{
    "profile": {
        "uuid": "2e2a28e9-a28f-5e18-814f-58f447784229",
        "name": "CRI Cloud Profile v2.0 — High Risk Level",
        "confidentiality": "Moderate",
        "integrity": "Moderate",
        "availability": "Moderate",
        "category": "Moderate",
        "isPublic": true
    },
    "mappings": [
        {
            "profileMappingId": 0,
            "controlId": 21820,
            "controlIdentifier": "GV.OC-01.01",
            "controlGuid": "9ffb3592-597f-5694-ab8a-c4d42e4f5a22",
            "controlTitle": "GV.OC-01.01 - Goverance alignment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21821,
            "controlIdentifier": "GV.OC-02.01",
            "controlGuid": "520d0893-2b2a-5961-a62a-95f2a65d186d",
            "controlTitle": "GV.OC-02.01 - Stakeholder obligations",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21824,
            "controlIdentifier": "GV.OC-03.01",
            "controlGuid": "7669d03f-c121-58f2-b9e7-a3a5f760d26d",
            "controlTitle": "GV.OC-03.01 - Legal, contractual, and regulatory obligations",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21825,
            "controlIdentifier": "GV.OC-03.02",
            "controlGuid": "45959f63-7802-57c5-a69c-e85ce935b633",
            "controlTitle": "GV.OC-03.02 - Data Privacy Policy",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21826,
            "controlIdentifier": "GV.OC-04.01",
            "controlGuid": "f0a05332-146d-51f0-8b17-d7a764170e24",
            "controlTitle": "GV.OC-04.01 - Key assets, functions, and external dependencies",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21827,
            "controlIdentifier": "GV.OC-04.02",
            "controlGuid": "a33783f5-2967-500d-9894-985411693f01",
            "controlTitle": "GV.OC-04.02 - Critical business processes",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21828,
            "controlIdentifier": "GV.OC-04.03",
            "controlGuid": "671acc39-1f6a-5f72-856f-e3cb390cd2ab",
            "controlTitle": "GV.OC-04.03 - Critical service delivery resilience",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21829,
            "controlIdentifier": "GV.OC-04.04",
            "controlGuid": "8e0bd832-1ed3-528d-8daa-89ce5ac6fba0",
            "controlTitle": "GV.OC-04.04 - Resilience prioritization",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21830,
            "controlIdentifier": "GV.OC-05.01",
            "controlGuid": "12081cd7-f5b7-5a16-9137-7f9bf77a8b5a",
            "controlTitle": "GV.OC-05.01 - Critical service dependencies",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21831,
            "controlIdentifier": "GV.OC-05.02",
            "controlGuid": "1c1ecbb7-a56c-589c-aee6-53734d78027a",
            "controlTitle": "GV.OC-05.02 - External dependency prioritization",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21832,
            "controlIdentifier": "GV.OC-05.03",
            "controlGuid": "5ee772b7-c3ac-5b73-aa04-a8fbc64f2e5d",
            "controlTitle": "GV.OC-05.03 - Alignment of resilience measures",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21833,
            "controlIdentifier": "GV.OC-05.04",
            "controlGuid": "8aa74129-92cb-5b92-977c-7ab15a441d12",
            "controlTitle": "GV.OC-05.04 - Recovery point objectives",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21834,
            "controlIdentifier": "GV.RM-01.01",
            "controlGuid": "159051fd-22d3-5682-b901-e729ed939004",
            "controlTitle": "GV.RM-01.01 - Risk management strategy approval",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21835,
            "controlIdentifier": "GV.RM-01.02",
            "controlGuid": "26f14356-ac3c-5807-82ea-0caf4eabc492",
            "controlTitle": "GV.RM-01.02 - Industry standards and guidelines",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21836,
            "controlIdentifier": "GV.RM-01.03",
            "controlGuid": "29e2eee5-f186-5707-84a2-db3245069ea3",
            "controlTitle": "GV.RM-01.03 - Technology and cybersecurity program objectives",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21837,
            "controlIdentifier": "GV.RM-01.04",
            "controlGuid": "ea84c4df-0c4a-5b7e-82e6-263988178b25",
            "controlTitle": "GV.RM-01.04 - Risk management program components",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21838,
            "controlIdentifier": "GV.RM-01.05",
            "controlGuid": "d903a6bf-1a4a-5db6-8cb6-cb7ca072a4fb",
            "controlTitle": "GV.RM-01.05 - Risk management program alignment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21842,
            "controlIdentifier": "GV.RM-03.01",
            "controlGuid": "31ed84b1-e776-59f2-b9e4-3a3bfe1a2eff",
            "controlTitle": "GV.RM-03.01 - Enterprise risk management framework integration",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21843,
            "controlIdentifier": "GV.RM-03.02",
            "controlGuid": "a8d540c3-b40a-5bb4-ab84-7059e82d3597",
            "controlTitle": "GV.RM-03.02 - Resilience program and enterprise risk alignment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21844,
            "controlIdentifier": "GV.RM-03.03",
            "controlGuid": "82d932c6-04cb-5c55-abbc-7c2ff3492f91",
            "controlTitle": "GV.RM-03.03 - Technology and cybersecurity risk program and enterprise risk alignment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21845,
            "controlIdentifier": "GV.RM-03.04",
            "controlGuid": "6202a820-b3dc-5722-b9a0-18a39a7c84e0",
            "controlTitle": "GV.RM-03.04 - Daily operations risk consideration",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21847,
            "controlIdentifier": "GV.RM-05.01",
            "controlGuid": "67db2a96-516b-5e2d-8e0f-1c9584ab3d9a",
            "controlTitle": "GV.RM-05.01 - Risk monitoring and escalation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21848,
            "controlIdentifier": "GV.RM-05.02",
            "controlGuid": "78ba437d-8b7d-55c2-9a62-12034a131194",
            "controlTitle": "GV.RM-05.02 - Third-party incident coordination",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21849,
            "controlIdentifier": "GV.RM-06.01",
            "controlGuid": "5ba39b5d-2784-5c2c-870d-0eeb383c5390",
            "controlTitle": "GV.RM-06.01 - Risk management processes",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21850,
            "controlIdentifier": "GV.RM-07.01",
            "controlGuid": "c3693a6f-d99c-51ee-8d2f-c242d394c725",
            "controlTitle": "GV.RM-07.01 - Negative and positive risk consideration",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21851,
            "controlIdentifier": "GV.RM-08.01",
            "controlGuid": "196ada63-7bad-5346-95c8-c1757acaf987",
            "controlTitle": "GV.RM-08.01 - Emerging technologies risk management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21852,
            "controlIdentifier": "GV.RM-08.02",
            "controlGuid": "a29bb3ed-2b95-509b-b167-551f61523344",
            "controlTitle": "GV.RM-08.02 - Project and procurement risk management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21853,
            "controlIdentifier": "GV.RM-08.03",
            "controlGuid": "ea0ef40e-ee82-5dd6-ae9d-653f283d921e",
            "controlTitle": "GV.RM-08.03 - Standard practices use",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21854,
            "controlIdentifier": "GV.RM-08.04",
            "controlGuid": "2afcda19-d3d4-595d-881e-af13e90eacd6",
            "controlTitle": "GV.RM-08.04 - Technology architecture governance",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21855,
            "controlIdentifier": "GV.RM-08.05",
            "controlGuid": "5e872472-11d7-535e-a352-76c7947a8558",
            "controlTitle": "GV.RM-08.05 - Technology architecture management processes",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21856,
            "controlIdentifier": "GV.RM-08.06",
            "controlGuid": "9a01f21b-4f44-55f9-b990-7d1249651288",
            "controlTitle": "GV.RM-08.06 - Program and project governance",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21857,
            "controlIdentifier": "GV.RM-08.07",
            "controlGuid": "5ba1f042-d0dd-555a-af91-95504a4a2b4b",
            "controlTitle": "GV.RM-08.07 - Project management methodology",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21858,
            "controlIdentifier": "GV.RM-09.01",
            "controlGuid": "5a44b6b7-c6ce-5a83-ac76-38d08b9c0f54",
            "controlTitle": "GV.RM-09.01 - Resilience strategy and program",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21859,
            "controlIdentifier": "GV.RM-09.02",
            "controlGuid": "a25600a0-7189-57fd-a28b-ee496324cc92",
            "controlTitle": "GV.RM-09.02 - Critical business function resilience",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21860,
            "controlIdentifier": "GV.RR-01.01",
            "controlGuid": "04845f8d-7438-5ed3-b344-d036c8075f0a",
            "controlTitle": "GV.RR-01.01 - Technology and cybersecurity risk management accountability",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21861,
            "controlIdentifier": "GV.RR-01.02",
            "controlGuid": "4aad4990-32b0-53cf-aad4-b6fd73e5b55e",
