[User] What outcome is expected by GV.SC-04?

[Assistant] Suppliers are known and prioritized by criticality


[User] What is GV.SC-05?

[Assistant] Requirements to address cybersecurity risks in supply chains are established, prioritized, and integrated into contracts and other types of agreements with suppliers and other relevant third parties


[User] Explain the requirement of GV.SC-05.

[Assistant] Requirements to address cybersecurity risks in supply chains are established, prioritized, and integrated into contracts and other types of agreements with suppliers and other relevant third parties


[User] What outcome is expected by GV.SC-05?

[Assistant] Requirements to address cybersecurity risks in supply chains are established, prioritized, and integrated into contracts and other types of agreements with suppliers and other relevant third parties


[User] What is GV.SC-06?

[Assistant] Planning and due diligence are performed to reduce risks before entering into formal supplier or other third-party relationships


[User] Explain the requirement of GV.SC-06.

[Assistant] Planning and due diligence are performed to reduce risks before entering into formal supplier or other third-party relationships


[User] What outcome is expected by GV.SC-06?

[Assistant] Planning and due diligence are performed to reduce risks before entering into formal supplier or other third-party relationships


[User] What is GV.SC-07?

[Assistant] The risks posed by a supplier, their products and services, and other third parties are understood, recorded, prioritized, assessed, responded to, and monitored over the course of the relationship


[User] Explain the requirement of GV.SC-07.

[Assistant] The risks posed by a supplier, their products and services, and other third parties are understood, recorded, prioritized, assessed, responded to, and monitored over the course of the relationship


[User] What outcome is expected by GV.SC-07?

[Assistant] The risks posed by a supplier, their products and services, and other third parties are understood, recorded, prioritized, assessed, responded to, and monitored over the course of the relationship


[User] What is GV.SC-08?

[Assistant] Relevant suppliers and other third parties are included in incident planning, response, and recovery activities


[User] Explain the requirement of GV.SC-08.

[Assistant] Relevant suppliers and other third parties are included in incident planning, response, and recovery activities


[User] What outcome is expected by GV.SC-08?

[Assistant] Relevant suppliers and other third parties are included in incident planning, response, and recovery activities


[User] What is GV.SC-09?

[Assistant] Supply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is monitored throughout the technology product and service life cycle


[User] Explain the requirement of GV.SC-09.

[Assistant] Supply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is monitored throughout the technology product and service life cycle


[User] What outcome is expected by GV.SC-09?

[Assistant] Supply chain security practices are integrated into cybersecurity and enterprise risk management programs, and their performance is monitored throughout the technology product and service life cycle


[User] What is GV.SC-10?

[Assistant] Cybersecurity supply chain risk management plans include provisions for activities that occur after the conclusion of a partnership or service agreement


[User] Explain the requirement of GV.SC-10.

[Assistant] Cybersecurity supply chain risk management plans include provisions for activities that occur after the conclusion of a partnership or service agreement


[User] What outcome is expected by GV.SC-10?

[Assistant] Cybersecurity supply chain risk management plans include provisions for activities that occur after the conclusion of a partnership or service agreement


[User] What is ID.AM-01?

[Assistant] Inventories of hardware managed by the organization are maintained


[User] Explain the requirement of ID.AM-01.

[Assistant] Inventories of hardware managed by the organization are maintained


[User] What outcome is expected by ID.AM-01?

[Assistant] Inventories of hardware managed by the organization are maintained


[User] What is ID.AM-02?

[Assistant] Inventories of software, services, and systems managed by the organization are maintained


[User] Explain the requirement of ID.AM-02.

[Assistant] Inventories of software, services, and systems managed by the organization are maintained


[User] What outcome is expected by ID.AM-02?

[Assistant] Inventories of software, services, and systems managed by the organization are maintained


[User] What is ID.AM-03?

[Assistant] Representations of the organization's authorized network communication and internal and external network data flows are maintained


[User] Explain the requirement of ID.AM-03.

[Assistant] Representations of the organization's authorized network communication and internal and external network data flows are maintained


[User] What outcome is expected by ID.AM-03?

