55313-9c90-50be-b05a-786fe5c832c8",
            "controlTitle": "PR.PS-04.03 - Log security and retention",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22028,
            "controlIdentifier": "PR.PS-05.01",
            "controlGuid": "09585d22-c5e4-5f5c-8fa1-f1d4e43e15e2",
            "controlTitle": "PR.PS-05.01 - Malware prevention",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22029,
            "controlIdentifier": "PR.PS-05.02",
            "controlGuid": "6cadb84b-e081-5daf-8d80-ad9247913ac0",
            "controlTitle": "PR.PS-05.02 - Mobile code prevention",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22030,
            "controlIdentifier": "PR.PS-05.03",
            "controlGuid": "9f251ebf-bce6-5dd8-b2d3-531fe1fb7021",
            "controlTitle": "PR.PS-05.03 - Email and message service protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22031,
            "controlIdentifier": "PR.PS-06.01",
            "controlGuid": "233efc19-43cb-5140-a8ae-939d8ff48620",
            "controlTitle": "PR.PS-06.01 - Secure SDLC processes",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22032,
            "controlIdentifier": "PR.PS-06.02",
            "controlGuid": "29c2e8e1-2f77-5189-ae0a-9918fca3c9e8",
            "controlTitle": "PR.PS-06.02 - Target environment security design",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22033,
            "controlIdentifier": "PR.PS-06.03",
            "controlGuid": "d1c6c02c-a577-567b-af41-c9d0cf6f9973",
            "controlTitle": "PR.PS-06.03 - System requirements management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22034,
            "controlIdentifier": "PR.PS-06.04",
            "controlGuid": "6790bc52-ed36-5a06-828d-d39e5865ffd4",
            "controlTitle": "PR.PS-06.04 - Development and testing security",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22035,
            "controlIdentifier": "PR.PS-06.05",
            "controlGuid": "af0ccfe5-5836-53dd-9d6c-c83f8f9926df",
            "controlTitle": "PR.PS-06.05 - Testing and validation strategy",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22036,
            "controlIdentifier": "PR.PS-06.06",
            "controlGuid": "81d40e00-d135-5bec-8a28-a040121d74c1",
            "controlTitle": "PR.PS-06.06 - Vulnerability remediation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22037,
            "controlIdentifier": "PR.PS-06.07",
            "controlGuid": "3663c4e0-9e61-5a56-97a8-cdd3755271f3",
            "controlTitle": "PR.PS-06.07 - Development and operational process alignment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22043,
            "controlIdentifier": "PR.IR-01.01",
            "controlGuid": "8441910a-fee5-5360-a6e4-9d398f8dab0a",
            "controlTitle": "PR.IR-01.01 - Network segmentation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22044,
            "controlIdentifier": "PR.IR-01.02",
            "controlGuid": "b73aa790-7e86-54b5-8895-e7341abcca3e",
            "controlTitle": "PR.IR-01.02 - Network device configurations",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22046,
            "controlIdentifier": "PR.IR-01.04",
            "controlGuid": "a938eafc-f640-5112-a521-ddf2f14f730b",
            "controlTitle": "PR.IR-01.04 - Wireless network protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22047,
            "controlIdentifier": "PR.IR-01.05",
            "controlGuid": "f1273978-e7e8-539f-9aba-5776e1ddfe2e",
            "controlTitle": "PR.IR-01.05 - Remote access protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22048,
            "controlIdentifier": "PR.IR-01.06",
            "controlGuid": "1e48dd1e-4843-580e-bc69-f9e57aa43343",
            "controlTitle": "PR.IR-01.06 - Production environment segregation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22049,
            "controlIdentifier": "PR.IR-01.07",
            "controlGuid": "b58e3bc0-7c10-539b-b06b-cb6186b3ed16",
            "controlTitle": "PR.IR-01.07 - Operational and IoT technologies",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22050,
            "controlIdentifier": "PR.IR-01.08",