            "controlTitle": "GV.RR-01.02 - Third-party risk management accountability",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21862,
            "controlIdentifier": "GV.RR-01.03",
            "controlGuid": "ea39f4b7-22b4-5826-a4a4-357b59b6d54a",
            "controlTitle": "GV.RR-01.03 - Resilience risk management accountability",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21863,
            "controlIdentifier": "GV.RR-01.04",
            "controlGuid": "2970fe5f-3fc4-5aac-995d-1dc5dee11ee3",
            "controlTitle": "GV.RR-01.04 - Cybersecurity Officer designation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21864,
            "controlIdentifier": "GV.RR-01.05",
            "controlGuid": "678ad9e3-86bb-533f-be84-5f3cdb9851a0",
            "controlTitle": "GV.RR-01.05 - Technology Officer designation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21865,
            "controlIdentifier": "GV.RR-02.01",
            "controlGuid": "5f44b4d8-aac9-5ca5-b4c4-19af1aeb80a7",
            "controlTitle": "GV.RR-02.01 - Cybersecurity roles and responsibilities",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21866,
            "controlIdentifier": "GV.RR-02.02",
            "controlGuid": "2cb16b58-385e-553f-98d3-f5ecaf442bf8",
            "controlTitle": "GV.RR-02.02 - Threat identification roles and responsibilities",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21867,
            "controlIdentifier": "GV.RR-02.03",
            "controlGuid": "90b83bca-1540-5c1a-b128-10c609938a5e",
            "controlTitle": "GV.RR-02.03 - Resilience program roles and responsibilities",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21868,
            "controlIdentifier": "GV.RR-02.04",
            "controlGuid": "21a3ac01-8ed3-55be-a8de-43087c62c98d",
            "controlTitle": "GV.RR-02.04 - Third-party risk management roles and responsibilities",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21869,
            "controlIdentifier": "GV.RR-02.05",
            "controlGuid": "135dc0e6-d003-5582-8337-434f14946487",
            "controlTitle": "GV.RR-02.05 - Physical security roles and responsibilities",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21870,
            "controlIdentifier": "GV.RR-02.06",
            "controlGuid": "48f0a0c1-d377-5b11-9a1c-4a092bf32890",
            "controlTitle": "GV.RR-02.06 - Asset ownership and custodianship",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21871,
            "controlIdentifier": "GV.RR-02.07",
            "controlGuid": "e26221ef-5f94-5284-be57-89c995aef1fc",
            "controlTitle": "GV.RR-02.07 - Segregation of duties",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21872,
            "controlIdentifier": "GV.RR-03.01",
            "controlGuid": "c822792d-1f3e-598f-8a5a-a627123ece24",
            "controlTitle": "GV.RR-03.01 - Budgeting and resourcing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21873,
            "controlIdentifier": "GV.RR-03.02",
            "controlGuid": "2b6c1f39-2968-58be-ba1a-1d385c4d3956",
            "controlTitle": "GV.RR-03.02 - Skill and resource requirements",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21874,
            "controlIdentifier": "GV.RR-03.03",
            "controlGuid": "b8a82461-df39-5758-9277-af826f6f2a7f",
            "controlTitle": "GV.RR-03.03 - Adequate resources",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21875,
            "controlIdentifier": "GV.RR-04.01",
            "controlGuid": "4e46c769-0235-5578-85f8-684074288cf8",
            "controlTitle": "GV.RR-04.01 - Background checks",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21876,
            "controlIdentifier": "GV.RR-04.02",
            "controlGuid": "5dec958f-0bc2-55ee-931f-3b87e4134dc6",
            "controlTitle": "GV.RR-04.02 - Employment termination",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21877,
            "controlIdentifier": "GV.RR-04.03",
            "controlGuid": "66af23f9-60d5-515f-abee-4d718fee2416",
            "controlTitle": "GV.RR-04.03 - Insider threat management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21878,
            "controlIdentifier": "GV.PO-01.01",
            "controlGuid": "d03649ce-02ee-5aa8-ab8a-723d944b871e",
            "controlTitle": "GV.PO-01.01 - Policy documentation and approval",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21880,
            "controlIdentifier": "GV.PO-01.03",
            "controlGuid": "ae778b3d-38ed-5390-a42e-6f2ac291e80a",
            "controlTitle": "GV.PO-01.03 - Incentive and accountability program alignment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21881,
            "controlIdentifier": "GV.PO-01.04",
            "controlGuid": "59b0ef39-4cd8-5a2f-848c-d976782716b2",
            "controlTitle": "GV.PO-01.04 - Acceptable use policies",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21882,
            "controlIdentifier": "GV.PO-01.05",
            "controlGuid": "f7f25be2-78ad-590f-b697-aaede230369b",
            "controlTitle": "GV.PO-01.05 - Process and control alignment to policy",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21883,
            "controlIdentifier": "GV.PO-01.06",
            "controlGuid": "ae8102a7-a1aa-5465-9be4-bb41e906a04f",
            "controlTitle": "GV.PO-01.06 - Physical and environmental security policies",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21884,
            "controlIdentifier": "GV.PO-01.07",
            "controlGuid": "9b1cfef7-d2f4-5386-bfc2-6282b528be11",
            "controlTitle": "GV.PO-01.07 - Business continuity and resilience program policies",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21885,
            "controlIdentifier": "GV.PO-01.08",
            "controlGuid": "658cc1c9-042b-502a-bb9c-1bc6db0a91b1",
            "controlTitle": "GV.PO-01.08 - Third-party risk management policies",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21886,
            "controlIdentifier": "GV.PO-02.01",
            "controlGuid": "0a523397-794c-5843-a97e-d99089c44b6a",
            "controlTitle": "GV.PO-02.01 - Policy review and update",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21887,
            "controlIdentifier": "GV.OV-01.01",
            "controlGuid": "9ad0f875-c470-5866-a114-63a136c27781",
            "controlTitle": "GV.OV-01.01 - Governing authority risk management review",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21890,
            "controlIdentifier": "GV.OV-02.01",
            "controlGuid": "b7ac8808-70b9-50d6-9aa1-8f1014fe1e45",
            "controlTitle": "GV.OV-02.01 - Inherent risk assessment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21892,
            "controlIdentifier": "GV.OV-03.01",
            "controlGuid": "a6056601-5906-5b31-af8c-7f4f2a04b2cf",
            "controlTitle": "GV.OV-03.01 - Risk and performance indicators",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21893,
            "controlIdentifier": "GV.OV-03.02",
            "controlGuid": "9b4aa0a4-44d0-5d51-a96c-0e501192e532",
            "controlTitle": "GV.OV-03.02 - Resilience program performance",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21894,
            "controlIdentifier": "GV.SC-01.01",
            "controlGuid": "0e40d430-39a1-5088-b1de-d3c4b77c6def",
            "controlTitle": "GV.SC-01.01 - Third-party risk management strategy and program",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21895,
            "controlIdentifier": "GV.SC-01.02",
            "controlGuid": "b43ca273-39e4-55b0-a9a5-f9865cd718ae",
            "controlTitle": "GV.SC-01.02 - Aggregate third-party risk",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21896,
            "controlIdentifier": "GV.SC-02.01",
            "controlGuid": "26110f31-f0a9-526c-a5f4-268aed7a7bc1",
            "controlTitle": "GV.SC-02.01 - Designated organization and third-party responsibilities",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21897,
            "controlIdentifier": "GV.SC-03.01",
            "controlGuid": "3c1b7d72-656e-52e7-a3b9-c6860e2ad32a",
            "controlTitle": "GV.SC-03.01 - Third-party risk management alignment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21898,
            "controlIdentifier": "GV.SC-04.01",
            "controlGuid": "a2b237ab-abde-5399-a128-1d5c6eabb2e5",
            "controlTitle": "GV.SC-04.01 - Third-party inventory and risk-ranking",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21899,
            "controlIdentifier": "GV.SC-08.01",
            "controlGuid": "ee36f379-f434-581b-8222-ebe47f44fbed",
            "controlTitle": "GV.SC-08.01 - Resilience program and external dependencies",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21900,
            "controlIdentifier": "GV.SC-09.01",
            "controlGuid": "783140cd-aa65-5de3-be49-ed0a3628b306",
            "controlTitle": "GV.SC-09.01 - Third-party dependence consideration",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21901,
            "controlIdentifier": "GV.IR-01.01",
            "controlGuid": "16bd6834-0464-57f6-94bc-25ab68226ba4",
            "controlTitle": "GV.IR-01.01 - Independent risk management function",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21903,
            "controlIdentifier": "GV.IR-01.03",
            "controlGuid": "f3bcff29-d4b7-52b0-bf05-ea6c68b973c3",
