{
    "profile": {
        "uuid": "0f972fae-8a04-49f3-acd4-f7e8dd23929a",
        "name": "CRI Profile v2.2 — NIST Ransomware",
        "confidentiality": "Moderate",
        "integrity": "High",
        "availability": "High",
        "category": "High",
        "isPublic": true
    },
    "mappings": [
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.OC-01.01",
            "controlGuid": "6f806a69-c010-4f8e-9c84-b8f9bda04287",
            "controlTitle": "GV.OC-01.01 - Goverance alignment",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.OC-02.02",
            "controlGuid": "92cde2f3-72e1-446c-bd8b-ad36ee141cbf",
            "controlTitle": "GV.OC-02.02 - Financial services sector role",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.OC-02.03",
            "controlGuid": "0a964084-92ea-4c13-90b1-0eb3641f93cf",
            "controlTitle": "GV.OC-02.03 - Critical infratructure sector role",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.OC-03.01",
            "controlGuid": "e3ad351c-57ee-43aa-be03-4df6ac9bbddb",
            "controlTitle": "GV.OC-03.01 - Legal, contractual, and regulatory obligations",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.OC-03.02",
            "controlGuid": "47b386f3-29e9-4dfb-b283-31d3b80e6346",
            "controlTitle": "GV.OC-03.02 - Data Privacy Policy",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.OC-04.02",
            "controlGuid": "94792c0b-6ba9-4531-b067-4130de7ce4ee",
            "controlTitle": "GV.OC-04.02 - Critical business processes",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.OC-05.01",
            "controlGuid": "3c1a93dd-c4d3-4393-a449-5a8d95c2fb94",
            "controlTitle": "GV.OC-05.01 - Critical service dependencies",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.OC-05.03",
            "controlGuid": "dde33b85-5680-4d06-b2e8-8c9a8e27b3ce",
            "controlTitle": "GV.OC-05.03 - Alignment of resilience measures",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.RM-01.01",
            "controlGuid": "4576b7a0-f48a-48f9-aacb-ff78809b749e",
            "controlTitle": "GV.RM-01.01 - Risk management strategy approval",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.RM-01.03",
            "controlGuid": "c227e1dc-40d4-40e7-a26e-0e9cc4f00247",
            "controlTitle": "GV.RM-01.03 - Technology and cybersecurity program objectives",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.RM-01.04",
            "controlGuid": "58be7fba-d55a-4b46-af2f-7f4a7d76b8b9",
            "controlTitle": "GV.RM-01.04 - Risk management program components",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.RM-05.02",
            "controlGuid": "31fafe95-c431-437a-ba5d-7d17817875e0",
            "controlTitle": "GV.RM-05.02 - Third-party incident coordination",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.RM-06.01",
            "controlGuid": "ce952879-3aac-4d1d-af9a-8249eaf9b5f9",
            "controlTitle": "GV.RM-06.01 - Risk management processes",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.RR-02.01",
            "controlGuid": "dedb4060-05d5-4e9c-a237-bdba7acfd701",
            "controlTitle": "GV.RR-02.01 - Cybersecurity roles and responsibilities",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.RR-02.02",
            "controlGuid": "f918bbc2-58a1-4718-a6c3-8de7426c60c5",
            "controlTitle": "GV.RR-02.02 - Threat identification roles and responsibilities",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.PO-01.01",
            "controlGuid": "1866beaf-ea70-4ec5-a136-d6d9f3c30be1",
            "controlTitle": "GV.PO-01.01 - Policy documentation and approval",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "GV.SC-08.01",
            "controlGuid": "8e16617a-6ca4-4e8b-a65e-88f2be19c1f5",
            "controlTitle": "GV.SC-08.01 - Resilience program and external dependencies",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.AM-01.01",
            "controlGuid": "bb7fd671-b140-4407-9afe-b0aff5aba9fe",
            "controlTitle": "ID.AM-01.01 - Physical device asset inventory",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.AM-02.01",
            "controlGuid": "2743b57f-4cf7-4534-874f-22bcb005dce8",