            "controlGuid": "0483a06d-a29a-5a2f-a768-81598bdabede",
            "controlTitle": "PR.IR-01.08 - End-user device access",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22053,
            "controlIdentifier": "PR.IR-04.01",
            "controlGuid": "3ee2400b-d431-5f0b-9b8e-39ef142e15c6",
            "controlTitle": "PR.IR-04.01 - Utilization monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22055,
            "controlIdentifier": "DE.CM-01.01",
            "controlGuid": "4df9b6b3-d33a-5295-9672-327a12ea1cc7",
            "controlTitle": "DE.CM-01.01 - Intrusion detection and prevention",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22058,
            "controlIdentifier": "DE.CM-01.04",
            "controlGuid": "fc596d74-3fd8-5bc0-960d-456cfcbf537b",
            "controlTitle": "DE.CM-01.04 - Unauthorized device connection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22059,
            "controlIdentifier": "DE.CM-01.05",
            "controlGuid": "001c2b5d-ffbf-5b6c-817a-4b661931dd97",
            "controlTitle": "DE.CM-01.05 - Website and service blocking",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22061,
            "controlIdentifier": "DE.CM-02.01",
            "controlGuid": "f59b302e-53fd-51df-b18b-dff5370246ef",
            "controlTitle": "DE.CM-02.01 - Anomalous activity detection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22063,
            "controlIdentifier": "DE.CM-03.02",
            "controlGuid": "535b35e7-ad95-5f6c-aed7-3ae9a0688a1e",
            "controlTitle": "DE.CM-03.02 - Personnel activity monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22069,
            "controlIdentifier": "DE.CM-09.03",
            "controlGuid": "9918763c-4413-5da8-b5c4-e044f3713a61",
            "controlTitle": "DE.CM-09.03 - Unauthorized software, hardware, or configuration changes",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22071,
            "controlIdentifier": "DE.AE-02.02",
            "controlGuid": "ed83c11a-334e-5116-9a82-23efa778b8b8",
            "controlTitle": "DE.AE-02.02 - Alert parameters and thresholds",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22072,
            "controlIdentifier": "DE.AE-03.01",
            "controlGuid": "55604e11-9c65-56a8-b3b9-605dc0cdc617",
            "controlTitle": "DE.AE-03.01 - Infrastructure monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22073,
            "controlIdentifier": "DE.AE-03.02",
            "controlGuid": "fe65a03d-adc2-5d7d-90a2-ec1f1604c0a1",
            "controlTitle": "DE.AE-03.02 - Event aggregation, correlation, and analysis",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22074,
            "controlIdentifier": "DE.AE-04.01",
            "controlGuid": "d95810c7-ee9b-54b5-84e0-a637e29e32f5",
            "controlTitle": "DE.AE-04.01 - Event triage",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22075,
            "controlIdentifier": "DE.AE-06.01",
            "controlGuid": "fc43e33b-b6b1-59a4-95b1-48d819eda728",
            "controlTitle": "DE.AE-06.01 - Event alerting",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22079,
            "controlIdentifier": "RS.MA-01.01",
            "controlGuid": "44bc27cf-1c71-5346-8d4b-b976986b45fd",
            "controlTitle": "RS.MA-01.01 - Response plan execution",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22080,
            "controlIdentifier": "RS.MA-02.01",
            "controlGuid": "6c8b1f84-e12b-5927-b8f9-d4e36a962e7a",
            "controlTitle": "RS.MA-02.01 - Reliable event detection and analysis",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22084,
            "controlIdentifier": "RS.AN-03.01",
            "controlGuid": "00ed5a86-e6f9-501a-88ca-2dba4195d901",
            "controlTitle": "RS.AN-03.01 - Incident investigation and root cause determination",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22087,
            "controlIdentifier": "RS.AN-08.01",
            "controlGuid": "4d26c78c-57d3-55f7-8e9b-4dd2c09775ee",
            "controlTitle": "RS.AN-08.01 - Incident impact analysis",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22088,