            "controlTitle": "GV.IR-01.03 - Independent risk management coverage",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21904,
            "controlIdentifier": "GV.IR-02.01",
            "controlGuid": "924b4532-a5c2-5468-b0c5-01735f79dc0b",
            "controlTitle": "GV.IR-02.01 - Independent risk management program evaluations",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21905,
            "controlIdentifier": "GV.IR-02.02",
            "controlGuid": "87f867e0-29cf-5232-9614-7d98abd63eaa",
            "controlTitle": "GV.IR-02.02 - Independent risk management risk assessment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21907,
            "controlIdentifier": "GV.AU-01.01",
            "controlGuid": "b307f46f-50ee-5774-8c52-9d8ac7ab51a4",
            "controlTitle": "GV.AU-01.01 - Independent audit function",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21908,
            "controlIdentifier": "GV.AU-01.02",
            "controlGuid": "4cbdb49f-e5ba-59ba-8f7b-54c21ac3e450",
            "controlTitle": "GV.AU-01.02 - Independent audit evaluation plan",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21909,
            "controlIdentifier": "GV.AU-01.03",
            "controlGuid": "04dfaa78-199f-59e1-8528-79fd7146662c",
            "controlTitle": "GV.AU-01.03 - Independent audit cybersecurity program evaluation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21910,
            "controlIdentifier": "GV.AU-01.04",
            "controlGuid": "278e5429-753e-587e-9cf8-8984adb1eb04",
            "controlTitle": "GV.AU-01.04 - Independent audit third-party risk management program evaluation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21911,
            "controlIdentifier": "GV.AU-01.05",
            "controlGuid": "c7b07b3d-a8b8-53b6-9bd3-69abdce83445",
            "controlTitle": "GV.AU-01.05 - Independent audit compliance assessment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21912,
            "controlIdentifier": "GV.AU-02.01",
            "controlGuid": "84382713-61c7-5227-b610-a3280b14a404",
            "controlTitle": "GV.AU-02.01 - Independent audit procedure and audit plan update",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21913,
            "controlIdentifier": "GV.AU-02.02",
            "controlGuid": "22898e8d-9b98-5dfe-8c49-ee5b78349457",
            "controlTitle": "GV.AU-02.02 - Independent audit risk environment updates",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21914,
            "controlIdentifier": "GV.AU-03.01",
            "controlGuid": "a9fdeaa9-dde6-5a59-a70a-bb60326aa0d2",
            "controlTitle": "GV.AU-03.01 - Independent audit identification of cybersecurity weaknesses",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21915,
            "controlIdentifier": "GV.AU-03.02",
            "controlGuid": "3bd293f6-30da-59be-978f-1e875dcd509c",
            "controlTitle": "GV.AU-03.02 - Independent audit issue tracking",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21917,
            "controlIdentifier": "ID.AM-01.01",
            "controlGuid": "6469e1a9-38b9-5221-bd1e-3102a87673fc",
            "controlTitle": "ID.AM-01.01 - Physical device asset inventory",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21918,
            "controlIdentifier": "ID.AM-02.01",
            "controlGuid": "175d2a64-51e1-5f0f-bb61-670bd7943e37",
            "controlTitle": "ID.AM-02.01 - Software and applications asset inventory",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21919,
            "controlIdentifier": "ID.AM-03.01",
            "controlGuid": "9f724181-b8c7-5a06-a614-7b422e3dd82d",
            "controlTitle": "ID.AM-03.01 - Network diagrams",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21920,
            "controlIdentifier": "ID.AM-04.01",
            "controlGuid": "048ab89f-99e0-5d37-9248-3d4c4b39040a",
            "controlTitle": "ID.AM-04.01 - Third-party location asset inventory",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21921,
            "controlIdentifier": "ID.AM-05.01",
            "controlGuid": "32be3d3c-5b2c-54c3-93fe-971703c6cf2e",
            "controlTitle": "ID.AM-05.01 - Asset sensitivity and criticality classification",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21922,
            "controlIdentifier": "ID.AM-05.02",
            "controlGuid": "9d1a359a-dd3a-5b0d-b012-ad6a67e8eba1",
            "controlTitle": "ID.AM-05.02 - Asset protection prioritization",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21923,
            "controlIdentifier": "ID.AM-07.01",
            "controlGuid": "0871dafe-5cc1-5e21-bb46-752067660e6b",
            "controlTitle": "ID.AM-07.01 - Data inventory",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21924,
            "controlIdentifier": "ID.AM-08.01",
            "controlGuid": "a023475e-0506-5f6e-b336-0745efe706b7",
            "controlTitle": "ID.AM-08.01 - Asset lifecycle management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21925,
            "controlIdentifier": "ID.AM-08.02",
            "controlGuid": "eb9295b5-0cda-5aee-bc84-7b1ea1f94d79",
            "controlTitle": "ID.AM-08.02 - Ungoverned technology assets",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21926,
            "controlIdentifier": "ID.AM-08.03",
            "controlGuid": "536f25b4-cb4c-54d8-ab22-9d5444963466",
            "controlTitle": "ID.AM-08.03 - Data governance and lifecycle management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21927,
            "controlIdentifier": "ID.AM-08.04",
            "controlGuid": "c5226c50-f221-51ca-b7bd-8c505900d4f8",
            "controlTitle": "ID.AM-08.04 - Sensitive data physical protections",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21928,
            "controlIdentifier": "ID.AM-08.05",
            "controlGuid": "17541bb0-fa94-5b59-994d-c1d5d1754f3f",
            "controlTitle": "ID.AM-08.05 - Data destruction procedures",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21929,
            "controlIdentifier": "ID.AM-08.06",
            "controlGuid": "aadafc91-5606-512a-a2bc-ba808d60c4d2",
            "controlTitle": "ID.AM-08.06 - Third-party data risk coverage",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21930,
            "controlIdentifier": "ID.RA-01.01",
            "controlGuid": "cd85db80-c06d-55f5-9a8c-e788dd98ae7f",
            "controlTitle": "ID.RA-01.01 - Asset vulnerability identification",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21931,
            "controlIdentifier": "ID.RA-01.02",
            "controlGuid": "54b49440-023e-5e21-be58-17afab738b8a",
            "controlTitle": "ID.RA-01.02 - Business unit risk reporting",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21932,
            "controlIdentifier": "ID.RA-01.03",
            "controlGuid": "c6246a27-300d-5eca-a04a-7213a2e99a69",
            "controlTitle": "ID.RA-01.03 - Vulnerability management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21933,
            "controlIdentifier": "ID.RA-02.01",
            "controlGuid": "96ca2924-a743-5018-81f8-4058f25c497c",
            "controlTitle": "ID.RA-02.01 - Information sharing groups",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21934,
            "controlIdentifier": "ID.RA-02.02",
            "controlGuid": "0b5edaf6-efa2-5da1-9edc-9a9cfbb1f1dc",
            "controlTitle": "ID.RA-02.02 - Security information sharing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21935,
            "controlIdentifier": "ID.RA-03.01",
            "controlGuid": "195084e8-0383-544f-ac5b-b284d0225c33",
            "controlTitle": "ID.RA-03.01 - Threat identification and analysis",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21936,
            "controlIdentifier": "ID.RA-03.02",
            "controlGuid": "8945eb2f-e471-52dc-8139-ffece873e103",
            "controlTitle": "ID.RA-03.02 - Stakeholder-provided threat information",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21937,
            "controlIdentifier": "ID.RA-03.03",
            "controlGuid": "5713d1fa-5456-5157-bb59-1e53e837606e",
            "controlTitle": "ID.RA-03.03 - Extreme event consideration",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21938,
            "controlIdentifier": "ID.RA-03.04",
            "controlGuid": "7f4b5906-b9d6-50fa-844a-0b7f15141386",
            "controlTitle": "ID.RA-03.04 - Threat analysis program",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21939,
            "controlIdentifier": "ID.RA-04.01",
            "controlGuid": "3e41f571-146a-51ac-9087-28e92a0abf55",
            "controlTitle": "ID.RA-04.01 - Risk impact assessment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21940,
            "controlIdentifier": "ID.RA-05.01",
            "controlGuid": "5a997911-136b-5cd4-a415-3551d3fa8b9d",
            "controlTitle": "ID.RA-05.01 - Risk assessment considerations",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21941,
            "controlIdentifier": "ID.RA-05.02",
            "controlGuid": "452ac096-1df2-50fc-8323-1468eaec48c1",
            "controlTitle": "ID.RA-05.02 - Threat modeling capabilities",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21942,
            "controlIdentifier": "ID.RA-05.03",
            "controlGuid": "99c9bf4a-9ab8-55f4-bcda-bdf5af591471",
            "controlTitle": "ID.RA-05.03 - Business risk assessment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21943,
