{ "profile": { "uuid": "5b9feec9-3bb0-4474-be99-ac2aeed35037", "name": "CRI Profile v2.2 — Tier 4", "confidentiality": "Low", "integrity": "Low", "availability": "Low", "category": "Low", "isPublic": true }, "mappings": [ { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.OC-01.01", "controlGuid": "6f806a69-c010-4f8e-9c84-b8f9bda04287", "controlTitle": "GV.OC-01.01 - Goverance alignment", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.OC-02.01", "controlGuid": "a94ba6ea-27e0-469b-8d9d-b48bbc700ead", "controlTitle": "GV.OC-02.01 - Stakeholder obligations", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.OC-03.01", "controlGuid": "e3ad351c-57ee-43aa-be03-4df6ac9bbddb", "controlTitle": "GV.OC-03.01 - Legal, contractual, and regulatory obligations", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.OC-03.02", "controlGuid": "47b386f3-29e9-4dfb-b283-31d3b80e6346", "controlTitle": "GV.OC-03.02 - Data Privacy Policy", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.OC-04.02", "controlGuid": "94792c0b-6ba9-4531-b067-4130de7ce4ee", "controlTitle": "GV.OC-04.02 - Critical business processes", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.OC-05.01", "controlGuid": "3c1a93dd-c4d3-4393-a449-5a8d95c2fb94", "controlTitle": "GV.OC-05.01 - Critical service dependencies", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.OC-05.03", "controlGuid": "dde33b85-5680-4d06-b2e8-8c9a8e27b3ce", "controlTitle": "GV.OC-05.03 - Alignment of resilience measures", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-01.01", "controlGuid": "4576b7a0-f48a-48f9-aacb-ff78809b749e", "controlTitle": "GV.RM-01.01 - Risk management strategy approval", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-01.02", "controlGuid": "0f676578-9aa6-4617-b885-ab7b0064197a", "controlTitle": "GV.RM-01.02 - Industry standards and guidelines", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-01.03", "controlGuid": "c227e1dc-40d4-40e7-a26e-0e9cc4f00247", "controlTitle": "GV.RM-01.03 - Technology and cybersecurity program objectives", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-01.04", "controlGuid": "58be7fba-d55a-4b46-af2f-7f4a7d76b8b9", "controlTitle": "GV.RM-01.04 - Risk management program components", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-02.01", "controlGuid": "4a96fb1b-a7cb-4b0f-8c10-2d2a894bb24c", "controlTitle": "GV.RM-02.01 - Governing authority risk appetite review", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-03.01", "controlGuid": "e9cf734f-2a71-4d64-bcb2-22a32ebe79f6", "controlTitle": "GV.RM-03.01 - Enterprise risk management framework integration", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-04.01", "controlGuid": "386ca3be-7c10-41b7-9f07-5e57c90d9704", "controlTitle": "GV.RM-04.01 - Risk management guidance and credible challenge", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-05.01", "controlGuid": "e35c38c5-a0f8-4bea-bb59-5ecdd8d7840f", "controlTitle": "GV.RM-05.01 - Risk monitoring and escalation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-05.02", "controlGuid": "31fafe95-c431-437a-ba5d-7d17817875e0", "controlTitle": "GV.RM-05.02 - Third-party incident coordination", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-06.01", "controlGuid": "ce952879-3aac-4d1d-af9a-8249eaf9b5f9", "controlTitle": "GV.RM-06.01 - Risk management processes", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-08.01", "controlGuid": "569e3d33-2798-4a33-b34b-293559567e5d", "controlTitle": "GV.RM-08.01 - Emerging technologies risk management", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-08.02", "controlGuid": "5a7cc2e6-5bdd-477e-be8c-1117615a32c5", "controlTitle": "GV.RM-08.02 - Project and procurement risk management", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-08.06", "controlGuid": "36f61575-52f6-45cd-8db1-5e14f9ed9b38", "controlTitle": "GV.RM-08.06 - Program and project governance", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-08.07", "controlGuid": "ad5a8ab5-a417-4afc-be97-46eeef30bba9", "controlTitle": "GV.RM-08.07 - Project management methodology", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RM-09.01", "controlGuid": "ccc51242-a7ef-4e9b-859a-ae9602e2b713", "controlTitle": "GV.RM-09.01 - Resilience strategy and program", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-01.01", "controlGuid": "33ecd140-1f11-41cb-9546-d09daaf2cb93", "controlTitle": "GV.RR-01.01 - Technology and cybersecurity risk management accountability", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-01.02", "controlGuid": "59fd4edd-9484-4b4e-8619-30f704257029", "controlTitle": "GV.RR-01.02 - Third-party risk management accountability", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-01.03", "controlGuid": "a974e7e8-0008-4dd8-8cf4-789d7f4329a7", "controlTitle": "GV.RR-01.03 - Resilience risk management