            "controlTitle": "ID.AM-02.01 - Software and applications asset inventory",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.AM-03.01",
            "controlGuid": "d5f11675-f9ec-48d7-b4db-dfefd662312b",
            "controlTitle": "ID.AM-03.01 - Network diagrams",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.AM-04.01",
            "controlGuid": "4dce95d4-f44c-4125-bf7e-869c30507ee9",
            "controlTitle": "ID.AM-04.01 - Third-party location asset inventory",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.AM-05.02",
            "controlGuid": "ad310ebc-5f46-4b6b-a5c1-2f5d86a161aa",
            "controlTitle": "ID.AM-05.02 - Asset protection prioritization",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.AM-07.01",
            "controlGuid": "ee050c64-33b4-4af1-a013-0363d6e843a9",
            "controlTitle": "ID.AM-07.01 - Data inventory",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.RA-01.01",
            "controlGuid": "3b14357b-ebf2-491b-b516-654d5f459d9c",
            "controlTitle": "ID.RA-01.01 - Asset vulnerability identification",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.RA-01.03",
            "controlGuid": "52fe0d5a-6a1f-4005-b26e-37fe520ab86c",
            "controlTitle": "ID.RA-01.03 - Vulnerability management",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.RA-02.01",
            "controlGuid": "a2efa4e3-836d-4972-9c88-9c8a139a444d",
            "controlTitle": "ID.RA-02.01 - Information sharing groups",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.RA-04.01",
            "controlGuid": "9bf05d7a-9e02-43ed-86ba-d04f5c017ad7",
            "controlTitle": "ID.RA-04.01 - Risk impact assessment",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.RA-06.01",
            "controlGuid": "ef80595e-fc7a-4aac-80e8-41f54643e540",
            "controlTitle": "ID.RA-06.01 - Identification of actionable risk remediations",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.RA-06.02",
            "controlGuid": "a539b986-c986-4179-96d6-8947ad6a6811",
            "controlTitle": "ID.RA-06.02 - Prioritization of risk remediation responses",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.RA-06.06",
            "controlGuid": "58031500-2f9f-4a43-bf2e-2eb226b545e4",
            "controlTitle": "ID.RA-06.06 - Risks identified in testing or incident response",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.RA-07.01",
            "controlGuid": "7ae181d3-fdb4-4d1e-b772-282bc4569737",
            "controlTitle": "ID.RA-07.01 - Change management standards and procedures",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.RA-08.01",
            "controlGuid": "4f13b6da-ec00-4253-9332-6e852bc61b0b",
            "controlTitle": "ID.RA-08.01 - Vulnerability disclosure receipt",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.RA-08.02",
            "controlGuid": "54d36b6a-552d-4f96-93ca-c9d33df2a599",
            "controlTitle": "ID.RA-08.02 - Vulnerability disclosure analysis",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-02.01",
            "controlGuid": "e3609ef4-e058-459d-8f56-589753d06daa",
            "controlTitle": "ID.IM-02.01 - Penetration testing",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-02.03",
            "controlGuid": "e7f95314-bf35-458f-a3e3-ed7b4e5ebb34",
            "controlTitle": "ID.IM-02.03 - Incident management effectiveness testing",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-02.04",
            "controlGuid": "f188a5cb-351f-447b-8de0-2d32ff7549e3",
            "controlTitle": "ID.IM-02.04 - Resilience strategy and plan testing",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-02.05",
            "controlGuid": "bea6132d-4f8f-4b23-9872-cd38a1d4a1ad",
            "controlTitle": "ID.IM-02.05 - Resilience testing scenarios",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-02.06",
            "controlGuid": "fbf90e90-149f-45ce-8872-d8f55def6735",
            "controlTitle": "ID.IM-02.06 - Accurate data recovery",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-03.02",
            "controlGuid": "b2ce9117-fcba-49e4-a09b-303e4c7ec030",