            "controlIdentifier": "ID.RA-05.04",
            "controlGuid": "86486ec4-9333-5648-a803-cca8cb45274a",
            "controlTitle": "ID.RA-05.04 - Scenario planning and table-top-exercises",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21944,
            "controlIdentifier": "ID.RA-06.01",
            "controlGuid": "fb954120-85df-5b57-bde7-adb8fe572e1d",
            "controlTitle": "ID.RA-06.01 - Identification of actionable risk remediations",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21945,
            "controlIdentifier": "ID.RA-06.02",
            "controlGuid": "5f68c216-d5ec-562e-b24a-b9123f53cfdb",
            "controlTitle": "ID.RA-06.02 - Prioritization of risk remediation responses",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21947,
            "controlIdentifier": "ID.RA-06.04",
            "controlGuid": "e9a84f8e-3468-5d9a-a42b-94e9985ecd67",
            "controlTitle": "ID.RA-06.04 - Threat, impact, and risk assessment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21948,
            "controlIdentifier": "ID.RA-06.05",
            "controlGuid": "8b3e98f5-1448-59f0-aef3-25f4ace1814a",
            "controlTitle": "ID.RA-06.05 - Prioritization of vulnerability remediation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21949,
            "controlIdentifier": "ID.RA-06.06",
            "controlGuid": "17be31c1-05ff-52f3-9a8b-91da46766e2e",
            "controlTitle": "ID.RA-06.06 - Risks identified in testing or incident response",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21950,
            "controlIdentifier": "ID.RA-07.01",
            "controlGuid": "c8ca2970-6c7b-5e9e-8dc9-f31c7eb9bd9d",
            "controlTitle": "ID.RA-07.01 - Change management standards and procedures",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21951,
            "controlIdentifier": "ID.RA-07.02",
            "controlGuid": "b0cfbeb6-bd7b-5871-85a8-ec50f26185e5",
            "controlTitle": "ID.RA-07.02 - System change risk categorization",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21952,
            "controlIdentifier": "ID.RA-07.03",
            "controlGuid": "c8c83edc-35c1-5257-aace-d87a87d68ecd",
            "controlTitle": "ID.RA-07.03 - Project and system change ancillary impacts",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21953,
            "controlIdentifier": "ID.RA-07.04",
            "controlGuid": "2dfdd55a-ad5b-51c3-ae76-ec7198939301",
            "controlTitle": "ID.RA-07.04 - Risk exception management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21954,
            "controlIdentifier": "ID.RA-07.05",
            "controlGuid": "f69577c5-963f-5551-8535-e121aa4cca94",
            "controlTitle": "ID.RA-07.05 - Vulnerability exception management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21955,
            "controlIdentifier": "ID.RA-08.01",
            "controlGuid": "76089caa-ddaa-5a4d-962e-ed95e54ec5e5",
            "controlTitle": "ID.RA-08.01 - Vulnerability disclosure receipt",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21956,
            "controlIdentifier": "ID.RA-08.02",
            "controlGuid": "367baac0-2db5-59f2-b0e3-257745fb0353",
            "controlTitle": "ID.RA-08.02 - Vulnerability disclosure analysis",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21957,
            "controlIdentifier": "ID.IM-01.01",
            "controlGuid": "f56e25af-491c-5825-ba7a-8822294e0153",
            "controlTitle": "ID.IM-01.01 - Control testing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21958,
            "controlIdentifier": "ID.IM-01.02",
            "controlGuid": "62b25953-591e-5c30-9c8d-5526debc96b6",
            "controlTitle": "ID.IM-01.02 - Key indicators and risk metrics",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21959,
            "controlIdentifier": "ID.IM-01.03",
            "controlGuid": "21ac2dce-02ee-5050-9562-aa742dc029ac",
            "controlTitle": "ID.IM-01.03 - Improvement identification",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21960,
            "controlIdentifier": "ID.IM-01.04",
            "controlGuid": "ed076f8e-37ed-5da0-8ea4-f9b84ffad4ce",
            "controlTitle": "ID.IM-01.04 - Continuous improvement",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21961,
            "controlIdentifier": "ID.IM-01.05",
            "controlGuid": "652952b5-0c04-551a-8539-c84f0c30d9db",
            "controlTitle": "ID.IM-01.05 - Third-party risk management program assessment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21962,
            "controlIdentifier": "ID.IM-02.01",
            "controlGuid": "8afe162c-add1-51ee-87e2-8da68b455006",
            "controlTitle": "ID.IM-02.01 - Penetration testing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21964,
            "controlIdentifier": "ID.IM-02.03",
            "controlGuid": "7137691e-2fda-5fea-a0c5-6e8dafd34da4",
            "controlTitle": "ID.IM-02.03 - Incident management effectiveness testing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21965,
            "controlIdentifier": "ID.IM-02.04",
            "controlGuid": "e8ed1f6f-b326-54f5-91f9-4bfc6c6a52ae",
            "controlTitle": "ID.IM-02.04 - Resilience strategy and plan testing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21966,
            "controlIdentifier": "ID.IM-02.05",
            "controlGuid": "29535f50-3228-5184-bf14-4898d34fd566",
            "controlTitle": "ID.IM-02.05 - Resilience testing scenarios",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21967,
            "controlIdentifier": "ID.IM-02.06",
            "controlGuid": "52996060-bc5f-5e77-9e3a-01fdd4f521a2",
            "controlTitle": "ID.IM-02.06 - Accurate data recovery",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21970,
            "controlIdentifier": "ID.IM-02.09",
            "controlGuid": "5b45420d-1148-5e41-87d5-eef25a8eae72",
            "controlTitle": "ID.IM-02.09 - Retesting of identified gaps",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21971,
            "controlIdentifier": "ID.IM-03.01",
            "controlGuid": "b08a8801-4b63-52f1-af95-11d186054f8b",
            "controlTitle": "ID.IM-03.01 - Protection controls improvement",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21972,
            "controlIdentifier": "ID.IM-03.02",
            "controlGuid": "14ce32ca-c8a3-5063-93cc-e063d0e1bea5",
            "controlTitle": "ID.IM-03.02 - Monitoring and detection program improvement",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21973,
            "controlIdentifier": "ID.IM-04.01",
            "controlGuid": "73a8a64e-ac39-58e4-bfd1-760cba6a86b3",
            "controlTitle": "ID.IM-04.01 - Alignment of business continuity, disaster recovery, and response programs",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21974,
            "controlIdentifier": "ID.IM-04.02",
            "controlGuid": "f4660607-7542-55ee-8ab2-0a1b62311b12",
            "controlTitle": "ID.IM-04.02 - Incident management roles and responsibilities",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21975,
            "controlIdentifier": "ID.IM-04.03",
            "controlGuid": "659d07d8-1b53-5d74-8698-88f71852c2d7",
            "controlTitle": "ID.IM-04.03 - Restoration procedures",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21977,
            "controlIdentifier": "ID.IM-04.05",
            "controlGuid": "b5b1c00c-8244-5844-a94b-048b76cb69c2",
            "controlTitle": "ID.IM-04.05 - Long term loss contingency planning",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21979,
            "controlIdentifier": "ID.IM-04.07",
            "controlGuid": "b5f538e3-dbdb-5f50-8d16-3e49ec111ca1",
            "controlTitle": "ID.IM-04.07 - Incident management support resources",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21980,
            "controlIdentifier": "ID.IM-04.08",
            "controlGuid": "ed1fdefd-e6a9-5836-ba33-596669801ebf",
            "controlTitle": "ID.IM-04.08 - Response program improvement",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21981,
            "controlIdentifier": "PR.AA-01.01",
            "controlGuid": "139047dc-6f5f-5870-9de3-38b88013b585",
            "controlTitle": "PR.AA-01.01 - Identity and credential management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21982,
            "controlIdentifier": "PR.AA-01.02",
            "controlGuid": "bb735ee5-1d89-5010-b067-691759356d43",
            "controlTitle": "PR.AA-01.02 - Physical and logical access",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21983,
            "controlIdentifier": "PR.AA-02.01",
            "controlGuid": "6a0ee84b-c8c1-5567-b2fc-daca8ace9946",
            "controlTitle": "PR.AA-02.01 - Authentication of identity",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21984,
            "controlIdentifier": "PR.AA-03.01",
            "controlGuid": "048f531a-c0f8-5665-92f2-69c090aabc03",
            "controlTitle": "PR.AA-03.01 - Authentication requirements",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21985,
            "controlIdentifier": "PR.AA-03.02",
            "controlGuid": "45bd10cb-e4c5-5a42-af4f-0c11fa3fdcd8",
            "controlTitle": "PR.AA-03.02 - Access authorization",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21986,
