{ "profile": { "uuid": "06871dba-d0b5-5553-981c-db895b6d2ee9", "name": "CRI Cloud Profile v2.0 — Moderate Risk Level", "confidentiality": "Moderate", "integrity": "Moderate", "availability": "Moderate", "category": "Moderate", "isPublic": true }, "mappings": [ { "profileMappingId": 0, "controlId": 21824, "controlIdentifier": "GV.OC-03.01", "controlGuid": "7669d03f-c121-58f2-b9e7-a3a5f760d26d", "controlTitle": "GV.OC-03.01 - Legal, contractual, and regulatory obligations", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21825, "controlIdentifier": "GV.OC-03.02", "controlGuid": "45959f63-7802-57c5-a69c-e85ce935b633", "controlTitle": "GV.OC-03.02 - Data Privacy Policy", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21830, "controlIdentifier": "GV.OC-05.01", "controlGuid": "12081cd7-f5b7-5a16-9137-7f9bf77a8b5a", "controlTitle": "GV.OC-05.01 - Critical service dependencies", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21832, "controlIdentifier": "GV.OC-05.03", "controlGuid": "5ee772b7-c3ac-5b73-aa04-a8fbc64f2e5d", "controlTitle": "GV.OC-05.03 - Alignment of resilience measures", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21834, "controlIdentifier": "GV.RM-01.01", "controlGuid": "159051fd-22d3-5682-b901-e729ed939004", "controlTitle": "GV.RM-01.01 - Risk management strategy approval", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21836, "controlIdentifier": "GV.RM-01.03", "controlGuid": "29e2eee5-f186-5707-84a2-db3245069ea3", "controlTitle": "GV.RM-01.03 - Technology and cybersecurity program objectives", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21837, "controlIdentifier": "GV.RM-01.04", "controlGuid": "ea84c4df-0c4a-5b7e-82e6-263988178b25", "controlTitle": "GV.RM-01.04 - Risk management program components", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21848, "controlIdentifier": "GV.RM-05.02", "controlGuid": "78ba437d-8b7d-55c2-9a62-12034a131194", "controlTitle": "GV.RM-05.02 - Third-party incident coordination", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21849, "controlIdentifier": "GV.RM-06.01", "controlGuid": "5ba39b5d-2784-5c2c-870d-0eeb383c5390", "controlTitle": "GV.RM-06.01 - Risk management processes", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21853, "controlIdentifier": "GV.RM-08.03", "controlGuid": "ea0ef40e-ee82-5dd6-ae9d-653f283d921e", "controlTitle": "GV.RM-08.03 - Standard practices use", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21860, "controlIdentifier": "GV.RR-01.01", "controlGuid": "04845f8d-7438-5ed3-b344-d036c8075f0a", "controlTitle": "GV.RR-01.01 - Technology and cybersecurity risk management accountability", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21863, "controlIdentifier": "GV.RR-01.04", "controlGuid": "2970fe5f-3fc4-5aac-995d-1dc5dee11ee3", "controlTitle": "GV.RR-01.04 - Cybersecurity Officer designation", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21865, "controlIdentifier": "GV.RR-02.01", "controlGuid": "5f44b4d8-aac9-5ca5-b4c4-19af1aeb80a7", "controlTitle": "GV.RR-02.01 - Cybersecurity roles and responsibilities", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21868, "controlIdentifier": "GV.RR-02.04", "controlGuid": "21a3ac01-8ed3-55be-a8de-43087c62c98d", "controlTitle": "GV.RR-02.04 - Third-party risk management roles and responsibilities", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21875, "controlIdentifier": "GV.RR-04.01", "controlGuid": "4e46c769-0235-5578-85f8-684074288cf8", "controlTitle": "GV.RR-04.01 - Background checks", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21876, "controlIdentifier": "GV.RR-04.02", "controlGuid": "5dec958f-0bc2-55ee-931f-3b87e4134dc6", "controlTitle": "GV.RR-04.02 - Employment termination", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21878, "controlIdentifier": "GV.PO-01.01", "controlGuid": "d03649ce-02ee-5aa8-ab8a-723d944b871e", "controlTitle": "GV.PO-01.01 - Policy documentation and approval", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21880, "controlIdentifier": "GV.PO-01.03", "controlGuid": "ae778b3d-38ed-5390-a42e-6f2ac291e80a", "controlTitle": "GV.PO-01.03 - Incentive and accountability program alignment", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21883, "controlIdentifier": "GV.PO-01.06", "controlGuid": "ae8102a7-a1aa-5465-9be4-bb41e906a04f", "controlTitle": "GV.PO-01.06 - Physical and environmental security policies", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21884, "controlIdentifier": "GV.PO-01.07", "controlGuid": "9b1cfef7-d2f4-5386-bfc2-6282b528be11", "controlTitle": "GV.PO-01.07 - Business continuity and resilience program policies", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21885, "controlIdentifier": "GV.PO-01.08", "controlGuid": "658cc1c9-042b-502a-bb9c-1bc6db0a91b1", "controlTitle": "GV.PO-01.08 - Third-party risk management policies", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21886, "controlIdentifier": "GV.PO-02.01", "controlGuid": "0a523397-794c-5843-a97e-d99089c44b6a", "controlTitle": "GV.PO-02.01 - Policy review and update", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21887, "controlIdentifier": "GV.OV-01.01", "controlGuid": "9ad0f875-c470-5866-a114-63a136c27781", "controlTitle": "GV.OV-01.01 - Governing authority risk management review", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21896, "controlIdentifier": "GV.SC-02.01", "controlGuid": "26110f31-f0a9-526c-a5f4-268aed7a7bc1", "controlTitle": "GV.SC-02.01 - Designated organization and third-party responsibilities", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21898, "controlIdentifier": "GV.SC-04.01", "controlGuid": "a2b237ab-abde-5399-a128-1d5c6eabb2e5", "controlTitle": "GV.SC-04.01 - Third-party inventory and risk-ranking", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21899, "controlIdentifier": "GV.SC-08.01", "controlGuid": "ee36f379-f434-581b-8222-ebe47f44fbed", "controlTitle": "GV.SC-08.01 - Resilience program and external dependencies", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21917, "controlIdentifier": "ID.AM-01.01", "controlGuid": "6469e1a9-38b9-5221-bd1e-3102a87673fc", "controlTitle": "ID.AM-01.01 - Physical device asset inventory", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21918, "controlIdentifier": "ID.AM-02.01", "controlGuid": "175d2a64-51e1-5f0f-bb61-670bd7943e37", "controlTitle": "ID.AM-02.01 - Software and applications asset inventory", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21919, "controlIdentifier": "ID.AM-03.01", "controlGuid": "9f724181-b8c7-5a06-a614-7b422e3dd82d", "controlTitle": "ID.AM-03.01 - Network diagrams", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21920, "controlIdentifier": "ID.AM-04.01", "controlGuid": "048ab89f-99e0-5d37-9248-3d4c4b39040a", "controlTitle": "ID.AM-04.01 - Third-party location asset inventory", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21922, "controlIdentifier": "ID.AM-05.02", "controlGuid": "9d1a359a-dd3a-5b0d-b012-ad6a67e8eba1", "controlTitle": "ID.AM-05.02 - Asset protection prioritization", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21923, "controlIdentifier": "ID.AM-07.01", "controlGuid": "0871dafe-5cc1-5e21-bb46-752067660e6b", "controlTitle": "ID.AM-07.01 - Data inventory", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21925, "controlIdentifier": "ID.AM-08.02", "controlGuid": "eb9295b5-0cda-5aee-bc84-7b1ea1f94d79", "controlTitle": "ID.AM-08.02 - Ungoverned technology assets", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21927, "controlIdentifier": "ID.AM-08.04", "controlGuid": "c5226c50-f221-51ca-b7bd-8c505900d4f8", "controlTitle": "ID.AM-08.04 - Sensitive data physical protections", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21928, "controlIdentifier": "ID.AM-08.05", "controlGuid": "17541bb0-fa94-5b59-994d-c1d5d1754f3f", "controlTitle": "ID.AM-08.05 - Data destruction procedures", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21929, "controlIdentifier": "ID.AM-08.06", "controlGuid": "aadafc91-5606-512a-a2bc-ba808d60c4d2", "controlTitle": "ID.AM-08.06 - Third-party data risk coverage", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21930, "controlIdentifier": "ID.RA-01.01", "controlGuid": "cd85db80-c06d-55f5-9a8c-e788dd98ae7f", "controlTitle": "ID.RA-01.01 - Asset vulnerability identification", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21932, "controlIdentifier": "ID.RA-01.03", "controlGuid": "c6246a27-300d-5eca-a04a-7213a2e99a69", "controlTitle": "ID.RA-01.03 - Vulnerability management", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21935, "controlIdentifier": "ID.RA-03.01", "controlGuid": "195084e8-0383-544f-ac5b-b284d0225c33", "controlTitle": "ID.RA-03.01 - Threat identification and analysis", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21936, "controlIdentifier": "ID.RA-03.02", "controlGuid": "8945eb2f-e471-52dc-8139-ffece873e103", "controlTitle": "ID.RA-03.02 - Stakeholder-provided threat information", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21939, "controlIdentifier": "ID.RA-04.01", "controlGuid": "3e41f571-146a-51ac-9087-28e92a0abf55", "controlTitle": "ID.RA-04.01 - Risk impact assessment", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21940, "controlIdentifier": "ID.RA-05.01", "controlGuid": "5a997911-136b-5cd4-a415-3551d3fa8b9d", "controlTitle": "ID.RA-05.01 - Risk assessment considerations", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21943, "controlIdentifier": "ID.RA-05.04", "controlGuid": "86486ec4-9333-5648-a803-cca8cb45274a", "controlTitle": "ID.RA-05.04 - Scenario planning and table-top-exercises", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21945, "controlIdentifier": "ID.RA-06.02", "controlGuid": "5f68c216-d5ec-562e-b24a-b9123f53cfdb", "controlTitle": "ID.RA-06.02 - Prioritization of risk remediation responses", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21948, "controlIdentifier": "ID.RA-06.05", "controlGuid": "8b3e98f5-1448-59f0-aef3-25f4ace1814a", "controlTitle": "ID.RA-06.05 - Prioritization of vulnerability remediation", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21950, "controlIdentifier": "ID.RA-07.01", "controlGuid": "c8ca2970-6c7b-5e9e-8dc9-f31c7eb9bd9d", "controlTitle": "ID.RA-07.01 - Change management standards and procedures", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21953, "controlIdentifier": "ID.RA-07.04", "controlGuid": "2dfdd55a-ad5b-51c3-ae76-ec7198939301", "controlTitle": "ID.RA-07.04 - Risk exception management", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21954, "controlIdentifier": "ID.RA-07.05", "controlGuid": "f69577c5-963f-5551-8535-e121aa4cca94", "controlTitle": "ID.RA-07.05 - Vulnerability exception management", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21955, "controlIdentifier": "ID.RA-08.01", "controlGuid": "76089caa-ddaa-5a4d-962e-ed95e54ec5e5", "controlTitle": "ID.RA-08.01 - Vulnerability disclosure receipt", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21957, "controlIdentifier": "ID.IM-01.01", "controlGuid": "f56e25af-491c-5825-ba7a-8822294e0153", "controlTitle": "ID.IM-01.01 - Control testing", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21958, "controlIdentifier": "ID.IM-01.02", "controlGuid": "62b25953-591e-5c30-9c8d-5526debc96b6", "controlTitle": "ID.IM-01.02 - Key indicators and risk metrics", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21962, "controlIdentifier": "ID.IM-02.01", "controlGuid": "8afe162c-add1-51ee-87e2-8da68b455006", "controlTitle": "ID.IM-02.01 - Penetration testing", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21965, "controlIdentifier": "ID.IM-02.04", "controlGuid": "e8ed1f6f-b326-54f5-91f9-4bfc6c6a52ae", "controlTitle": "ID.IM-02.04 - Resilience strategy and plan testing", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21966, "controlIdentifier": "ID.IM-02.05", "controlGuid": "29535f50-3228-5184-bf14-4898d34fd566", "controlTitle": "ID.IM-02.05 - Resilience testing scenarios", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21967, "controlIdentifier": "ID.IM-02.06", "controlGuid": "52996060-bc5f-5e77-9e3a-01fdd4f521a2", "controlTitle": "ID.IM-02.06 - Accurate data recovery", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21973, "controlIdentifier": "ID.IM-04.01", "controlGuid": "73a8a64e-ac39-58e4-bfd1-760cba6a86b3", "controlTitle": "ID.IM-04.01 - Alignment of business continuity, disaster recovery, and response programs", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21974, "controlIdentifier": "ID.IM-04.02", "controlGuid": "f4660607-7542-55ee-8ab2-0a1b62311b12", "controlTitle": "ID.IM-04.02 - Incident management roles and responsibilities", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21979, "controlIdentifier": "ID.IM-04.07", "controlGuid": "b5f538e3-dbdb-5f50-8d16-3e49ec111ca1", "controlTitle": "ID.IM-04.07 - Incident management support resources", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21980, "controlIdentifier": "ID.IM-04.08", "controlGuid": "ed1fdefd-e6a9-5836-ba33-596669801ebf", "controlTitle": "ID.IM-04.08 - Response program improvement", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21981, "controlIdentifier": "PR.AA-01.01", "controlGuid": "139047dc-6f5f-5870-9de3-38b88013b585", "controlTitle": "PR.AA-01.01 - Identity and credential management", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21982, "controlIdentifier": "PR.AA-01.02", "controlGuid": "bb735ee5-1d89-5010-b067-691759356d43", "controlTitle": "PR.AA-01.02 - Physical and logical access", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21983, "controlIdentifier": "PR.AA-02.01", "controlGuid": "6a0ee84b-c8c1-5567-b2fc-daca8ace9946", "controlTitle": "PR.AA-02.01 - Authentication of identity", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21984, "controlIdentifier": "PR.AA-03.01", "controlGuid": "048f531a-c0f8-5665-92f2-69c090aabc03", "controlTitle": "PR.AA-03.01 - Authentication requirements", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21986, "controlIdentifier": "PR.AA-03.03", "controlGuid": "9e06cd77-8b8f-525e-9111-ed12340032ec", "controlTitle": "PR.AA-03.03 - Email verification mechanisms", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21987, "controlIdentifier": "PR.AA-04.01", "controlGuid": "7072b942-5e38-5bf5-a50d-934c7f4a2562", "controlTitle": "PR.AA-04.01 - Access control within and across security perimeters", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21988, "controlIdentifier": "PR.AA-05.01", "controlGuid": "2cffd0e7-8f07-5b34-af6b-be0fba1a7b75", "controlTitle": "PR.AA-05.01 - Access privilege limitation", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21989, "controlIdentifier": "PR.AA-05.02", "controlGuid": "dfe058c0-5a44-5229-8c53-ec8aad488659", "controlTitle": "PR.AA-05.02 - Privileged system access", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21990, "controlIdentifier": "PR.AA-05.03", "controlGuid": "de5df059-4c7c-5d7c-a007-5bbd7e646c9d", "controlTitle": "PR.AA-05.03 - Service accounts", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21991, "controlIdentifier": "PR.AA-05.04", "controlGuid": "17142e4d-eddd-5ac1-9dd6-f85752624f55", "controlTitle": "PR.AA-05.04 - Third-party access management", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21992, "controlIdentifier": "PR.AA-06.01", "controlGuid": "fe8a4b39-dd6e-5bf2-9ffd-d787f721b78a", "controlTitle": "PR.AA-06.01 - Physical access security", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21993, "controlIdentifier": "PR.AA-06.02", "controlGuid": "ae7f4785-4407-58c3-94c0-6c5298b66d85", "controlTitle": "PR.AA-06.02 - Physical and visual access to information assets", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21994, "controlIdentifier": "PR.AT-01.01", "controlGuid": "40d85577-6449-5624-81fb-e442effff59e", "controlTitle": "PR.AT-01.01 - Cybersecurity awareness training", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21995, "controlIdentifier": "PR.AT-01.02", "controlGuid": "cfccbb89-84c2-5bc3-9313-e4bc3ba49fba", "controlTitle": "PR.AT-01.02 - Cybersecurity awareness training content", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21998, "controlIdentifier": "PR.AT-02.01", "controlGuid": "9c28b719-4977-5af7-88fa-7c17037c3b79", "controlTitle": "PR.AT-02.01 - Skill-specific training", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 21999, "controlIdentifier": "PR.AT-02.02", "controlGuid": "370b8b5f-d6b6-51c7-9dd6-ae5732e13f54", "controlTitle": "PR.AT-02.02 - Training of high-risk groups", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22000, "controlIdentifier": "PR.AT-02.03", "controlGuid": "6d5b1dd5-5a8c-5cef-ac45-339a7211876e", "controlTitle": "PR.AT-02.03 - Response and recovery plan training", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22003, "controlIdentifier": "PR.AT-02.06", "controlGuid": "0cbf4db1-d6e5-5b0d-b5b4-80e4a173d22e", "controlTitle": "PR.AT-02.06 - Customer awareness training", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22006, "controlIdentifier": "PR.DS-01.01", "controlGuid": "d25c649a-a9be-5c7e-8de9-77831de70582", "controlTitle": "PR.DS-01.01 - Data-at-rest protection", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22007, "controlIdentifier": "PR.DS-01.02", "controlGuid": "4c5c721d-15d2-5241-b246-27de355a791b", "controlTitle": "PR.DS-01.02 - Data loss prevention", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22008, "controlIdentifier": "PR.DS-01.03", "controlGuid": "b6ec1730-b0f9-5046-ad82-1eab494c0718", "controlTitle": "PR.DS-01.03 - Removable media protection", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22009, "controlIdentifier": "PR.DS-02.01", "controlGuid": "f7d5f574-8241-5f49-821a-c32e8ca963f2", "controlTitle": "PR.DS-02.01 - Data-in-transit protection", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22010, "controlIdentifier": "PR.DS-10.01", "controlGuid": "708a01a7-8410-55d1-9f93-5992f8818376", "controlTitle": "PR.DS-10.01 - Data-in-use protection", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22011, "controlIdentifier": "PR.DS-11.01", "controlGuid": "7e6086d8-1077-5037-9ca7-5e310ca80e09", "controlTitle": "PR.DS-11.01 - Data backup and