{
    "profile": {
        "uuid": "57e58a5d-3082-42f0-993e-b4731e600b80",
        "name": "CRI Profile v2.2 — Member IG2",
        "confidentiality": "Moderate",
        "integrity": "Moderate",
        "availability": "Moderate",
        "category": "Moderate",
        "isPublic": true
    },
    "mappings": [
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.OC-01.01",
            "controlGuid": "6f806a69-c010-4f8e-9c84-b8f9bda04287",
            "controlTitle": "GV.OC-01.01 - Goverance alignment",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.OC-03.01",
            "controlGuid": "e3ad351c-57ee-43aa-be03-4df6ac9bbddb",
            "controlTitle": "GV.OC-03.01 - Legal, contractual, and regulatory obligations",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.RM-01.01",
            "controlGuid": "4576b7a0-f48a-48f9-aacb-ff78809b749e",
            "controlTitle": "GV.RM-01.01 - Risk management strategy approval",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.RR-01.01",
            "controlGuid": "33ecd140-1f11-41cb-9546-d09daaf2cb93",
            "controlTitle": "GV.RR-01.01 - Technology and cybersecurity risk management accountability",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.RA-06.06",
            "controlGuid": "58031500-2f9f-4a43-bf2e-2eb226b545e4",
            "controlTitle": "ID.RA-06.06 - Risks identified in testing or incident response",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.RA-07.01",
            "controlGuid": "7ae181d3-fdb4-4d1e-b772-282bc4569737",
            "controlTitle": "ID.RA-07.01 - Change management standards and procedures",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-02.01",
            "controlGuid": "e3609ef4-e058-459d-8f56-589753d06daa",
            "controlTitle": "ID.IM-02.01 - Penetration testing",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-04.01",
            "controlGuid": "c261fc8a-a1cc-4ff1-94c7-e38e236d5bd2",
            "controlTitle": "ID.IM-04.01 - Alignment of business continuity, disaster recovery, and response programs",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-04.02",
            "controlGuid": "76006630-413c-41f4-be59-f53f30913834",
            "controlTitle": "ID.IM-04.02 - Incident management roles and responsibilities",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-04.08",
            "controlGuid": "0e165381-f1f0-45de-bec5-1b60aecad762",
            "controlTitle": "ID.IM-04.08 - Response program improvement",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AA-01.01",
            "controlGuid": "35c365fe-ecb1-473e-a4a3-65107bf1b98d",
            "controlTitle": "PR.AA-01.01 - Identity and credential management",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AA-01.02",
            "controlGuid": "0264a2e7-bcfe-4f24-b819-4fbfbcdb9906",
            "controlTitle": "PR.AA-01.02 - Physical and logical access",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AA-05.01",
            "controlGuid": "481f44e4-e9df-4c40-9075-c831fe3c1bf8",
            "controlTitle": "PR.AA-05.01 - Access privilege limitation",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AA-05.02",
            "controlGuid": "de0f6bc5-2bff-487f-81ba-dd31a5fe4c52",
            "controlTitle": "PR.AA-05.02 - Privileged system access",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AA-05.03",
            "controlGuid": "50567aab-b87e-4a3c-af1d-6c88c8457b6e",
            "controlTitle": "PR.AA-05.03 - Service accounts",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AA-06.01",
            "controlGuid": "0f606241-93c2-49dd-8651-81aa1ec8c127",
            "controlTitle": "PR.AA-06.01 - Physical access security",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AT-02.03",
            "controlGuid": "cf5b5c36-8e8f-4d32-af46-9cbc1ade6b96",
            "controlTitle": "PR.AT-02.03 - Response and recovery plan training",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.DS-01.01",
            "controlGuid": "1b9f8e04-0f92-4ae6-9a93-d3bc33d8c698",
            "controlTitle": "PR.DS-01.01 - Data-at-rest protection",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.DS-02.01",
            "controlGuid": "9faecec2-3f5e-43af-90b4-883fc12d9a1c",
            "controlTitle": "PR.DS-02.01 - Data-in-transit protection",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-01.03",
            "controlGuid": "0e85de89-90d6-4b32-8a92-2241c6d5d65f",
            "controlTitle": "PR.PS-01.03 - Configuration deviation",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-03.01",
            "controlGuid": "57d57a4b-d82b-4650-888a-9b8ef30c602a",
            "controlTitle": "PR.PS-03.01 - Asset maintenance",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-06.05",
            "controlGuid": "641e3305-43bf-4138-a6fe-30069e308f81",
            "controlTitle": "PR.PS-06.05 - Testing and validation strategy",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.IR-01.01",
            "controlGuid": "6a519803-05c3-4a4f-a3c5-adae4549d8f8",
            "controlTitle": "PR.IR-01.01 - Network segmentation",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.IR-01.03",
            "controlGuid": "d48f9494-5eb9-40fa-a4a8-9e10e0d3ca19",
            "controlTitle": "PR.IR-01.03 - Network communications integrity and availability",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.IR-04.02",
            "controlGuid": "877faa64-5549-437a-b526-07059383f6d4",
            "controlTitle": "PR.IR-04.02 - Availability and capacity management",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.AE-06.01",
            "controlGuid": "1535b040-5059-4867-b4a6-0118db891b29",
            "controlTitle": "DE.AE-06.01 - Event alerting",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.MA-01.01",
            "controlGuid": "82762234-0791-4d49-9502-4cd5edc0da55",
            "controlTitle": "RS.MA-01.01 - Response plan execution",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.MA-02.01",
            "controlGuid": "772acecb-b0e8-46f4-96e4-cf83512777c4",
            "controlTitle": "RS.MA-02.01 - Reliable event detection and analysis",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.CO-02.01",
            "controlGuid": "b4d16ebf-1cba-4a61-a5b5-90837373f4ef",
            "controlTitle": "RS.CO-02.01 - Incident escalation protocols",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        }
    ],
    "exportDate": "2026-04-20T16:57:02Z",
    "exportVersion": "1.0"
}