            "controlIdentifier": "PR.AA-03.03",
            "controlGuid": "9e06cd77-8b8f-525e-9111-ed12340032ec",
            "controlTitle": "PR.AA-03.03 - Email verification mechanisms",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21987,
            "controlIdentifier": "PR.AA-04.01",
            "controlGuid": "7072b942-5e38-5bf5-a50d-934c7f4a2562",
            "controlTitle": "PR.AA-04.01 - Access control within and across security perimeters",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21988,
            "controlIdentifier": "PR.AA-05.01",
            "controlGuid": "2cffd0e7-8f07-5b34-af6b-be0fba1a7b75",
            "controlTitle": "PR.AA-05.01 - Access privilege limitation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21989,
            "controlIdentifier": "PR.AA-05.02",
            "controlGuid": "dfe058c0-5a44-5229-8c53-ec8aad488659",
            "controlTitle": "PR.AA-05.02 - Privileged system access",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21990,
            "controlIdentifier": "PR.AA-05.03",
            "controlGuid": "de5df059-4c7c-5d7c-a007-5bbd7e646c9d",
            "controlTitle": "PR.AA-05.03 - Service accounts",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21991,
            "controlIdentifier": "PR.AA-05.04",
            "controlGuid": "17142e4d-eddd-5ac1-9dd6-f85752624f55",
            "controlTitle": "PR.AA-05.04 - Third-party access management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21992,
            "controlIdentifier": "PR.AA-06.01",
            "controlGuid": "fe8a4b39-dd6e-5bf2-9ffd-d787f721b78a",
            "controlTitle": "PR.AA-06.01 - Physical access security",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21993,
            "controlIdentifier": "PR.AA-06.02",
            "controlGuid": "ae7f4785-4407-58c3-94c0-6c5298b66d85",
            "controlTitle": "PR.AA-06.02 - Physical and visual access to information assets",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21994,
            "controlIdentifier": "PR.AT-01.01",
            "controlGuid": "40d85577-6449-5624-81fb-e442effff59e",
            "controlTitle": "PR.AT-01.01 - Cybersecurity awareness training",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21995,
            "controlIdentifier": "PR.AT-01.02",
            "controlGuid": "cfccbb89-84c2-5bc3-9313-e4bc3ba49fba",
            "controlTitle": "PR.AT-01.02 - Cybersecurity awareness training content",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21996,
            "controlIdentifier": "PR.AT-01.03",
            "controlGuid": "d7d18fea-3dda-5335-b826-4e7d2d19f346",
            "controlTitle": "PR.AT-01.03 - Cybersecurity awareness training update",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21997,
            "controlIdentifier": "PR.AT-01.04",
            "controlGuid": "e02abfeb-4038-5d3c-af4b-d28d24d87f71",
            "controlTitle": "PR.AT-01.04 - Change-related training",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21998,
            "controlIdentifier": "PR.AT-02.01",
            "controlGuid": "9c28b719-4977-5af7-88fa-7c17037c3b79",
            "controlTitle": "PR.AT-02.01 - Skill-specific training",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 21999,
            "controlIdentifier": "PR.AT-02.02",
            "controlGuid": "370b8b5f-d6b6-51c7-9dd6-ae5732e13f54",
            "controlTitle": "PR.AT-02.02 - Training of high-risk groups",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22000,
            "controlIdentifier": "PR.AT-02.03",
            "controlGuid": "6d5b1dd5-5a8c-5cef-ac45-339a7211876e",
            "controlTitle": "PR.AT-02.03 - Response and recovery plan training",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22001,
            "controlIdentifier": "PR.AT-02.04",
            "controlGuid": "37ea3d7b-d2d3-5ee1-9ca3-9ca79db2efa1",
            "controlTitle": "PR.AT-02.04 - Incident management skill enhancement",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22002,
            "controlIdentifier": "PR.AT-02.05",
            "controlGuid": "bce38166-d0da-5978-abcb-a6beb186df30",
            "controlTitle": "PR.AT-02.05 - Third-party awareness training",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22003,
            "controlIdentifier": "PR.AT-02.06",
            "controlGuid": "0cbf4db1-d6e5-5b0d-b5b4-80e4a173d22e",
            "controlTitle": "PR.AT-02.06 - Customer awareness training",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22006,
            "controlIdentifier": "PR.DS-01.01",
            "controlGuid": "d25c649a-a9be-5c7e-8de9-77831de70582",
            "controlTitle": "PR.DS-01.01 - Data-at-rest protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22007,
            "controlIdentifier": "PR.DS-01.02",
            "controlGuid": "4c5c721d-15d2-5241-b246-27de355a791b",
            "controlTitle": "PR.DS-01.02 - Data loss prevention",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22008,
            "controlIdentifier": "PR.DS-01.03",
            "controlGuid": "b6ec1730-b0f9-5046-ad82-1eab494c0718",
            "controlTitle": "PR.DS-01.03 - Removable media protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22009,
            "controlIdentifier": "PR.DS-02.01",
            "controlGuid": "f7d5f574-8241-5f49-821a-c32e8ca963f2",
            "controlTitle": "PR.DS-02.01 - Data-in-transit protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22010,
            "controlIdentifier": "PR.DS-10.01",
            "controlGuid": "708a01a7-8410-55d1-9f93-5992f8818376",
            "controlTitle": "PR.DS-10.01 - Data-in-use protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22011,
            "controlIdentifier": "PR.DS-11.01",
            "controlGuid": "7e6086d8-1077-5037-9ca7-5e310ca80e09",
            "controlTitle": "PR.DS-11.01 - Data backup and replication",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22012,
            "controlIdentifier": "PR.PS-01.01",
            "controlGuid": "3cb49ec9-951a-5e64-919a-1a64a53973ec",
            "controlTitle": "PR.PS-01.01 - Configuration baselines",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22013,
            "controlIdentifier": "PR.PS-01.02",
            "controlGuid": "d70340f4-2d32-50f0-96f3-faa94d02c5e5",
            "controlTitle": "PR.PS-01.02 - Least functionality",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22014,
            "controlIdentifier": "PR.PS-01.03",
            "controlGuid": "7c5366b7-0b37-5fe7-bb04-6313e442be6d",
            "controlTitle": "PR.PS-01.03 - Configuration deviation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22015,
            "controlIdentifier": "PR.PS-01.04",
            "controlGuid": "856c0b7b-912b-5ceb-9516-2e7e3f8a69f7",
            "controlTitle": "PR.PS-01.04 - Time services and synchronization",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22016,
            "controlIdentifier": "PR.PS-01.05",
            "controlGuid": "3137846b-e1d0-5027-a7cb-7f6bbe24680d",
            "controlTitle": "PR.PS-01.05 - Encryption standards",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22017,
            "controlIdentifier": "PR.PS-01.06",
            "controlGuid": "c678f99d-0ecd-545d-b2c7-a0c28b0669b7",
            "controlTitle": "PR.PS-01.06 - Encryption management practices",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22018,
            "controlIdentifier": "PR.PS-01.07",
            "controlGuid": "870dc954-cddf-5d3a-9488-ada1171f2dc8",
            "controlTitle": "PR.PS-01.07 - Cryptographic keys and certificates",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22019,
            "controlIdentifier": "PR.PS-01.08",
            "controlGuid": "d7af933f-0222-5044-8c8d-6fdeec795798",
            "controlTitle": "PR.PS-01.08 - End-user device protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22020,
            "controlIdentifier": "PR.PS-01.09",
            "controlGuid": "24dd0fcb-f2cb-521a-8028-a10fb970cbe9",
            "controlTitle": "PR.PS-01.09 - Virtualized end point protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22021,
            "controlIdentifier": "PR.PS-02.01",
            "controlGuid": "c61af87b-3275-58d3-9d19-892753839534",
            "controlTitle": "PR.PS-02.01 - Patch identification and application",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22022,
            "controlIdentifier": "PR.PS-02.02",
            "controlGuid": "54782a90-fe6e-5f2a-9fb3-23573b007a50",
            "controlTitle": "PR.PS-02.02 - Application lifecycle management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22023,
            "controlIdentifier": "PR.PS-02.03",
            "controlGuid": "aa8f6366-ec83-5382-b1cf-1448b8e5765d",
            "controlTitle": "PR.PS-02.03 - Technology obsolescence",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22024,
            "controlIdentifier": "PR.PS-03.01",
            "controlGuid": "f82888c6-bd25-55f1-b46f-56d056087fef",
            "controlTitle": "PR.PS-03.01 - Asset maintenance",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22025,
            "controlIdentifier": "PR.PS-04.01",
            "controlGuid": "0d38cb3c-c9a3-58cc-acd4-ef0576551877",
            "controlTitle": "PR.PS-04.01 - Log management standards",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22026,
            "controlIdentifier": "PR.PS-04.02",