replication", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22012, "controlIdentifier": "PR.PS-01.01", "controlGuid": "3cb49ec9-951a-5e64-919a-1a64a53973ec", "controlTitle": "PR.PS-01.01 - Configuration baselines", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22013, "controlIdentifier": "PR.PS-01.02", "controlGuid": "d70340f4-2d32-50f0-96f3-faa94d02c5e5", "controlTitle": "PR.PS-01.02 - Least functionality", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22014, "controlIdentifier": "PR.PS-01.03", "controlGuid": "7c5366b7-0b37-5fe7-bb04-6313e442be6d", "controlTitle": "PR.PS-01.03 - Configuration deviation", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22016, "controlIdentifier": "PR.PS-01.05", "controlGuid": "3137846b-e1d0-5027-a7cb-7f6bbe24680d", "controlTitle": "PR.PS-01.05 - Encryption standards", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22017, "controlIdentifier": "PR.PS-01.06", "controlGuid": "c678f99d-0ecd-545d-b2c7-a0c28b0669b7", "controlTitle": "PR.PS-01.06 - Encryption management practices", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22018, "controlIdentifier": "PR.PS-01.07", "controlGuid": "870dc954-cddf-5d3a-9488-ada1171f2dc8", "controlTitle": "PR.PS-01.07 - Cryptographic keys and certificates", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22019, "controlIdentifier": "PR.PS-01.08", "controlGuid": "d7af933f-0222-5044-8c8d-6fdeec795798", "controlTitle": "PR.PS-01.08 - End-user device protection", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22021, "controlIdentifier": "PR.PS-02.01", "controlGuid": "c61af87b-3275-58d3-9d19-892753839534", "controlTitle": "PR.PS-02.01 - Patch identification and application", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22024, "controlIdentifier": "PR.PS-03.01", "controlGuid": "f82888c6-bd25-55f1-b46f-56d056087fef", "controlTitle": "PR.PS-03.01 - Asset maintenance", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22025, "controlIdentifier": "PR.PS-04.01", "controlGuid": "0d38cb3c-c9a3-58cc-acd4-ef0576551877", "controlTitle": "PR.PS-04.01 - Log management standards", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22026, "controlIdentifier": "PR.PS-04.02", "controlGuid": "6a4613df-4eb0-5f85-9b52-2e29d736124a", "controlTitle": "PR.PS-04.02 - Log coverage", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22027, "controlIdentifier": "PR.PS-04.03", "controlGuid": "f9e55313-9c90-50be-b05a-786fe5c832c8", "controlTitle": "PR.PS-04.03 - Log security and retention", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22028, "controlIdentifier": "PR.PS-05.01", "controlGuid": "09585d22-c5e4-5f5c-8fa1-f1d4e43e15e2", "controlTitle": "PR.PS-05.01 - Malware prevention", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22029, "controlIdentifier": "PR.PS-05.02", "controlGuid": "6cadb84b-e081-5daf-8d80-ad9247913ac0", "controlTitle": "PR.PS-05.02 - Mobile code prevention", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22030, "controlIdentifier": "PR.PS-05.03", "controlGuid": "9f251ebf-bce6-5dd8-b2d3-531fe1fb7021", "controlTitle": "PR.PS-05.03 - Email and message service protection", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22031, "controlIdentifier": "PR.PS-06.01", "controlGuid": "233efc19-43cb-5140-a8ae-939d8ff48620", "controlTitle": "PR.PS-06.01 - Secure SDLC processes", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22032, "controlIdentifier": "PR.PS-06.02", "controlGuid": "29c2e8e1-2f77-5189-ae0a-9918fca3c9e8", "controlTitle": "PR.PS-06.02 - Target environment security design", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22033, "controlIdentifier": "PR.PS-06.03", "controlGuid": "d1c6c02c-a577-567b-af41-c9d0cf6f9973", "controlTitle": "PR.PS-06.03 - System requirements management", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22034, "controlIdentifier": "PR.PS-06.04", "controlGuid": "6790bc52-ed36-5a06-828d-d39e5865ffd4", "controlTitle": "PR.PS-06.04 - Development and testing security", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22035, "controlIdentifier": "PR.PS-06.05", "controlGuid": "af0ccfe5-5836-53dd-9d6c-c83f8f9926df", "controlTitle": "PR.PS-06.05 - Testing and validation strategy", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22036, "controlIdentifier": "PR.PS-06.06", "controlGuid": "81d40e00-d135-5bec-8a28-a040121d74c1", "controlTitle": "PR.PS-06.06 - Vulnerability remediation", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22037, "controlIdentifier": "PR.PS-06.07", "controlGuid": "3663c4e0-9e61-5a56-97a8-cdd3755271f3", "controlTitle": "PR.PS-06.07 - Development and operational process alignment", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22040, "controlIdentifier": "PR.PS-06.10", "controlGuid": "8e2b198d-ed3e-559c-b7b4-e53c13919b71", "controlTitle": "PR.PS-06.10 - Database and data platform security", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22043, "controlIdentifier": "PR.IR-01.01", "controlGuid": "8441910a-fee5-5360-a6e4-9d398f8dab0a", "controlTitle": "PR.IR-01.01 - Network segmentation", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22044, "controlIdentifier": "PR.IR-01.02", "controlGuid": "b73aa790-7e86-54b5-8895-e7341abcca3e", "controlTitle": "PR.IR-01.02 - Network device configurations", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22045, "controlIdentifier": "PR.IR-01.03", "controlGuid": "ef91e6e4-1244-522e-afed-45c7f66bea93", "controlTitle": "PR.IR-01.03 - Network communications integrity and availability", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22046, "controlIdentifier": "PR.IR-01.04", "controlGuid": "a938eafc-f640-5112-a521-ddf2f14f730b", "controlTitle": "PR.IR-01.04 - Wireless network protection", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22047, "controlIdentifier": "PR.IR-01.05", "controlGuid": "f1273978-e7e8-539f-9aba-5776e1ddfe2e", "controlTitle": "PR.IR-01.05 - Remote access protection", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22048, "controlIdentifier": "PR.IR-01.06", "controlGuid": "1e48dd1e-4843-580e-bc69-f9e57aa43343", "controlTitle": "PR.IR-01.06 - Production environment segregation", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22049, "controlIdentifier": "PR.IR-01.07", "controlGuid": "b58e3bc0-7c10-539b-b06b-cb6186b3ed16", "controlTitle": "PR.IR-01.07 - Operational and IoT technologies", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22050, "controlIdentifier": "PR.IR-01.08", "controlGuid": "0483a06d-a29a-5a2f-a768-81598bdabede", "controlTitle": "PR.IR-01.08 - End-user device access", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22051, "controlIdentifier": "PR.IR-02.01", "controlGuid": "609b54c3-25ab-567f-8231-0cbf5d88c697", "controlTitle": "PR.IR-02.01 - Physical and environmental controls", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22052, "controlIdentifier": "PR.IR-03.01", "controlGuid": "4ed11da9-593e-5721-8a29-63bf333158b0", "controlTitle": "PR.IR-03.01 - Alternative resilience mechanisms", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22053, "controlIdentifier": "PR.IR-04.01", "controlGuid": "3ee2400b-d431-5f0b-9b8e-39ef142e15c6", "controlTitle": "PR.IR-04.01 - Utilization monitoring", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22054, "controlIdentifier": "PR.IR-04.02", "controlGuid": "fd5796df-a45c-5aeb-b1ea-dda53b0b0f24", "controlTitle": "PR.IR-04.02 - Availability and capacity management", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22055, "controlIdentifier": "DE.CM-01.01", "controlGuid": "4df9b6b3-d33a-5295-9672-327a12ea1cc7", "controlTitle": "DE.CM-01.01 - Intrusion detection and prevention", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22056, "controlIdentifier": "DE.CM-01.02", "controlGuid": "1f841163-8bf8-512a-bc2e-8f3d1bc6f066", "controlTitle": "DE.CM-01.02 - Network traffic volume monitoring", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22057, "controlIdentifier": "DE.CM-01.03", "controlGuid": "8852a365-f2a6-5849-87f6-de79f48d0bed", "controlTitle": "DE.CM-01.03 - Unauthorized network connections and data transfers", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22058, "controlIdentifier": "DE.CM-01.04", "controlGuid": "fc596d74-3fd8-5bc0-960d-456cfcbf537b", "controlTitle": "DE.CM-01.04 - Unauthorized device connection", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22059, "controlIdentifier": "DE.CM-01.05", "controlGuid": "001c2b5d-ffbf-5b6c-817a-4b661931dd97", "controlTitle": "DE.CM-01.05 - Website and service blocking", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22061, "controlIdentifier": "DE.CM-02.01", "controlGuid": "f59b302e-53fd-51df-b18b-dff5370246ef", "controlTitle": "DE.CM-02.01 - Anomalous activity detection", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22063, "controlIdentifier": "DE.CM-03.02", "controlGuid": "535b35e7-ad95-5f6c-aed7-3ae9a0688a1e", "controlTitle": "DE.CM-03.02 - Personnel activity monitoring", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22064, "controlIdentifier": "DE.CM-03.03", "controlGuid": "e6aaf5e3-315b-57ae-b5a8-3b484a76593c", "controlTitle": "DE.CM-03.03 - Privileged account monitoring", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22065, "controlIdentifier": "DE.CM-06.01", "controlGuid": "aba8b5c1-e54a-58d3-8700-32e41335a8bf", "controlTitle": "DE.CM-06.01 - Third-party connection authorization", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22066, "controlIdentifier": "DE.CM-06.02", "controlGuid": "e19ad8f9-237d-5941-8c80-95a875aa4fc8", "controlTitle": "DE.CM-06.02 - Third-party access monitoring", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22069, "controlIdentifier": "DE.CM-09.03", "controlGuid": "9918763c-4413-5da8-b5c4-e044f3713a61", "controlTitle": "DE.CM-09.03 - Unauthorized software, hardware, or configuration changes", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22071, "controlIdentifier": "DE.AE-02.02", "controlGuid": "ed83c11a-334e-5116-9a82-23efa778b8b8", "controlTitle": "DE.AE-02.02 - Alert parameters and thresholds", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22072, "controlIdentifier": "DE.AE-03.01", "controlGuid": "55604e11-9c65-56a8-b3b9-605dc0cdc617", "controlTitle": "DE.AE-03.01 - Infrastructure monitoring", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22073, "controlIdentifier": "DE.AE-03.02", "controlGuid": "fe65a03d-adc2-5d7d-90a2-ec1f1604c0a1", "controlTitle": "DE.AE-03.02 - Event aggregation, correlation, and analysis", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22074, "controlIdentifier": "DE.AE-04.01", "controlGuid": "d95810c7-ee9b-54b5-84e0-a637e29e32f5", "controlTitle": "DE.AE-04.01 - Event triage", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22075, "controlIdentifier": "DE.AE-06.01", "controlGuid": "fc43e33b-b6b1-59a4-95b1-48d819eda728", "controlTitle": "DE.AE-06.01 - Event alerting", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22079, "controlIdentifier": "RS.MA-01.01", "controlGuid": "44bc27cf-1c71-5346-8d4b-b976986b45fd", "controlTitle": "RS.MA-01.01 - Response plan execution", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22080, "controlIdentifier": "RS.MA-02.01", "controlGuid": "6c8b1f84-e12b-5927-b8f9-d4e36a962e7a", "controlTitle": "RS.MA-02.01 - Reliable event detection and analysis", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22083, "controlIdentifier": "RS.MA-05.01", "controlGuid": "1bae5899-5bcc-5109-b754-751772f7316a", "controlTitle": "RS.MA-05.01 - Incident severity levels and escalation", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22084, "controlIdentifier": "RS.AN-03.01", "controlGuid": "00ed5a86-e6f9-501a-88ca-2dba4195d901", "controlTitle": "RS.AN-03.01 - Incident investigation and root cause determination", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22087, "controlIdentifier": "RS.AN-08.01", "controlGuid": "4d26c78c-57d3-55f7-8e9b-4dd2c09775ee", "controlTitle": "RS.AN-08.01 - Incident impact analysis", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22088, "controlIdentifier": "RS.CO-02.01", "controlGuid": "e1ed45a3-903b-5a8d-a0cd-3d6983d2f5d4", "controlTitle": "RS.CO-02.01 - Incident escalation protocols", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22089, "controlIdentifier": "RS.CO-02.02", "controlGuid": "3baa4aef-c5d1-56c3-aad3-a5bc2bcc5828", "controlTitle": "RS.CO-02.02 - Incident notification and reporting", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22090, "controlIdentifier": "RS.CO-02.03", "controlGuid": "63e8d26a-70d9-5ddc-9f39-97b078a135d1", "controlTitle": "RS.CO-02.03 - Incident response communication procedures", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22092, "controlIdentifier": "RS.CO-03.02", "controlGuid": "6dc4ea61-a18b-5531-b71c-7ba093d6bcdf", "controlTitle": "RS.CO-03.02 - Incident intelligence sharing", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22093, "controlIdentifier": "RS.MI-01.01", "controlGuid": "b7f5ae78-4dad-5c1a-868e-53c2bbdf8a03", "controlTitle": "RS.MI-01.01 - Incident containment", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22094, "controlIdentifier": "RS.MI-02.01", "controlGuid": "b018aa64-9617-5ecb-8ea4-2b20b75bc4eb", "controlTitle": "RS.MI-02.01 - Incident vulnerability remediation", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22095, "controlIdentifier": "RC.RP-01.01", "controlGuid": "9611b3da-a8d1-5f59-8081-10a0ddd3644d", "controlTitle": "RC.RP-01.01 - Recovery plan execution", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22097, "controlIdentifier": "RC.RP-02.02", "controlGuid": "e2d88d20-458c-5d98-8538-2a79f5bbbaf0", "controlTitle": "RC.RP-02.02 - Recovery