            "controlTitle": "ID.IM-03.02 - Monitoring and detection program improvement",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-04.01",
            "controlGuid": "c261fc8a-a1cc-4ff1-94c7-e38e236d5bd2",
            "controlTitle": "ID.IM-04.01 - Alignment of business continuity, disaster recovery, and response programs",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-04.02",
            "controlGuid": "76006630-413c-41f4-be59-f53f30913834",
            "controlTitle": "ID.IM-04.02 - Incident management roles and responsibilities",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "ID.IM-04.08",
            "controlGuid": "0e165381-f1f0-45de-bec5-1b60aecad762",
            "controlTitle": "ID.IM-04.08 - Response program improvement",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AA-01.01",
            "controlGuid": "35c365fe-ecb1-473e-a4a3-65107bf1b98d",
            "controlTitle": "PR.AA-01.01 - Identity and credential management",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AA-02.01",
            "controlGuid": "c8cbcdbc-59be-4168-80ce-d66589040a2d",
            "controlTitle": "PR.AA-02.01 - Authentication of identity",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AA-05.01",
            "controlGuid": "481f44e4-e9df-4c40-9075-c831fe3c1bf8",
            "controlTitle": "PR.AA-05.01 - Access privilege limitation",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AA-05.02",
            "controlGuid": "de0f6bc5-2bff-487f-81ba-dd31a5fe4c52",
            "controlTitle": "PR.AA-05.02 - Privileged system access",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AA-05.03",
            "controlGuid": "50567aab-b87e-4a3c-af1d-6c88c8457b6e",
            "controlTitle": "PR.AA-05.03 - Service accounts",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AT-01.01",
            "controlGuid": "90152888-0fb7-4720-af8e-0a835fbf944f",
            "controlTitle": "PR.AT-01.01 - Cybersecurity awareness training",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AT-01.02",
            "controlGuid": "f3433af7-21f8-4f27-bede-6167e3956646",
            "controlTitle": "PR.AT-01.02 - Cybersecurity awareness training content",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AT-02.01",
            "controlGuid": "c2798356-9079-4f6b-9dbc-f67aa07558fa",
            "controlTitle": "PR.AT-02.01 - Skill-specific training",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.AT-02.03",
            "controlGuid": "cf5b5c36-8e8f-4d32-af46-9cbc1ade6b96",
            "controlTitle": "PR.AT-02.03 - Response and recovery plan training",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.DS-01.02",
            "controlGuid": "641558d9-f539-42cc-aded-027d6f2f4284",
            "controlTitle": "PR.DS-01.02 - Data loss prevention",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.DS-11.01",
            "controlGuid": "6d5530d4-c27a-4166-b114-f6f90dd0b71c",
            "controlTitle": "PR.DS-11.01 - Data backup and replication",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-01.01",
            "controlGuid": "6a02dfda-6d82-40b7-8669-177b1ba6cde2",
            "controlTitle": "PR.PS-01.01 - Configuration baselines",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-01.02",
            "controlGuid": "c3170ac9-bfaf-42c6-9765-b3a5fcbdbe59",
            "controlTitle": "PR.PS-01.02 - Least functionality",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-01.03",
            "controlGuid": "0e85de89-90d6-4b32-8a92-2241c6d5d65f",
            "controlTitle": "PR.PS-01.03 - Configuration deviation",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-03.01",
            "controlGuid": "57d57a4b-d82b-4650-888a-9b8ef30c602a",
            "controlTitle": "PR.PS-03.01 - Asset maintenance",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-04.01",
            "controlGuid": "ae5536b4-8266-410f-b4f0-f62916b1d1f7",
            "controlTitle": "PR.PS-04.01 - Log management standards",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-04.02",
            "controlGuid": "3779199e-483b-4a81-bbaf-801d280c728a",
            "controlTitle": "PR.PS-04.02 - Log coverage",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-04.03",
            "controlGuid": "a158e5ab-c9ad-4cc3-8d0a-d56e5359ab57",