            "controlGuid": "6a4613df-4eb0-5f85-9b52-2e29d736124a",
            "controlTitle": "PR.PS-04.02 - Log coverage",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22027,
            "controlIdentifier": "PR.PS-04.03",
            "controlGuid": "f9e55313-9c90-50be-b05a-786fe5c832c8",
            "controlTitle": "PR.PS-04.03 - Log security and retention",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22028,
            "controlIdentifier": "PR.PS-05.01",
            "controlGuid": "09585d22-c5e4-5f5c-8fa1-f1d4e43e15e2",
            "controlTitle": "PR.PS-05.01 - Malware prevention",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22029,
            "controlIdentifier": "PR.PS-05.02",
            "controlGuid": "6cadb84b-e081-5daf-8d80-ad9247913ac0",
            "controlTitle": "PR.PS-05.02 - Mobile code prevention",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22030,
            "controlIdentifier": "PR.PS-05.03",
            "controlGuid": "9f251ebf-bce6-5dd8-b2d3-531fe1fb7021",
            "controlTitle": "PR.PS-05.03 - Email and message service protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22031,
            "controlIdentifier": "PR.PS-06.01",
            "controlGuid": "233efc19-43cb-5140-a8ae-939d8ff48620",
            "controlTitle": "PR.PS-06.01 - Secure SDLC processes",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22032,
            "controlIdentifier": "PR.PS-06.02",
            "controlGuid": "29c2e8e1-2f77-5189-ae0a-9918fca3c9e8",
            "controlTitle": "PR.PS-06.02 - Target environment security design",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22033,
            "controlIdentifier": "PR.PS-06.03",
            "controlGuid": "d1c6c02c-a577-567b-af41-c9d0cf6f9973",
            "controlTitle": "PR.PS-06.03 - System requirements management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22034,
            "controlIdentifier": "PR.PS-06.04",
            "controlGuid": "6790bc52-ed36-5a06-828d-d39e5865ffd4",
            "controlTitle": "PR.PS-06.04 - Development and testing security",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22035,
            "controlIdentifier": "PR.PS-06.05",
            "controlGuid": "af0ccfe5-5836-53dd-9d6c-c83f8f9926df",
            "controlTitle": "PR.PS-06.05 - Testing and validation strategy",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22036,
            "controlIdentifier": "PR.PS-06.06",
            "controlGuid": "81d40e00-d135-5bec-8a28-a040121d74c1",
            "controlTitle": "PR.PS-06.06 - Vulnerability remediation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22037,
            "controlIdentifier": "PR.PS-06.07",
            "controlGuid": "3663c4e0-9e61-5a56-97a8-cdd3755271f3",
            "controlTitle": "PR.PS-06.07 - Development and operational process alignment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22038,
            "controlIdentifier": "PR.PS-06.08",
            "controlGuid": "9870f2be-a58e-531c-960d-ce8c188fc175",
            "controlTitle": "PR.PS-06.08 - System documentation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22039,
            "controlIdentifier": "PR.PS-06.09",
            "controlGuid": "24bcf9ae-68d7-5594-80c1-d997c2a3c356",
            "controlTitle": "PR.PS-06.09 - End user computing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22040,
            "controlIdentifier": "PR.PS-06.10",
            "controlGuid": "8e2b198d-ed3e-559c-b7b4-e53c13919b71",
            "controlTitle": "PR.PS-06.10 - Database and data platform security",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22041,
            "controlIdentifier": "PR.PS-07.01",
            "controlGuid": "953d5287-3264-5592-8c97-2ecd34fa0a81",
            "controlTitle": "PR.PS-07.01 - Technology operations and problem management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22042,
            "controlIdentifier": "PR.PS-07.02",
            "controlGuid": "1ab4387a-ff69-57e9-8acb-528f52a291ad",
            "controlTitle": "PR.PS-07.02 - Service and support functions",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22043,
            "controlIdentifier": "PR.IR-01.01",
            "controlGuid": "8441910a-fee5-5360-a6e4-9d398f8dab0a",
            "controlTitle": "PR.IR-01.01 - Network segmentation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22044,
            "controlIdentifier": "PR.IR-01.02",
            "controlGuid": "b73aa790-7e86-54b5-8895-e7341abcca3e",
            "controlTitle": "PR.IR-01.02 - Network device configurations",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22045,
            "controlIdentifier": "PR.IR-01.03",
            "controlGuid": "ef91e6e4-1244-522e-afed-45c7f66bea93",
            "controlTitle": "PR.IR-01.03 - Network communications integrity and availability",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22046,
            "controlIdentifier": "PR.IR-01.04",
            "controlGuid": "a938eafc-f640-5112-a521-ddf2f14f730b",
            "controlTitle": "PR.IR-01.04 - Wireless network protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22047,
            "controlIdentifier": "PR.IR-01.05",
            "controlGuid": "f1273978-e7e8-539f-9aba-5776e1ddfe2e",
            "controlTitle": "PR.IR-01.05 - Remote access protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22048,
            "controlIdentifier": "PR.IR-01.06",
            "controlGuid": "1e48dd1e-4843-580e-bc69-f9e57aa43343",
            "controlTitle": "PR.IR-01.06 - Production environment segregation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22049,
            "controlIdentifier": "PR.IR-01.07",
            "controlGuid": "b58e3bc0-7c10-539b-b06b-cb6186b3ed16",
            "controlTitle": "PR.IR-01.07 - Operational and IoT technologies",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22050,
            "controlIdentifier": "PR.IR-01.08",
            "controlGuid": "0483a06d-a29a-5a2f-a768-81598bdabede",
            "controlTitle": "PR.IR-01.08 - End-user device access",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22051,
            "controlIdentifier": "PR.IR-02.01",
            "controlGuid": "609b54c3-25ab-567f-8231-0cbf5d88c697",
            "controlTitle": "PR.IR-02.01 - Physical and environmental controls",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22052,
            "controlIdentifier": "PR.IR-03.01",
            "controlGuid": "4ed11da9-593e-5721-8a29-63bf333158b0",
            "controlTitle": "PR.IR-03.01 - Alternative resilience mechanisms",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22053,
            "controlIdentifier": "PR.IR-04.01",
            "controlGuid": "3ee2400b-d431-5f0b-9b8e-39ef142e15c6",
            "controlTitle": "PR.IR-04.01 - Utilization monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22054,
            "controlIdentifier": "PR.IR-04.02",
            "controlGuid": "fd5796df-a45c-5aeb-b1ea-dda53b0b0f24",
            "controlTitle": "PR.IR-04.02 - Availability and capacity management",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22055,
            "controlIdentifier": "DE.CM-01.01",
            "controlGuid": "4df9b6b3-d33a-5295-9672-327a12ea1cc7",
            "controlTitle": "DE.CM-01.01 - Intrusion detection and prevention",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22056,
            "controlIdentifier": "DE.CM-01.02",
            "controlGuid": "1f841163-8bf8-512a-bc2e-8f3d1bc6f066",
            "controlTitle": "DE.CM-01.02 - Network traffic volume monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22057,
            "controlIdentifier": "DE.CM-01.03",
            "controlGuid": "8852a365-f2a6-5849-87f6-de79f48d0bed",
            "controlTitle": "DE.CM-01.03 - Unauthorized network connections and data transfers",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22058,
            "controlIdentifier": "DE.CM-01.04",
            "controlGuid": "fc596d74-3fd8-5bc0-960d-456cfcbf537b",
            "controlTitle": "DE.CM-01.04 - Unauthorized device connection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22059,
            "controlIdentifier": "DE.CM-01.05",
            "controlGuid": "001c2b5d-ffbf-5b6c-817a-4b661931dd97",
            "controlTitle": "DE.CM-01.05 - Website and service blocking",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22060,
            "controlIdentifier": "DE.CM-01.06",
            "controlGuid": "e2fc5490-542a-5449-ad7a-474f65bf45d8",
            "controlTitle": "DE.CM-01.06 - Deception techniques",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22061,
            "controlIdentifier": "DE.CM-02.01",
            "controlGuid": "f59b302e-53fd-51df-b18b-dff5370246ef",
            "controlTitle": "DE.CM-02.01 - Anomalous activity detection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22062,
            "controlIdentifier": "DE.CM-03.01",
            "controlGuid": "e3f407c5-722a-532f-8f6e-33643235cf80",
            "controlTitle": "DE.CM-03.01 - Access activity logging and monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22063,
            "controlIdentifier": "DE.CM-03.02",
            "controlGuid": "535b35e7-ad95-5f6c-aed7-3ae9a0688a1e",
            "controlTitle": "DE.CM-03.02 - Personnel activity monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22064,
            "controlIdentifier": "DE.CM-03.03",
            "controlGuid": "e6aaf5e3-315b-57ae-b5a8-3b484a76593c",
