ID.IM-02—Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties
>Control Description
This improvement subcategory ensures that improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties. Key activities include: Identify improvements for future incident response activities based on findings from incident response assessments (e; Identify improvements for future business continuity, disaster recovery, and incident response activities based on exercises performed in coordinat...; Involve internal stakeholders (e.
>Cross-Framework Mappings
NIST SP 800-53 r5
via NIST CSF 2.0 Concept CrosswalkAC-01
CompareAT-01
CompareAU-01
CompareCA-01
CompareCA-02
CompareCA-05
CompareCA-07
CompareCA-08
CompareCM-01
CompareCP-01
CompareCP-02
CompareCP-04
CompareIA-01
CompareIR-01
CompareIR-03
CompareIR-04
CompareIR-08
CompareMA-01
CompareMP-01
ComparePE-01
ComparePL-01
ComparePL-02
ComparePM-01
ComparePM-04
ComparePM-31
ComparePS-01
ComparePT-01
CompareRA-01
CompareRA-03
CompareRA-05
CompareRA-07
CompareSA-01
CompareSA-08
CompareSA-11
CompareSC-01
CompareSI-01
CompareSI-02
CompareSI-04
CompareSR-01
CompareSR-05
CompareISO 27001:2022
via NIST OLIR Catalog>Informative References
Official NIST mappings to external frameworks and standards. Source: NIST CSF 2.0
CCMv4.0
BCR-06
BCR-07
BCR-10
SEF-01
SEF-03
SEF-04
SEF-05
STA-14
+2 more
CIS Controls v8.0
17.7
CIS Controls v8.1
17.7
CRI Profile v2.0
ID.IM-02
ID.IM-02.01
ID.IM-02.02
ID.IM-02.03
ID.IM-02.04
ID.IM-02.05
ID.IM-02.06
ID.IM-02.07
+2 more
CSF v1.1
ID.SC-5
PR.IP-10
DE.DP-3
CoP
D2
ISO/IEC 27001:2022
Mandatory Clause: 9.2
Mandatory Clause: 9.3
Mandatory Clause: 10.1
Mandatory Clause: 10.2
Annex A Controls: 5.19
Annex A Controls: 5.35
NICE Framework
DD-WRL-004
DD-WRL-006
DD-WRL-007
OG-WRL-009
OG-WRL-016
PD-WRL-003
PCI DSS
12.10.2
12.10.6
11.4.4
12.8.4
SCF
BCD-05
CPL-03
CPL-03.2
IAO-02
IAO-05
IRO-13
TDA-09
TDA-09.1
+2 more
SP 800-171 Rev 3
03.06.01
03.06.03
03.06.05
03.11.01
03.11.02
03.11.04
03.12.01
03.12.02
+7 more
SP 800-221A
GV.CT-3
SP 800-53 Rev 5.1.1
AC-01
AT-01
AU-01
CA-01
CM-01
CP-01
IA-01
IR-01
+32 more
SP 800-53 Rev 5.2.0
AC-01
AT-01
AU-01
CA-01
CM-01
CP-01
IA-01
IR-01
+32 more
SP-800-37 Rev 2
RMF Prepare Step (Organization & Mission/Business Levels): TASK P-2 Risk Management Strategy
RMF Prepare Step (Organization & Mission/Business Levels): TASK P-3 Risk Assessment—Organization
RMF Prepare Step (Organization & Mission/Business Levels): TASK P-7 Continuous Monitoring Strategy—O
RMF Prepare Step (System Level): TASK P-14 Risk Assessment—System
RMF Assess Step: TASK A-3 Control Assessments
RMF Assess Step: TASK A-4 Assessment Reports
RMF Assess Step: TASK A-5 Remediation Actions
RMF Assess Step: TASK A-6 Plan of Action and Milestones
+1 more
Ask AI
Configure your API key to use AI features.