            "controlTitle": "PR.PS-04.03 - Log security and retention",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-05.01",
            "controlGuid": "73aa8e22-77f5-436e-b722-b0d02469070b",
            "controlTitle": "PR.PS-05.01 - Malware prevention",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-05.02",
            "controlGuid": "74edc34e-2b37-4eaa-bc4f-aa92e6869461",
            "controlTitle": "PR.PS-05.02 - Mobile code prevention",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.PS-05.03",
            "controlGuid": "f0881543-6da4-42b2-948a-3784611c19b0",
            "controlTitle": "PR.PS-05.03 - Email and message service protection",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.IR-01.01",
            "controlGuid": "6a519803-05c3-4a4f-a3c5-adae4549d8f8",
            "controlTitle": "PR.IR-01.01 - Network segmentation",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.IR-01.04",
            "controlGuid": "dd3f4ef5-4cd0-4cad-88c8-e267042e1429",
            "controlTitle": "PR.IR-01.04 - Wireless network protection",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.IR-01.05",
            "controlGuid": "7922c0ee-d5ff-42ac-87bc-fbc1e32c5cf5",
            "controlTitle": "PR.IR-01.05 - Remote access protection",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.IR-01.06",
            "controlGuid": "e10e7372-28e0-4fcb-8fa6-98354c3aa334",
            "controlTitle": "PR.IR-01.06 - Production environment segregation",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.IR-01.07",
            "controlGuid": "3cecba26-ec87-4424-b3b0-3bf06658ac68",
            "controlTitle": "PR.IR-01.07 - Operational and IoT technologies",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "PR.IR-04.02",
            "controlGuid": "877faa64-5549-437a-b526-07059383f6d4",
            "controlTitle": "PR.IR-04.02 - Availability and capacity management",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.CM-01.01",
            "controlGuid": "c1d0f25b-5db3-4c76-b769-ce8b61b64b83",
            "controlTitle": "DE.CM-01.01 - Intrusion detection and prevention",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.CM-01.02",
            "controlGuid": "258d5be8-053a-4d62-9914-71f84a571beb",
            "controlTitle": "DE.CM-01.02 - Network traffic volume monitoring",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.CM-01.03",
            "controlGuid": "a751fe82-be1d-49bc-8385-64bbfce2cfd7",
            "controlTitle": "DE.CM-01.03 - Unauthorized network connections and data transfers",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.CM-01.04",
            "controlGuid": "e99ad86e-5c16-4a69-b380-fcd5b16f5f84",
            "controlTitle": "DE.CM-01.04 - Unauthorized device connection",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.CM-01.05",
            "controlGuid": "871ab02e-b662-44ff-a293-348cced7fec1",
            "controlTitle": "DE.CM-01.05 - Website and service blocking",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.CM-03.02",
            "controlGuid": "03dd3a3c-ec49-4be2-88e6-e65e20b04661",
            "controlTitle": "DE.CM-03.02 - Personnel activity monitoring",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.CM-03.03",
            "controlGuid": "928f63ba-a02d-4b2e-ae52-6cdd288a363e",
            "controlTitle": "DE.CM-03.03 - Privileged account monitoring",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.CM-06.01",
            "controlGuid": "e67135e6-dc4e-4c5a-a0c9-153a14a7e0e3",
            "controlTitle": "DE.CM-06.01 - Third-party connection authorization",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.CM-09.01",
            "controlGuid": "8bafe70f-89dd-45ee-97ca-7646464103de",
            "controlTitle": "DE.CM-09.01 - Software and data integrity checking",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.CM-09.03",
            "controlGuid": "a73b9fba-f5fe-4459-a684-1e9fbf512365",
            "controlTitle": "DE.CM-09.03 - Unauthorized software, hardware, or configuration changes",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.AE-03.01",
            "controlGuid": "2e73d443-c823-45e5-8c83-a9b8e2858210",