            "controlTitle": "DE.CM-03.03 - Privileged account monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22065,
            "controlIdentifier": "DE.CM-06.01",
            "controlGuid": "aba8b5c1-e54a-58d3-8700-32e41335a8bf",
            "controlTitle": "DE.CM-06.01 - Third-party connection authorization",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22066,
            "controlIdentifier": "DE.CM-06.02",
            "controlGuid": "e19ad8f9-237d-5941-8c80-95a875aa4fc8",
            "controlTitle": "DE.CM-06.02 - Third-party access monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22067,
            "controlIdentifier": "DE.CM-09.01",
            "controlGuid": "6a2e38f9-0cfe-5c6d-b245-0d5b7825c309",
            "controlTitle": "DE.CM-09.01 - Software and data integrity checking",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22068,
            "controlIdentifier": "DE.CM-09.02",
            "controlGuid": "f2794dc7-1c3c-5edd-8eae-0d685bc1ef34",
            "controlTitle": "DE.CM-09.02 - Hardware integrity checking",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22069,
            "controlIdentifier": "DE.CM-09.03",
            "controlGuid": "9918763c-4413-5da8-b5c4-e044f3713a61",
            "controlTitle": "DE.CM-09.03 - Unauthorized software, hardware, or configuration changes",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22070,
            "controlIdentifier": "DE.AE-02.01",
            "controlGuid": "feb80a1b-354f-532b-9624-a90fe63a9d13",
            "controlTitle": "DE.AE-02.01 - Event analysis and detection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22071,
            "controlIdentifier": "DE.AE-02.02",
            "controlGuid": "ed83c11a-334e-5116-9a82-23efa778b8b8",
            "controlTitle": "DE.AE-02.02 - Alert parameters and thresholds",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22072,
            "controlIdentifier": "DE.AE-03.01",
            "controlGuid": "55604e11-9c65-56a8-b3b9-605dc0cdc617",
            "controlTitle": "DE.AE-03.01 - Infrastructure monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22073,
            "controlIdentifier": "DE.AE-03.02",
            "controlGuid": "fe65a03d-adc2-5d7d-90a2-ec1f1604c0a1",
            "controlTitle": "DE.AE-03.02 - Event aggregation, correlation, and analysis",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22074,
            "controlIdentifier": "DE.AE-04.01",
            "controlGuid": "d95810c7-ee9b-54b5-84e0-a637e29e32f5",
            "controlTitle": "DE.AE-04.01 - Event triage",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22075,
            "controlIdentifier": "DE.AE-06.01",
            "controlGuid": "fc43e33b-b6b1-59a4-95b1-48d819eda728",
            "controlTitle": "DE.AE-06.01 - Event alerting",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22076,
            "controlIdentifier": "DE.AE-07.01",
            "controlGuid": "c61d4e79-8df4-5915-b4de-de22d6f01518",
            "controlTitle": "DE.AE-07.01 - Event intelligence integration",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22077,
            "controlIdentifier": "DE.AE-07.02",
            "controlGuid": "e5292793-4a52-55dd-8f02-30dd356e6bc3",
            "controlTitle": "DE.AE-07.02 - Event data packaging",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22078,
            "controlIdentifier": "DE.AE-08.01",
            "controlGuid": "17f6a7d3-e414-5664-8571-51aa3741667d",
            "controlTitle": "DE.AE-08.01 - Event classification",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22079,
            "controlIdentifier": "RS.MA-01.01",
            "controlGuid": "44bc27cf-1c71-5346-8d4b-b976986b45fd",
            "controlTitle": "RS.MA-01.01 - Response plan execution",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22080,
            "controlIdentifier": "RS.MA-02.01",
            "controlGuid": "6c8b1f84-e12b-5927-b8f9-d4e36a962e7a",
            "controlTitle": "RS.MA-02.01 - Reliable event detection and analysis",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22081,
            "controlIdentifier": "RS.MA-03.01",
            "controlGuid": "f236f94c-19ce-5746-b093-ca945770edba",
            "controlTitle": "RS.MA-03.01 - Incident response prioritization",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22082,
            "controlIdentifier": "RS.MA-04.01",
            "controlGuid": "1f4bcec2-efeb-5b38-bda9-0afc8635dd56",
            "controlTitle": "RS.MA-04.01 - Response activity central coordination",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22083,
            "controlIdentifier": "RS.MA-05.01",
            "controlGuid": "1bae5899-5bcc-5109-b754-751772f7316a",
            "controlTitle": "RS.MA-05.01 - Incident severity levels and escalation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22084,
            "controlIdentifier": "RS.AN-03.01",
            "controlGuid": "00ed5a86-e6f9-501a-88ca-2dba4195d901",
            "controlTitle": "RS.AN-03.01 - Incident investigation and root cause determination",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22085,
            "controlIdentifier": "RS.AN-06.01",
            "controlGuid": "e4b25c06-1fcc-5bf3-8650-8ec3cb66cf3d",
            "controlTitle": "RS.AN-06.01 - Incident investigation and evidence collection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22086,
            "controlIdentifier": "RS.AN-07.01",
            "controlGuid": "3dda66c3-85d9-5488-bc10-6f742f62c64b",
            "controlTitle": "RS.AN-07.01 - Forensic evidence protection",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22087,
            "controlIdentifier": "RS.AN-08.01",
            "controlGuid": "4d26c78c-57d3-55f7-8e9b-4dd2c09775ee",
            "controlTitle": "RS.AN-08.01 - Incident impact analysis",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22088,
            "controlIdentifier": "RS.CO-02.01",
            "controlGuid": "e1ed45a3-903b-5a8d-a0cd-3d6983d2f5d4",
            "controlTitle": "RS.CO-02.01 - Incident escalation protocols",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22089,
            "controlIdentifier": "RS.CO-02.02",
            "controlGuid": "3baa4aef-c5d1-56c3-aad3-a5bc2bcc5828",
            "controlTitle": "RS.CO-02.02 - Incident notification and reporting",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22090,
            "controlIdentifier": "RS.CO-02.03",
            "controlGuid": "63e8d26a-70d9-5ddc-9f39-97b078a135d1",
            "controlTitle": "RS.CO-02.03 - Incident response communication procedures",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22091,
            "controlIdentifier": "RS.CO-03.01",
            "controlGuid": "cef1cd38-5365-5c7a-a625-2d258de2157e",
            "controlTitle": "RS.CO-03.01 - Internal event and intelligence sharing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22092,
            "controlIdentifier": "RS.CO-03.02",
            "controlGuid": "6dc4ea61-a18b-5531-b71c-7ba093d6bcdf",
            "controlTitle": "RS.CO-03.02 - Incident intelligence sharing",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22093,
            "controlIdentifier": "RS.MI-01.01",
            "controlGuid": "b7f5ae78-4dad-5c1a-868e-53c2bbdf8a03",
            "controlTitle": "RS.MI-01.01 - Incident containment",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22094,
            "controlIdentifier": "RS.MI-02.01",
            "controlGuid": "b018aa64-9617-5ecb-8ea4-2b20b75bc4eb",
            "controlTitle": "RS.MI-02.01 - Incident vulnerability remediation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22095,
            "controlIdentifier": "RC.RP-01.01",
            "controlGuid": "9611b3da-a8d1-5f59-8081-10a0ddd3644d",
            "controlTitle": "RC.RP-01.01 - Recovery plan execution",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22096,
            "controlIdentifier": "RC.RP-02.01",
            "controlGuid": "ec6ecad7-22ac-5f85-9a1d-3942a0bbf71f",
            "controlTitle": "RC.RP-02.01 - Adaptive response actions",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22097,
            "controlIdentifier": "RC.RP-02.02",
            "controlGuid": "e2d88d20-458c-5d98-8538-2a79f5bbbaf0",
            "controlTitle": "RC.RP-02.02 - Recovery prioritization",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22098,
            "controlIdentifier": "RC.RP-03.01",
            "controlGuid": "4d0238f4-43c2-56f2-b121-ca758c9c1364",
            "controlTitle": "RC.RP-03.01 - Recovery backup verification",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22099,
            "controlIdentifier": "RC.RP-04.01",
            "controlGuid": "7062fbc5-a8da-5b28-9a71-306b7bb36f7a",
            "controlTitle": "RC.RP-04.01 - Recovery data integrity verification",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22100,
            "controlIdentifier": "RC.RP-05.01",
            "controlGuid": "c2fac371-1c5f-52ee-8401-6b2f2ad99fbc",
            "controlTitle": "RC.RP-05.01 - Returning systems to service",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22101,
            "controlIdentifier": "RC.RP-05.02",
            "controlGuid": "c4065b7d-a244-58a1-a570-195d7e526ca2",
            "controlTitle": "RC.RP-05.02 - Service recovery confirmation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22102,
            "controlIdentifier": "RC.RP-06.01",