prioritization", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22104, "controlIdentifier": "RC.CO-03.02", "controlGuid": "19bdb61f-046c-5ea0-a409-0a1e3bbbdd9c", "controlTitle": "RC.CO-03.02 - Recovery activity external communications", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22109, "controlIdentifier": "EX.DD-02.01", "controlGuid": "9654cc4a-b04e-5c74-a965-b1c3f6ff01da", "controlTitle": "EX.DD-02.01 - Due diligence resource allocation", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22111, "controlIdentifier": "EX.DD-02.03", "controlGuid": "9ae20342-3cdf-507b-843a-d684b7c8a93a", "controlTitle": "EX.DD-02.03 - Third-party business profile due diligence", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22112, "controlIdentifier": "EX.DD-02.04", "controlGuid": "30a6087f-e750-53f6-8e34-0c869959b8c0", "controlTitle": "EX.DD-02.04 - Third-party internal controls due diligence", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22113, "controlIdentifier": "EX.DD-03.01", "controlGuid": "13c33ce2-c530-553b-b9ca-bf55c9be449f", "controlTitle": "EX.DD-03.01 - Third-party cybersecurity program due diligence", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22114, "controlIdentifier": "EX.DD-03.02", "controlGuid": "37109a6a-faeb-500e-bce1-8ca397fcd493", "controlTitle": "EX.DD-03.02 - Third-party business continuity program due diligence", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22115, "controlIdentifier": "EX.DD-03.03", "controlGuid": "8f914743-4582-57d7-a509-018a1e8825df", "controlTitle": "EX.DD-03.03 - Third-party incident response program due diligence", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22116, "controlIdentifier": "EX.DD-04.01", "controlGuid": "1cefa581-37a6-5462-8206-21522cb88af1", "controlTitle": "EX.DD-04.01 - Third-party systems and software evaluation", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22118, "controlIdentifier": "EX.CN-01.01", "controlGuid": "e517986f-8f7a-58ad-8e36-f7a13bff96c6", "controlTitle": "EX.CN-01.01 - Third-party contracts", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22119, "controlIdentifier": "EX.CN-01.02", "controlGuid": "41f7fdb8-e44f-5a9b-bc91-20d1576c66b9", "controlTitle": "EX.CN-01.02 - Third-party management of suppliers", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22121, "controlIdentifier": "EX.CN-02.01", "controlGuid": "c14cdea3-2515-5f2d-ae22-80c548195029", "controlTitle": "EX.CN-02.01 - Third-party cybersecurity requirements", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22122, "controlIdentifier": "EX.CN-02.02", "controlGuid": "c24356d3-40fa-5ca4-9311-fae40e90429d", "controlTitle": "EX.CN-02.02 - Third-party incident and vulnerability notification requirements", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22123, "controlIdentifier": "EX.CN-02.03", "controlGuid": "c227171b-9179-5508-befe-bc1a5615790d", "controlTitle": "EX.CN-02.03 - Third-party business continuity program requirements", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22125, "controlIdentifier": "EX.MM-01.01", "controlGuid": "f3284f97-6ed9-5c5b-813b-da15fb4a0ab9", "controlTitle": "EX.MM-01.01 - Third-party monitoring and management resources", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22129, "controlIdentifier": "EX.MM-01.05", "controlGuid": "996e67b3-a256-515a-acc3-72b2483b47e1", "controlTitle": "EX.MM-01.05 - Third-party supplier management monitoring", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22131, "controlIdentifier": "EX.MM-02.01", "controlGuid": "745af6ab-aa9b-564c-801a-6df5c25d4f60", "controlTitle": "EX.MM-02.01 - Third-party security program monitoring", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22132, "controlIdentifier": "EX.MM-02.02", "controlGuid": "3a6b7f8d-46ef-5405-9562-2a81de2c16f8", "controlTitle": "EX.MM-02.02 - Third-party business continuity program monitoring", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22133, "controlIdentifier": "EX.MM-02.03", "controlGuid": "ce86c406-6854-5168-a9ec-4d297341bff2", "controlTitle": "EX.MM-02.03 - Third-party security improvement collaboration", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 22137, "controlIdentifier": "EX.TR-02.01", "controlGuid": "21bbee26-04b0-5ec6-864d-403b7b0db931", "controlTitle": "EX.TR-02.01 - Third-party relationship termination", "catalogId": 1048, "catalogGuid": "f150bd39-59c5-594a-bed3-35c394304b2a", "catalogTitle": "CRI Cloud Profile v2.0", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" } ], "exportDate": "", "exportVersion": "1.0" }