            "controlIdentifier": "RS.CO-02.01",
            "controlGuid": "e1ed45a3-903b-5a8d-a0cd-3d6983d2f5d4",
            "controlTitle": "RS.CO-02.01 - Incident escalation protocols",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22089,
            "controlIdentifier": "RS.CO-02.02",
            "controlGuid": "3baa4aef-c5d1-56c3-aad3-a5bc2bcc5828",
            "controlTitle": "RS.CO-02.02 - Incident notification and reporting",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22092,
            "controlIdentifier": "RS.CO-03.02",
            "controlGuid": "6dc4ea61-a18b-5531-b71c-7ba093d6bcdf",
            "controlTitle": "RS.CO-03.02 - Incident intelligence sharing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22093,
            "controlIdentifier": "RS.MI-01.01",
            "controlGuid": "b7f5ae78-4dad-5c1a-868e-53c2bbdf8a03",
            "controlTitle": "RS.MI-01.01 - Incident containment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22094,
            "controlIdentifier": "RS.MI-02.01",
            "controlGuid": "b018aa64-9617-5ecb-8ea4-2b20b75bc4eb",
            "controlTitle": "RS.MI-02.01 - Incident vulnerability remediation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22095,
            "controlIdentifier": "RC.RP-01.01",
            "controlGuid": "9611b3da-a8d1-5f59-8081-10a0ddd3644d",
            "controlTitle": "RC.RP-01.01 - Recovery plan execution",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22097,
            "controlIdentifier": "RC.RP-02.02",
            "controlGuid": "e2d88d20-458c-5d98-8538-2a79f5bbbaf0",
            "controlTitle": "RC.RP-02.02 - Recovery prioritization",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22104,
            "controlIdentifier": "RC.CO-03.02",
            "controlGuid": "19bdb61f-046c-5ea0-a409-0a1e3bbbdd9c",
            "controlTitle": "RC.CO-03.02 - Recovery activity external communications",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22109,
            "controlIdentifier": "EX.DD-02.01",
            "controlGuid": "9654cc4a-b04e-5c74-a965-b1c3f6ff01da",
            "controlTitle": "EX.DD-02.01 - Due diligence resource allocation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22111,
            "controlIdentifier": "EX.DD-02.03",
            "controlGuid": "9ae20342-3cdf-507b-843a-d684b7c8a93a",
            "controlTitle": "EX.DD-02.03 - Third-party business profile due diligence",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22113,
            "controlIdentifier": "EX.DD-03.01",
            "controlGuid": "13c33ce2-c530-553b-b9ca-bf55c9be449f",
            "controlTitle": "EX.DD-03.01 - Third-party cybersecurity program due diligence",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22118,
            "controlIdentifier": "EX.CN-01.01",
            "controlGuid": "e517986f-8f7a-58ad-8e36-f7a13bff96c6",
            "controlTitle": "EX.CN-01.01 - Third-party contracts",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22121,
            "controlIdentifier": "EX.CN-02.01",
            "controlGuid": "c14cdea3-2515-5f2d-ae22-80c548195029",
            "controlTitle": "EX.CN-02.01 - Third-party cybersecurity requirements",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22122,
            "controlIdentifier": "EX.CN-02.02",
            "controlGuid": "c24356d3-40fa-5ca4-9311-fae40e90429d",
            "controlTitle": "EX.CN-02.02 - Third-party incident and vulnerability notification requirements",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22125,
            "controlIdentifier": "EX.MM-01.01",
            "controlGuid": "f3284f97-6ed9-5c5b-813b-da15fb4a0ab9",
            "controlTitle": "EX.MM-01.01 - Third-party monitoring and management resources",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22131,
            "controlIdentifier": "EX.MM-02.01",
            "controlGuid": "745af6ab-aa9b-564c-801a-6df5c25d4f60",
            "controlTitle": "EX.MM-02.01 - Third-party security program monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        }
    ],
    "exportDate": "",
    "exportVersion": "1.0"
}