[Assistant] Representations of the organization's authorized network communication and internal and external network data flows are maintained


[User] What is ID.AM-04?

[Assistant] Inventories of services provided by suppliers are maintained


[User] Explain the requirement of ID.AM-04.

[Assistant] Inventories of services provided by suppliers are maintained


[User] What outcome is expected by ID.AM-04?

[Assistant] Inventories of services provided by suppliers are maintained


[User] What is ID.AM-05?

[Assistant] Assets are prioritized based on classification, criticality, resources, and impact on the mission


[User] Explain the requirement of ID.AM-05.

[Assistant] Assets are prioritized based on classification, criticality, resources, and impact on the mission


[User] What outcome is expected by ID.AM-05?

[Assistant] Assets are prioritized based on classification, criticality, resources, and impact on the mission


[User] What is ID.AM-07?

[Assistant] Inventories of data and corresponding metadata for designated data types are maintained


[User] Explain the requirement of ID.AM-07.

[Assistant] Inventories of data and corresponding metadata for designated data types are maintained


[User] What outcome is expected by ID.AM-07?

[Assistant] Inventories of data and corresponding metadata for designated data types are maintained


[User] What is ID.AM-08?

[Assistant] Systems, hardware, software, services, and data are managed throughout their life cycles


[User] Explain the requirement of ID.AM-08.

[Assistant] Systems, hardware, software, services, and data are managed throughout their life cycles


[User] What outcome is expected by ID.AM-08?

[Assistant] Systems, hardware, software, services, and data are managed throughout their life cycles


[User] What is ID.RA-01?

[Assistant] Vulnerabilities in assets are identified, validated, and recorded


[User] Explain the requirement of ID.RA-01.

[Assistant] Vulnerabilities in assets are identified, validated, and recorded


[User] What outcome is expected by ID.RA-01?

[Assistant] Vulnerabilities in assets are identified, validated, and recorded


[User] What is ID.RA-02?

[Assistant] Cyber threat intelligence is received from information sharing forums and sources


[User] Explain the requirement of ID.RA-02.

[Assistant] Cyber threat intelligence is received from information sharing forums and sources


[User] What outcome is expected by ID.RA-02?

[Assistant] Cyber threat intelligence is received from information sharing forums and sources


[User] What is ID.RA-03?

[Assistant] Internal and external threats to the organization are identified and recorded


[User] Explain the requirement of ID.RA-03.

[Assistant] Internal and external threats to the organization are identified and recorded


[User] What outcome is expected by ID.RA-03?

[Assistant] Internal and external threats to the organization are identified and recorded


[User] What is ID.RA-04?

[Assistant] Potential impacts and likelihoods of threats exploiting vulnerabilities are identified and recorded


[User] Explain the requirement of ID.RA-04.

[Assistant] Potential impacts and likelihoods of threats exploiting vulnerabilities are identified and recorded


[User] What outcome is expected by ID.RA-04?

[Assistant] Potential impacts and likelihoods of threats exploiting vulnerabilities are identified and recorded


[User] What is ID.RA-05?

[Assistant] Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization


[User] Explain the requirement of ID.RA-05.

[Assistant] Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization


[User] What outcome is expected by ID.RA-05?

[Assistant] Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization


[User] What is ID.RA-06?

[Assistant] Risk responses are chosen, prioritized, planned, tracked, and communicated


[User] Explain the requirement of ID.RA-06.

[Assistant] Risk responses are chosen, prioritized, planned, tracked, and communicated


[User] What outcome is expected by ID.RA-06?

[Assistant] Risk responses are chosen, prioritized, planned, tracked, and communicated


[User] What is ID.RA-07?

[Assistant] Changes and exceptions are managed, assessed for risk impact, recorded, and tracked


[User] Explain the requirement of ID.RA-07.

[Assistant] Changes and exceptions are managed, assessed for risk impact, recorded, and tracked


[User] What outcome is expected by ID.RA-07?