accountability", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-01.04", "controlGuid": "b553ddff-adfb-4031-9aa4-f6e57a4724d4", "controlTitle": "GV.RR-01.04 - Cybersecurity Officer designation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-01.05", "controlGuid": "007b11ad-b7cb-415f-968f-c72bca1c9a11", "controlTitle": "GV.RR-01.05 - Technology Officer designation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-02.01", "controlGuid": "dedb4060-05d5-4e9c-a237-bdba7acfd701", "controlTitle": "GV.RR-02.01 - Cybersecurity roles and responsibilities", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-02.03", "controlGuid": "308d3cb2-ee32-4462-bd05-ce2dfc21298e", "controlTitle": "GV.RR-02.03 - Resilience program roles and responsibilities", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-02.04", "controlGuid": "7bb63f6d-7782-4dd8-a652-c357bd694fcf", "controlTitle": "GV.RR-02.04 - Third-party risk management roles and responsibilities", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-02.05", "controlGuid": "fc847802-8aa2-49f8-bda3-d935ec589f47", "controlTitle": "GV.RR-02.05 - Physical security roles and responsibilities", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-03.01", "controlGuid": "51641a42-b352-4613-9f62-6d3c2d54b5e1", "controlTitle": "GV.RR-03.01 - Budgeting and resourcing", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-03.02", "controlGuid": "1b0197cf-edf1-428c-afdb-9496d85c9ec2", "controlTitle": "GV.RR-03.02 - Skill and resource requirements", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-03.03", "controlGuid": "eb4ac59f-d441-4082-ba8e-3c5521f3cf04", "controlTitle": "GV.RR-03.03 - Adequate resources", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-04.01", "controlGuid": "474a6838-7bc1-418a-bb41-accc62e93066", "controlTitle": "GV.RR-04.01 - Background checks", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.RR-04.02", "controlGuid": "6e4f1ec0-7325-4a7c-810a-4ba919fd8c2e", "controlTitle": "GV.RR-04.02 - Employment termination", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.PO-01.01", "controlGuid": "1866beaf-ea70-4ec5-a136-d6d9f3c30be1", "controlTitle": "GV.PO-01.01 - Policy documentation and approval", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.PO-01.03", "controlGuid": "eecdd115-7972-4f89-9c92-75124d64bdcc", "controlTitle": "GV.PO-01.03 - Incentive and accountability program alignment", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.PO-01.04", "controlGuid": "2f66a468-86c3-4f4a-97bd-4ce625aaff89", "controlTitle": "GV.PO-01.04 - Acceptable use policies", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.PO-01.05", "controlGuid": "5cd2d15d-41c0-4382-99c6-8d2315cb241f", "controlTitle": "GV.PO-01.05 - Process and control alignment to policy", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.PO-01.06", "controlGuid": "0249bffb-4058-413b-ad70-db2c41759ed8", "controlTitle": "GV.PO-01.06 - Physical and environmental security policies", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.PO-01.07", "controlGuid": "5f8bde13-490e-41a5-af86-04c383c44378", "controlTitle": "GV.PO-01.07 - Business continuity and resilience program policies", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.PO-01.08", "controlGuid": "c191dfdb-09a6-44f7-810e-3e8a238bd194", "controlTitle": "GV.PO-01.08 - Third-party risk management policies", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.PO-02.01", "controlGuid": "e8a92233-bd5c-4ff3-9434-3f4dfe6353ff", "controlTitle": "GV.PO-02.01 - Policy review and update", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.OV-01.01", "controlGuid": "20378f65-fad4-4757-8235-351b0687b7dd", "controlTitle": "GV.OV-01.01 - Governing authority risk management review", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.OV-01.02", "controlGuid": "5f611365-07a3-43fc-9d22-0b1740c1bf48", "controlTitle": "GV.OV-01.02 - Cybersecurity Officer reporting to governing authority", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.OV-01.03", "controlGuid": "04928a37-759d-4595-9b50-d32d287f18cf", "controlTitle": "GV.OV-01.03 - Technology Officer reporting to governing authority", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.OV-02.01", "controlGuid": "11d45e85-4857-45e2-8dfc-d280850824fc", "controlTitle": "GV.OV-02.01 - Inherent risk assessment", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.OV-03.02", "controlGuid": "077236e3-18d4-413b-b63e-1aa32e5921e9", "controlTitle": "GV.OV-03.02 - Resilience program performance", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.SC-01.01", "controlGuid": "6be430ed-113f-46cd-a737-a5538307c026", "controlTitle": "GV.SC-01.01 - Third-party risk management strategy and program", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.SC-02.01", "controlGuid": "ea63eade-34ca-4db2-9034-b506429c5acf", "controlTitle": "GV.SC-02.01 - Designated organization and third-party