            "controlTitle": "DE.AE-03.01 - Infrastructure monitoring",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.AE-03.02",
            "controlGuid": "fe51bf4c-ef50-4cbd-8a5e-6a3e829ecacc",
            "controlTitle": "DE.AE-03.02 - Event aggregation, correlation, and analysis",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.AE-04.01",
            "controlGuid": "efab59c4-83f8-4854-aafd-263b8d3daaa8",
            "controlTitle": "DE.AE-04.01 - Event triage",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "DE.AE-06.01",
            "controlGuid": "1535b040-5059-4867-b4a6-0118db891b29",
            "controlTitle": "DE.AE-06.01 - Event alerting",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.MA-01.01",
            "controlGuid": "82762234-0791-4d49-9502-4cd5edc0da55",
            "controlTitle": "RS.MA-01.01 - Response plan execution",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.MA-02.01",
            "controlGuid": "772acecb-b0e8-46f4-96e4-cf83512777c4",
            "controlTitle": "RS.MA-02.01 - Reliable event detection and analysis",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.MA-03.01",
            "controlGuid": "ad87e8e7-9aa7-40cd-9557-231e2020ddbd",
            "controlTitle": "RS.MA-03.01 - Incident response prioritization",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.MA-05.01",
            "controlGuid": "e4ead128-0213-4c8d-99d3-8625565e9fe0",
            "controlTitle": "RS.MA-05.01 - Incident severity levels and escalation",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.AN-03.01",
            "controlGuid": "1085dca4-b68d-4cb8-991f-d837f94bda1e",
            "controlTitle": "RS.AN-03.01 - Incident investigation and root cause determination",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.AN-06.01",
            "controlGuid": "de65b38e-9150-482c-aa07-b7a8640ce69d",
            "controlTitle": "RS.AN-06.01 - Incident investigation and evidence collection",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.CO-02.01",
            "controlGuid": "b4d16ebf-1cba-4a61-a5b5-90837373f4ef",
            "controlTitle": "RS.CO-02.01 - Incident escalation protocols",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.CO-03.01",
            "controlGuid": "086f2cc7-4718-4640-abd7-c22e855e5566",
            "controlTitle": "RS.CO-03.01 - Internal event and intelligence sharing",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.CO-03.02",
            "controlGuid": "dcde6d65-39f1-489f-8dc3-f9b5f9640391",
            "controlTitle": "RS.CO-03.02 - Incident intelligence sharing",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RS.MI-01.01",
            "controlGuid": "5ec02102-f167-4b02-96ac-25889eb6cfa2",
            "controlTitle": "RS.MI-01.01 - Incident containment",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RC.RP-01.01",
            "controlGuid": "4db7f93e-f006-4106-8a3c-48ea6409c563",
            "controlTitle": "RC.RP-01.01 - Recovery plan execution",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RC.RP-02.02",
            "controlGuid": "e56bc81a-4eb0-42dd-b7e4-9a4c8af5b92b",
            "controlTitle": "RC.RP-02.02 - Recovery prioritization",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RC.CO-03.01",
            "controlGuid": "6737a5bd-eae8-4291-a7a1-48d1b655c0a4",
            "controlTitle": "RC.CO-03.01 - Recovery activity internal communications",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RC.CO-03.02",
            "controlGuid": "fe462d2c-ff54-4739-85fe-0f5b7062b78b",
            "controlTitle": "RC.CO-03.02 - Recovery activity external communications",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        },
        {
            "profileMappingId": 0,
            "controlId": 0,
            "controlIdentifier": "RC.CO-04.01",
            "controlGuid": "b51ba3de-cc76-4c0a-a97d-a25f41347d0d",
            "controlTitle": "RC.CO-04.01 - Incident communications planning and coordination",
            "catalogId": 0,
            "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a",
            "catalogTitle": "CRI Profile v2.2",
            "catalogUrl": "https://cyberriskinstitute.org/the-profile/"
        }
    ],
    "exportDate": "2026-04-20T16:57:02Z",
    "exportVersion": "1.0"
}