            "controlGuid": "c58c7851-0758-5006-be4e-d0018635a821",
            "controlTitle": "RC.RP-06.01 - Incident closure",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22103,
            "controlIdentifier": "RC.CO-03.01",
            "controlGuid": "be437aa9-3512-518a-9d54-a625edf8476f",
            "controlTitle": "RC.CO-03.01 - Recovery activity internal communications",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22104,
            "controlIdentifier": "RC.CO-03.02",
            "controlGuid": "19bdb61f-046c-5ea0-a409-0a1e3bbbdd9c",
            "controlTitle": "RC.CO-03.02 - Recovery activity external communications",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22105,
            "controlIdentifier": "RC.CO-04.01",
            "controlGuid": "de80223a-9af1-5da1-857c-12d5b687bc52",
            "controlTitle": "RC.CO-04.01 - Incident communications planning and coordination",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22106,
            "controlIdentifier": "EX.DD-01.01",
            "controlGuid": "439dc829-2af4-52a1-a6e2-ee51eb199975",
            "controlTitle": "EX.DD-01.01 - Procurement plans",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22107,
            "controlIdentifier": "EX.DD-01.02",
            "controlGuid": "064b62ab-3545-5627-a6ab-e84d889eb319",
            "controlTitle": "EX.DD-01.02 - Procurement plan inherent risk evaluation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22108,
            "controlIdentifier": "EX.DD-01.03",
            "controlGuid": "0bf59c31-b707-5f13-9d2f-fc3e37c31068",
            "controlTitle": "EX.DD-01.03 - Procurement plan resource estimation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22109,
            "controlIdentifier": "EX.DD-02.01",
            "controlGuid": "9654cc4a-b04e-5c74-a965-b1c3f6ff01da",
            "controlTitle": "EX.DD-02.01 - Due diligence resource allocation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22110,
            "controlIdentifier": "EX.DD-02.02",
            "controlGuid": "ff113286-fc5e-583b-8a3e-87f7cf33107a",
            "controlTitle": "EX.DD-02.02 - Business proposal evaluation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22111,
            "controlIdentifier": "EX.DD-02.03",
            "controlGuid": "9ae20342-3cdf-507b-843a-d684b7c8a93a",
            "controlTitle": "EX.DD-02.03 - Third-party business profile due diligence",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22112,
            "controlIdentifier": "EX.DD-02.04",
            "controlGuid": "30a6087f-e750-53f6-8e34-0c869959b8c0",
            "controlTitle": "EX.DD-02.04 - Third-party internal controls due diligence",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22113,
            "controlIdentifier": "EX.DD-03.01",
            "controlGuid": "13c33ce2-c530-553b-b9ca-bf55c9be449f",
            "controlTitle": "EX.DD-03.01 - Third-party cybersecurity program due diligence",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22114,
            "controlIdentifier": "EX.DD-03.02",
            "controlGuid": "37109a6a-faeb-500e-bce1-8ca397fcd493",
            "controlTitle": "EX.DD-03.02 - Third-party business continuity program due diligence",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22115,
            "controlIdentifier": "EX.DD-03.03",
            "controlGuid": "8f914743-4582-57d7-a509-018a1e8825df",
            "controlTitle": "EX.DD-03.03 - Third-party incident response program due diligence",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22116,
            "controlIdentifier": "EX.DD-04.01",
            "controlGuid": "1cefa581-37a6-5462-8206-21522cb88af1",
            "controlTitle": "EX.DD-04.01 - Third-party systems and software evaluation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22117,
            "controlIdentifier": "EX.DD-04.02",
            "controlGuid": "8036ed3e-16a3-5cad-832a-a7b32b5e2dde",
            "controlTitle": "EX.DD-04.02 - Third-party support systems evaluation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22118,
            "controlIdentifier": "EX.CN-01.01",
            "controlGuid": "e517986f-8f7a-58ad-8e36-f7a13bff96c6",
            "controlTitle": "EX.CN-01.01 - Third-party contracts",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22119,
            "controlIdentifier": "EX.CN-01.02",
            "controlGuid": "41f7fdb8-e44f-5a9b-bc91-20d1576c66b9",
            "controlTitle": "EX.CN-01.02 - Third-party management of suppliers",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22120,
            "controlIdentifier": "EX.CN-01.03",
            "controlGuid": "eacd70b4-0a0c-5df2-963e-de766f0177fe",
            "controlTitle": "EX.CN-01.03 - Third-party management of foreign operations",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22121,
            "controlIdentifier": "EX.CN-02.01",
            "controlGuid": "c14cdea3-2515-5f2d-ae22-80c548195029",
            "controlTitle": "EX.CN-02.01 - Third-party cybersecurity requirements",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22122,
            "controlIdentifier": "EX.CN-02.02",
            "controlGuid": "c24356d3-40fa-5ca4-9311-fae40e90429d",
            "controlTitle": "EX.CN-02.02 - Third-party incident and vulnerability notification requirements",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22123,
            "controlIdentifier": "EX.CN-02.03",
            "controlGuid": "c227171b-9179-5508-befe-bc1a5615790d",
            "controlTitle": "EX.CN-02.03 - Third-party business continuity program requirements",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22124,
            "controlIdentifier": "EX.CN-02.04",
            "controlGuid": "8336bae4-eb04-591a-bb70-515719ac5614",
            "controlTitle": "EX.CN-02.04 - Third-party bilateral testing requirements",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22125,
            "controlIdentifier": "EX.MM-01.01",
            "controlGuid": "f3284f97-6ed9-5c5b-813b-da15fb4a0ab9",
            "controlTitle": "EX.MM-01.01 - Third-party monitoring and management resources",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22126,
            "controlIdentifier": "EX.MM-01.02",
            "controlGuid": "af522a2e-19e0-5a04-87f9-edda61c0a515",
            "controlTitle": "EX.MM-01.02 - Third-party relationship re-evaluation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22127,
            "controlIdentifier": "EX.MM-01.03",
            "controlGuid": "5b7055aa-2c9a-5c5b-86e9-74eb19ae2345",
            "controlTitle": "EX.MM-01.03 - Third-party business posture monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22128,
            "controlIdentifier": "EX.MM-01.04",
            "controlGuid": "593846ee-1584-5ec2-b55c-baffd892c2af",
            "controlTitle": "EX.MM-01.04 - Third-party contract compliance monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22129,
            "controlIdentifier": "EX.MM-01.05",
            "controlGuid": "996e67b3-a256-515a-acc3-72b2483b47e1",
            "controlTitle": "EX.MM-01.05 - Third-party supplier management monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22130,
            "controlIdentifier": "EX.MM-01.06",
            "controlGuid": "dd3e22e0-a733-5428-94c4-6b7e0cf6e606",
            "controlTitle": "EX.MM-01.06 - Third-party foreign operations monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22131,
            "controlIdentifier": "EX.MM-02.01",
            "controlGuid": "745af6ab-aa9b-564c-801a-6df5c25d4f60",
            "controlTitle": "EX.MM-02.01 - Third-party security program monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22132,
            "controlIdentifier": "EX.MM-02.02",
            "controlGuid": "3a6b7f8d-46ef-5405-9562-2a81de2c16f8",
            "controlTitle": "EX.MM-02.02 - Third-party business continuity program monitoring",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22133,
            "controlIdentifier": "EX.MM-02.03",
            "controlGuid": "ce86c406-6854-5168-a9ec-4d297341bff2",
            "controlTitle": "EX.MM-02.03 - Third-party security improvement collaboration",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22134,
            "controlIdentifier": "EX.TR-01.01",
            "controlGuid": "326d4552-7a2b-5056-ba91-1f9d89a635f7",
            "controlTitle": "EX.TR-01.01 - Third-party contingency planning",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22135,
            "controlIdentifier": "EX.TR-01.02",
            "controlGuid": "93a0bfc8-cfe9-5b6c-92fb-4b969e4ef379",
            "controlTitle": "EX.TR-01.02 - Third-party alternatives evaluation",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22136,
            "controlIdentifier": "EX.TR-01.03",
            "controlGuid": "abecbb5b-8f2f-5630-8df4-0a05a5bfb74b",
            "controlTitle": "EX.TR-01.03 - Third-party termination plan",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 22137,
            "controlIdentifier": "EX.TR-02.01",
            "controlGuid": "21bbee26-04b0-5ec6-864d-403b7b0db931",
            "controlTitle": "EX.TR-02.01 - Third-party relationship termination",
            "catalogId": 1048,
            "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a",
            "catalogTitle": "CRI Cloud Profile v2.0",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        }
    ],
    "exportDate": "",
    "exportVersion": "1.0"
}