responsibilities", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.SC-03.01", "controlGuid": "bfb1344a-c773-45a2-bc3e-f4b7102b280f", "controlTitle": "GV.SC-03.01 - Third-party risk management alignment", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.SC-04.01", "controlGuid": "329abf0a-78a8-4bd3-b2f6-8d8a88868373", "controlTitle": "GV.SC-04.01 - Third-party inventory and risk-ranking", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.SC-08.01", "controlGuid": "8e16617a-6ca4-4e8b-a65e-88f2be19c1f5", "controlTitle": "GV.SC-08.01 - Resilience program and external dependencies", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.AU-01.01", "controlGuid": "f7910b2c-be47-4797-838f-6bc6928da320", "controlTitle": "GV.AU-01.01 - Independent audit function", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.AU-01.02", "controlGuid": "f829fc2a-220a-4cf6-9d5b-5aad9c062cc3", "controlTitle": "GV.AU-01.02 - Independent audit evaluation plan", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.AU-01.03", "controlGuid": "f2b26832-5f92-4e3d-9472-c1dbc9c93dff", "controlTitle": "GV.AU-01.03 - Independent audit cybersecurity program evaluation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.AU-01.04", "controlGuid": "ded4d622-56eb-4a14-b629-d3a88e4739ae", "controlTitle": "GV.AU-01.04 - Independent audit third-party risk management program evaluation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.AU-01.05", "controlGuid": "930d05df-b851-459c-9179-c4ac3df08daf", "controlTitle": "GV.AU-01.05 - Independent audit compliance assessment", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.AU-02.01", "controlGuid": "b8522a6b-2801-4f86-acf6-6a58bbe73130", "controlTitle": "GV.AU-02.01 - Independent audit procedure and audit plan update", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.AU-02.02", "controlGuid": "b7ca7b27-3cd2-41ef-a662-03314338b7a0", "controlTitle": "GV.AU-02.02 - Independent audit risk environment updates", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.AU-03.01", "controlGuid": "5a9ffeed-33cd-4686-a39c-05d0a41e4518", "controlTitle": "GV.AU-03.01 - Independent audit identification of cybersecurity weaknesses", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.AU-03.02", "controlGuid": "76a179b3-9dd3-4f00-a4a1-6cc85268b7eb", "controlTitle": "GV.AU-03.02 - Independent audit issue tracking", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "GV.AU-03.03", "controlGuid": "48b6c992-b361-4620-bf7e-56ca79548696", "controlTitle": "GV.AU-03.03 - Independent audit reporting", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.AM-01.01", "controlGuid": "bb7fd671-b140-4407-9afe-b0aff5aba9fe", "controlTitle": "ID.AM-01.01 - Physical device asset inventory", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.AM-02.01", "controlGuid": "2743b57f-4cf7-4534-874f-22bcb005dce8", "controlTitle": "ID.AM-02.01 - Software and applications asset inventory", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.AM-03.01", "controlGuid": "d5f11675-f9ec-48d7-b4db-dfefd662312b", "controlTitle": "ID.AM-03.01 - Network diagrams", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.AM-04.01", "controlGuid": "4dce95d4-f44c-4125-bf7e-869c30507ee9", "controlTitle": "ID.AM-04.01 - Third-party location asset inventory", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.AM-08.04", "controlGuid": "32a9de4e-bcc9-44ed-9e8f-aeb776099b74", "controlTitle": "ID.AM-08.04 - Sensitive data physical protections", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.AM-08.05", "controlGuid": "4e36a0b2-45d7-4946-bc4c-7e767a35dfa2", "controlTitle": "ID.AM-08.05 - Data destruction procedures", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.AM-08.06", "controlGuid": "e35a0a3a-17fa-4c57-a8ab-54e56cd66865", "controlTitle": "ID.AM-08.06 - Third-party data risk coverage", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-01.01", "controlGuid": "3b14357b-ebf2-491b-b516-654d5f459d9c", "controlTitle": "ID.RA-01.01 - Asset vulnerability identification", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-01.02", "controlGuid": "a305d733-a950-4ef4-a01b-3886334328eb", "controlTitle": "ID.RA-01.02 - Business unit risk reporting", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-01.03", "controlGuid": "52fe0d5a-6a1f-4005-b26e-37fe520ab86c", "controlTitle": "ID.RA-01.03 - Vulnerability management", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-03.01", "controlGuid": "d90368b6-54f8-4c86-ad31-a2335a6f5533", "controlTitle": "ID.RA-03.01 - Threat identification and analysis", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-03.02", "controlGuid": "9fef494f-05ba-4df5-8438-dfd8ffccd392", "controlTitle": "ID.RA-03.02 - Stakeholder-provided threat information", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-03.04", "controlGuid": "21a0a117-ed88-4149-b0e3-239a1aa3c814", "controlTitle": "ID.RA-03.04 - Threat analysis program", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-04.01", "controlGuid": "9bf05d7a-9e02-43ed-86ba-d04f5c017ad7", "controlTitle": "ID.RA-04.01 - Risk impact assessment", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-05.01", "controlGuid": "b08a72f9-ab4e-497d-80ab-a10df85bedd7", "controlTitle": "ID.RA-05.01 - Risk assessment considerations", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-06.01", "controlGuid": "ef80595e-fc7a-4aac-80e8-41f54643e540", "controlTitle": "ID.RA-06.01 - Identification of actionable risk remediations", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-06.02", "controlGuid": "a539b986-c986-4179-96d6-8947ad6a6811", "controlTitle": "ID.RA-06.02 - Prioritization of risk remediation responses", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-06.03", "controlGuid": "00ff3bed-1a0e-4c98-8b8c-5d7d89b8e909", "controlTitle": "ID.RA-06.03 - Implementation of controls to manage risk", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-06.04", "controlGuid": "039a0a6e-038b-483b-9e00-5a393d370a22", "controlTitle": "ID.RA-06.04 - Threat, impact, and risk assessment", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-06.05", "controlGuid": "09894e2c-1fdd-4646-b4b9-5bad594e3342", "controlTitle": "ID.RA-06.05 - Prioritization of vulnerability remediation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-06.06", "controlGuid": "58031500-2f9f-4a43-bf2e-2eb226b545e4", "controlTitle": "ID.RA-06.06 - Risks identified in testing or incident response", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-07.01", "controlGuid": "7ae181d3-fdb4-4d1e-b772-282bc4569737", "controlTitle": "ID.RA-07.01 - Change management standards and procedures", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-07.05", "controlGuid": "3a15e2f7-aad9-478f-a645-186e11e85adf", "controlTitle": "ID.RA-07.05 - Vulnerability exception management", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-08.01", "controlGuid": "4f13b6da-ec00-4253-9332-6e852bc61b0b", "controlTitle": "ID.RA-08.01 - Vulnerability disclosure receipt", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.RA-08.02", "controlGuid": "54d36b6a-552d-4f96-93ca-c9d33df2a599", "controlTitle": "ID.RA-08.02 - Vulnerability disclosure analysis", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.IM-01.01", "controlGuid": "ecb320dd-8c08-43c8-92f1-db03102f258f", "controlTitle": "ID.IM-01.01 - Control testing", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.IM-01.04", "controlGuid": "4d16e10b-105f-46a3-aba2-b611fc298e44", "controlTitle": "ID.IM-01.04 - Continuous improvement", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.IM-01.05", "controlGuid": "5fff1b86-b949-4ac1-aea2-e14ddf658dce", "controlTitle": "ID.IM-01.05 - Third-party risk management program assessment", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.IM-02.01", "controlGuid": "e3609ef4-e058-459d-8f56-589753d06daa", "controlTitle": "ID.IM-02.01 - Penetration testing", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.IM-02.04", "controlGuid": "f188a5cb-351f-447b-8de0-2d32ff7549e3", "controlTitle": "ID.IM-02.04 - Resilience strategy and plan testing", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.IM-02.05", "controlGuid": "bea6132d-4f8f-4b23-9872-cd38a1d4a1ad", "controlTitle": "ID.IM-02.05 - Resilience testing scenarios", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.IM-02.06", "controlGuid": "fbf90e90-149f-45ce-8872-d8f55def6735", "controlTitle": "ID.IM-02.06 - Accurate data recovery", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.IM-03.01", "controlGuid": "8f95339a-91ab-474d-8601-da9d25a1350e", "controlTitle": "ID.IM-03.01 - Protection controls improvement", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.IM-04.01", "controlGuid": "c261fc8a-a1cc-4ff1-94c7-e38e236d5bd2", "controlTitle": "ID.IM-04.01 - Alignment of business continuity, disaster recovery, and response programs", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.IM-04.02", "controlGuid": "76006630-413c-41f4-be59-f53f30913834", "controlTitle": "ID.IM-04.02 - Incident management roles and responsibilities", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.IM-04.07", "controlGuid": "41487a41-b59a-42ca-a3e4-bf53f03f7573", "controlTitle": "ID.IM-04.07 - Incident management support resources", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "ID.IM-04.08", "controlGuid": "0e165381-f1f0-45de-bec5-1b60aecad762", "controlTitle": "ID.IM-04.08 - Response program improvement", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-01.01", "controlGuid": "35c365fe-ecb1-473e-a4a3-65107bf1b98d", "controlTitle": "PR.AA-01.01 - Identity and credential management", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-01.02", "controlGuid": "0264a2e7-bcfe-4f24-b819-4fbfbcdb9906", "controlTitle": "PR.AA-01.02 - Physical and logical access", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-02.01", "controlGuid": "c8cbcdbc-59be-4168-80ce-d66589040a2d", "controlTitle": "PR.AA-02.01 - Authentication of identity", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-03.01", "controlGuid": "d20c3243-04e1-4c53-9481-5a2106932bd0", "controlTitle": "PR.AA-03.01 - Authentication requirements", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-03.02", "controlGuid": "07a688bf-959f-4dec-9f7f-1a5d251db660", "controlTitle": "PR.AA-03.02 - Access authorization", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-03.03", "controlGuid": "285090df-0b02-4c55-bcf0-f9ddb3fea372", "controlTitle": "PR.AA-03.03 - Email verification mechanisms", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-04.01", "controlGuid": "457cffc7-f4e9-4f6a-956c-fbe07ad28b9e", "controlTitle": "PR.AA-04.01 - Access control within and across security perimeters", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-05.01", "controlGuid": "481f44e4-e9df-4c40-9075-c831fe3c1bf8", "controlTitle": "PR.AA-05.01 - Access privilege limitation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-05.02", "controlGuid": "de0f6bc5-2bff-487f-81ba-dd31a5fe4c52", "controlTitle": "PR.AA-05.02 - Privileged system access", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-05.03", "controlGuid": "50567aab-b87e-4a3c-af1d-6c88c8457b6e", "controlTitle": "PR.AA-05.03 - Service accounts", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-05.04", "controlGuid": "db882f16-aaa0-42f8-8c3f-73974c20f7cd", "controlTitle": "PR.AA-05.04 - Third-party access management", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-06.01", "controlGuid": "0f606241-93c2-49dd-8651-81aa1ec8c127", "controlTitle": "PR.AA-06.01 - Physical access security", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AA-06.02", "controlGuid": "a6437f25-86ef-497c-b39d-a99565453e99", "controlTitle": "PR.AA-06.02 - Physical and visual access to information assets", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AT-01.01", "controlGuid": "90152888-0fb7-4720-af8e-0a835fbf944f", "controlTitle": "PR.AT-01.01 - Cybersecurity awareness training", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AT-01.02", "controlGuid": "f3433af7-21f8-4f27-bede-6167e3956646", "controlTitle": "PR.AT-01.02 - Cybersecurity awareness training content", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AT-01.03", "controlGuid": "b46dc685-8896-4c27-8d3a-3249cc24a5da", "controlTitle": "PR.AT-01.03 - Cybersecurity awareness training update", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AT-01.04", "controlGuid": "3a7fa81d-17da-475d-be5d-9aa7797b4449", "controlTitle": "PR.AT-01.04 - Change-related training", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AT-02.01", "controlGuid": "c2798356-9079-4f6b-9dbc-f67aa07558fa", "controlTitle": "PR.AT-02.01 - Skill-specific training", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AT-02.02", "controlGuid": "1d9116d9-a3cf-413e-8a26-0b75a5ca700c", "controlTitle": "PR.AT-02.02 - Training of high-risk groups", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AT-02.03", "controlGuid": "cf5b5c36-8e8f-4d32-af46-9cbc1ade6b96", "controlTitle": "PR.AT-02.03 - Response and recovery plan training", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AT-02.05", "controlGuid": "d44e142c-4247-4dbb-b916-e2a14410b955", "controlTitle": "PR.AT-02.05 - Third-party awareness training", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AT-02.06", "controlGuid": "8f40b884-5ae1-4aa1-979c-ecbba9ba3986", "controlTitle": "PR.AT-02.06 - Customer awareness training", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AT-02.07", "controlGuid": "6a98855c-8870-436a-97be-b3f8f37319a1", "controlTitle": "PR.AT-02.07 - Governing body and senior management training", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.AT-02.08", "controlGuid": "0505326c-72cf-4dee-9a17-5d2669da11a7", "controlTitle": "PR.AT-02.08 - Governing authority access to expertise", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.DS-01.01", "controlGuid": "1b9f8e04-0f92-4ae6-9a93-d3bc33d8c698", "controlTitle": "PR.DS-01.01 - Data-at-rest protection", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.DS-01.03", "controlGuid": "b67126cb-d46c-406a-bf49-42dc5096e0c6", "controlTitle": "PR.DS-01.03 - Removable media protection", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.DS-02.01", "controlGuid": "9faecec2-3f5e-43af-90b4-883fc12d9a1c", "controlTitle": "PR.DS-02.01 - Data-in-transit protection", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.DS-10.01", "controlGuid": "4e333971-a59f-4635-b5d6-9f7e37d5a859", "controlTitle": "PR.DS-10.01 - Data-in-use protection", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.DS-11.01", "controlGuid": "6d5530d4-c27a-4166-b114-f6f90dd0b71c", "controlTitle": "PR.DS-11.01 - Data backup and replication", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-01.02", "controlGuid": "c3170ac9-bfaf-42c6-9765-b3a5fcbdbe59", "controlTitle": "PR.PS-01.02 - Least functionality", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-01.04", "controlGuid": "d2fab9ef-4fa0-4292-821a-91ff006b25b5", "controlTitle": "PR.PS-01.04 - Time services and synchronization", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-01.05", "controlGuid": "e6713f52-f65f-42c0-8a72-d0b18d524bc8", "controlTitle": "PR.PS-01.05 - Encryption standards", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-01.06", "controlGuid": "e78bc22c-c3c4-4ffa-b7a4-dc9eb92f0485", "controlTitle": "PR.PS-01.06 - Encryption management practices", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-01.07", "controlGuid": "8e6bdeb3-56c1-4a90-aca6-15c7ccc974a2", "controlTitle": "PR.PS-01.07 - Cryptographic keys and certificates", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-01.08", "controlGuid": "f76f59ca-99ed-4902-ad81-c5fa4c3c8261", "controlTitle": "PR.PS-01.08 - End-user device protection", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-01.09", "controlGuid": "dceb52dc-2bb2-4a1a-b526-604b4bbf8d1e", "controlTitle": "PR.PS-01.09 - Virtualized end point protection", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-02.01", "controlGuid": "3f0b04b5-eb6d-4e93-bfd2-37dba1ecaf1d", "controlTitle": "PR.PS-02.01 - Patch identification and application", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-04.01", "controlGuid": "ae5536b4-8266-410f-b4f0-f62916b1d1f7", "controlTitle": "PR.PS-04.01 - Log management standards", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-04.02", "controlGuid": "3779199e-483b-4a81-bbaf-801d280c728a", "controlTitle": "PR.PS-04.02 - Log coverage", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-04.03", "controlGuid": "a158e5ab-c9ad-4cc3-8d0a-d56e5359ab57", "controlTitle": "PR.PS-04.03 - Log security and retention", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-05.01", "controlGuid": "73aa8e22-77f5-436e-b722-b0d02469070b", "controlTitle": "PR.PS-05.01 - Malware prevention", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-05.02", "controlGuid": "74edc34e-2b37-4eaa-bc4f-aa92e6869461", "controlTitle": "PR.PS-05.02 - Mobile code prevention", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.PS-05.03", "controlGuid": "f0881543-6da4-42b2-948a-3784611c19b0", "controlTitle": "PR.PS-05.03 - Email and message service protection", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.IR-01.01", "controlGuid": "6a519803-05c3-4a4f-a3c5-adae4549d8f8", "controlTitle": "PR.IR-01.01 - Network segmentation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.IR-01.02", "controlGuid": "59bfb995-3574-4301-8c68-b5ebf71a1de4", "controlTitle": "PR.IR-01.02 - Network device configurations", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.IR-01.04", "controlGuid": "dd3f4ef5-4cd0-4cad-88c8-e267042e1429", "controlTitle": "PR.IR-01.04 - Wireless network protection", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.IR-01.05", "controlGuid": "7922c0ee-d5ff-42ac-87bc-fbc1e32c5cf5", "controlTitle": "PR.IR-01.05 - Remote access protection", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.IR-01.08", "controlGuid": "e57095af-db2d-44d9-90a9-8f5698db08de", "controlTitle": "PR.IR-01.08 - End-user device access", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "PR.IR-02.01", "controlGuid": "73149c83-3f97-4926-b356-0b2ef174ff47", "controlTitle": "PR.IR-02.01 - Physical and environmental controls", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.CM-01.01", "controlGuid": "c1d0f25b-5db3-4c76-b769-ce8b61b64b83", "controlTitle": "DE.CM-01.01 - Intrusion detection and prevention", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.CM-01.04", "controlGuid": "e99ad86e-5c16-4a69-b380-fcd5b16f5f84", "controlTitle": "DE.CM-01.04 - Unauthorized device connection", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.CM-01.05", "controlGuid": "871ab02e-b662-44ff-a293-348cced7fec1", "controlTitle": "DE.CM-01.05 - Website and service blocking", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.CM-02.01", "controlGuid": "061dee29-2bb3-4553-98b3-4c4025bcd16f", "controlTitle": "DE.CM-02.01 - Anomalous activity detection", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.CM-03.01", "controlGuid": "126de0cc-e0d2-41cd-b820-5d65301fb51e", "controlTitle": "DE.CM-03.01 - Access activity logging and monitoring", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.CM-03.02", "controlGuid": "03dd3a3c-ec49-4be2-88e6-e65e20b04661", "controlTitle": "DE.CM-03.02 - Personnel activity monitoring", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.CM-06.01", "controlGuid": "e67135e6-dc4e-4c5a-a0c9-153a14a7e0e3", "controlTitle": "DE.CM-06.01 - Third-party connection authorization", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.CM-09.03", "controlGuid": "a73b9fba-f5fe-4459-a684-1e9fbf512365", "controlTitle": "DE.CM-09.03 - Unauthorized software, hardware, or configuration changes", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.AE-02.01", "controlGuid": "8ad66074-b3d4-4cf8-b073-bd538730b6e4", "controlTitle": "DE.AE-02.01 - Event analysis and detection", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.AE-02.02", "controlGuid": "1c3600a4-adaa-4a09-b7fb-076924facfd8", "controlTitle": "DE.AE-02.02 - Alert parameters and thresholds", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.AE-03.01", "controlGuid": "2e73d443-c823-45e5-8c83-a9b8e2858210", "controlTitle": "DE.AE-03.01 - Infrastructure monitoring", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.AE-03.02", "controlGuid": "fe51bf4c-ef50-4cbd-8a5e-6a3e829ecacc", "controlTitle": "DE.AE-03.02 - Event aggregation, correlation, and analysis", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.AE-04.01", "controlGuid": "efab59c4-83f8-4854-aafd-263b8d3daaa8", "controlTitle": "DE.AE-04.01 - Event triage", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "DE.AE-06.01", "controlGuid": "1535b040-5059-4867-b4a6-0118db891b29", "controlTitle": "DE.AE-06.01 - Event alerting", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RS.MA-01.01", "controlGuid": "82762234-0791-4d49-9502-4cd5edc0da55", "controlTitle": "RS.MA-01.01 - Response plan execution", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RS.MA-02.01", "controlGuid": "772acecb-b0e8-46f4-96e4-cf83512777c4", "controlTitle": "RS.MA-02.01 - Reliable event detection and analysis", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RS.MA-03.01", "controlGuid": "ad87e8e7-9aa7-40cd-9557-231e2020ddbd", "controlTitle": "RS.MA-03.01 - Incident response prioritization", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RS.MA-05.01", "controlGuid": "e4ead128-0213-4c8d-99d3-8625565e9fe0", "controlTitle": "RS.MA-05.01 - Incident severity levels and escalation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RS.AN-03.01", "controlGuid": "1085dca4-b68d-4cb8-991f-d837f94bda1e", "controlTitle": "RS.AN-03.01 - Incident investigation and root cause determination", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RS.AN-08.01", "controlGuid": "b27b7dc1-9d67-4a70-86ee-965607b95f18", "controlTitle": "RS.AN-08.01 - Incident impact analysis", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RS.CO-02.01", "controlGuid": "b4d16ebf-1cba-4a61-a5b5-90837373f4ef", "controlTitle": "RS.CO-02.01 - Incident escalation protocols", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RS.CO-02.02", "controlGuid": "6ca6124f-3b05-4ce7-bf6f-6928f04ddb29", "controlTitle": "RS.CO-02.02 - Incident notification and reporting", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RS.CO-02.03", "controlGuid": "5500b25f-b0cc-4c38-82b3-c3e3e9b6b01d", "controlTitle": "RS.CO-02.03 - Incident response communication procedures", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RS.CO-03.02", "controlGuid": "dcde6d65-39f1-489f-8dc3-f9b5f9640391", "controlTitle": "RS.CO-03.02 - Incident intelligence sharing", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RS.MI-01.01", "controlGuid": "5ec02102-f167-4b02-96ac-25889eb6cfa2", "controlTitle": "RS.MI-01.01 - Incident containment", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RS.MI-02.01", "controlGuid": "b210a738-70e3-41af-a158-2b42bc03e5f7", "controlTitle": "RS.MI-02.01 - Incident vulnerability remediation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RC.RP-01.01", "controlGuid": "4db7f93e-f006-4106-8a3c-48ea6409c563", "controlTitle": "RC.RP-01.01 - Recovery plan execution", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RC.RP-02.01", "controlGuid": "e7272d58-2be4-4a1f-9809-05a7b583beca", "controlTitle": "RC.RP-02.01 - Adaptive response actions", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RC.RP-02.02", "controlGuid": "e56bc81a-4eb0-42dd-b7e4-9a4c8af5b92b", "controlTitle": "RC.RP-02.02 - Recovery prioritization", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RC.RP-03.01", "controlGuid": "328a3e07-e3cd-4b5a-808d-d8b72aa4333b", "controlTitle": "RC.RP-03.01 - Recovery backup verification", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RC.RP-04.01", "controlGuid": "7326784e-e42e-4100-b3e1-be6e0b73f752", "controlTitle": "RC.RP-04.01 - Recovery data integrity verification", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RC.RP-05.02", "controlGuid": "3ffcf365-8b36-4b64-bf7d-d8e6687f2350", "controlTitle": "RC.RP-05.02 - Service recovery confirmation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RC.RP-06.01", "controlGuid": "304ce688-04b0-421d-b365-6cdf59aa8328", "controlTitle": "RC.RP-06.01 - Incident closure", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RC.CO-03.01", "controlGuid": "6737a5bd-eae8-4291-a7a1-48d1b655c0a4", "controlTitle": "RC.CO-03.01 - Recovery activity internal communications", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RC.CO-03.02", "controlGuid": "fe462d2c-ff54-4739-85fe-0f5b7062b78b", "controlTitle": "RC.CO-03.02 - Recovery activity external communications", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "RC.CO-04.01", "controlGuid": "b51ba3de-cc76-4c0a-a97d-a25f41347d0d", "controlTitle": "RC.CO-04.01 - Incident communications planning and coordination", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.DD-02.01", "controlGuid": "dd8c2c57-2f60-44e8-a35e-5f901437c13c", "controlTitle": "EX.DD-02.01 - Due diligence resource allocation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.DD-02.02", "controlGuid": "97abd3c0-eb13-402f-b930-8b890976512b", "controlTitle": "EX.DD-02.02 - Business proposal evaluation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.DD-02.03", "controlGuid": "691459e8-d7c7-41dd-ba3e-91b6a145c9de", "controlTitle": "EX.DD-02.03 - Third-party business profile due diligence", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.DD-02.04", "controlGuid": "7f570265-70fe-4f97-bd3f-5e0fee9baf88", "controlTitle": "EX.DD-02.04 - Third-party internal controls due diligence", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.DD-03.01", "controlGuid": "54ff1f63-09be-4268-b1ca-b1e17d4f0724", "controlTitle": "EX.DD-03.01 - Third-party cybersecurity program due diligence", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.DD-03.02", "controlGuid": "0d3626eb-741f-4171-9050-e24e6c0086d9", "controlTitle": "EX.DD-03.02 - Third-party business continuity program due diligence", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.DD-03.03", "controlGuid": "bffbcdfe-6657-4d0b-929a-0abd10292683", "controlTitle": "EX.DD-03.03 - Third-party incident response program due diligence", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.DD-04.02", "controlGuid": "5771bd0e-f129-44e2-912f-2a8542b52fe4", "controlTitle": "EX.DD-04.02 - Third-party support systems evaluation", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.CN-01.01", "controlGuid": "1ec09f99-a92a-4cc0-8fc2-b0804d1b1892", "controlTitle": "EX.CN-01.01 - Third-party contracts", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.CN-01.02", "controlGuid": "91603a2a-48b7-40a7-ae34-c26bf7a3d3be", "controlTitle": "EX.CN-01.02 - Third-party management of suppliers", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.CN-01.03", "controlGuid": "6b92b14c-3e36-427a-a3aa-d5a3980daf5e", "controlTitle": "EX.CN-01.03 - Third-party management of foreign operations", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.CN-02.01", "controlGuid": "e27b2e15-fb7b-44b9-bcb0-90746f38e644", "controlTitle": "EX.CN-02.01 - Third-party cybersecurity requirements", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.CN-02.02", "controlGuid": "ec557aa1-629f-456c-a6ea-5505c97d6e20", "controlTitle": "EX.CN-02.02 - Third-party incident and vulnerability notification requirements", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.CN-02.03", "controlGuid": "483731ec-4d65-4b50-8e30-0cec46b58bbb", "controlTitle": "EX.CN-02.03 - Third-party business continuity program requirements", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.CN-02.04", "controlGuid": "c2f1a788-dbd5-459d-a333-92a7a992140f", "controlTitle": "EX.CN-02.04 - Third-party bilateral testing requirements", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.MM-01.01", "controlGuid": "9cd130bd-e2c3-4125-9a5a-989c9ecfbdb0", "controlTitle": "EX.MM-01.01 - Third-party monitoring and management resources", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.MM-01.03", "controlGuid": "5f725649-626f-4f54-b074-190bc143728f", "controlTitle": "EX.MM-01.03 - Third-party business posture monitoring", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.MM-01.04", "controlGuid": "c647b09d-94f5-42af-a404-1f17d0196209", "controlTitle": "EX.MM-01.04 - Third-party contract compliance monitoring", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.MM-01.06", "controlGuid": "f0148bc0-8d60-47cc-a4f8-851247a63d8f", "controlTitle": "EX.MM-01.06 - Third-party foreign operations monitoring", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.MM-02.01", "controlGuid": "c2cc2e21-9211-474d-a9f5-d424bd863984", "controlTitle": "EX.MM-02.01 - Third-party security program monitoring", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.MM-02.03", "controlGuid": "f5ba5035-f97f-4abc-9383-b62827bef1dc", "controlTitle": "EX.MM-02.03 - Third-party security improvement collaboration", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" }, { "profileMappingId": 0, "controlId": 0, "controlIdentifier": "EX.TR-02.01", "controlGuid": "607b0860-0f68-46eb-9ebc-19621c9c5595", "controlTitle": "EX.TR-02.01 - Third-party relationship termination", "catalogId": 0, "catalogGuid": "f506e4c5-074c-4556-90ad-caefd610fa2a", "catalogTitle": "CRI Profile v2.2", "catalogUrl": "https://cyberriskinstitute.org/the-profile/" } ], "exportDate": "2026-04-20T16:57:02Z", "exportVersion": "1.0" }