[Assistant] Changes and exceptions are managed, assessed for risk impact, recorded, and tracked


[User] What is ID.RA-08?

[Assistant] Processes for receiving, analyzing, and responding to vulnerability disclosures are established


[User] Explain the requirement of ID.RA-08.

[Assistant] Processes for receiving, analyzing, and responding to vulnerability disclosures are established


[User] What outcome is expected by ID.RA-08?

[Assistant] Processes for receiving, analyzing, and responding to vulnerability disclosures are established


[User] What is ID.RA-09?

[Assistant] The authenticity and integrity of hardware and software are assessed prior to acquisition and use


[User] Explain the requirement of ID.RA-09.

[Assistant] The authenticity and integrity of hardware and software are assessed prior to acquisition and use


[User] What outcome is expected by ID.RA-09?

[Assistant] The authenticity and integrity of hardware and software are assessed prior to acquisition and use


[User] What is ID.RA-10?

[Assistant] Critical suppliers are assessed prior to acquisition


[User] Explain the requirement of ID.RA-10.

[Assistant] Critical suppliers are assessed prior to acquisition


[User] What outcome is expected by ID.RA-10?

[Assistant] Critical suppliers are assessed prior to acquisition


[User] What is ID.IM-01?

[Assistant] Improvements are identified from evaluations


[User] Explain the requirement of ID.IM-01.

[Assistant] Improvements are identified from evaluations


[User] What outcome is expected by ID.IM-01?

[Assistant] Improvements are identified from evaluations


[User] What is ID.IM-02?

[Assistant] Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties


[User] Explain the requirement of ID.IM-02.

[Assistant] Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties


[User] What outcome is expected by ID.IM-02?

[Assistant] Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties


[User] What is ID.IM-03?

[Assistant] Improvements are identified from execution of operational processes, procedures, and activities


[User] Explain the requirement of ID.IM-03.

[Assistant] Improvements are identified from execution of operational processes, procedures, and activities


[User] What outcome is expected by ID.IM-03?

[Assistant] Improvements are identified from execution of operational processes, procedures, and activities


[User] What is ID.IM-04?

[Assistant] Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved


[User] Explain the requirement of ID.IM-04.

[Assistant] Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved


[User] What outcome is expected by ID.IM-04?

[Assistant] Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved


[User] What is PR.AA-01?

[Assistant] Identities and credentials for authorized users, services, and hardware are managed by the organization


[User] Explain the requirement of PR.AA-01.

[Assistant] Identities and credentials for authorized users, services, and hardware are managed by the organization


[User] What outcome is expected by PR.AA-01?

[Assistant] Identities and credentials for authorized users, services, and hardware are managed by the organization


[User] What is PR.AA-02?

[Assistant] Identities are proofed and bound to credentials based on the context of interactions


[User] Explain the requirement of PR.AA-02.

[Assistant] Identities are proofed and bound to credentials based on the context of interactions


[User] What outcome is expected by PR.AA-02?

[Assistant] Identities are proofed and bound to credentials based on the context of interactions


[User] What is PR.AA-03?

[Assistant] Users, services, and hardware are authenticated


[User] Explain the requirement of PR.AA-03.

[Assistant] Users, services, and hardware are authenticated


[User] What outcome is expected by PR.AA-03?

[Assistant] Users, services, and hardware are authenticated


[User] What is PR.AA-04?

[Assistant] Identity assertions are protected, conveyed, and verified


[User] Explain the requirement of PR.AA-04.

[Assistant] Identity assertions are protected, conveyed, and verified


[User] What outcome is expected by PR.AA-04?

[Assistant] Identity assertions are protected, conveyed, and verified


[User] What is PR.AA-05?

[Assistant] Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties


[User] Explain the requirement of PR.AA-05.

[Assistant] Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties


[User] What outcome is expected by PR.AA-05?

[Assistant] Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties


[User] What is PR.AA-06?

[Assistant] Physical access to assets is managed, monitored, and enforced commensurate with risk


[User] Explain the requirement of PR.AA-06.

[Assistant] Physical access to assets is managed, monitored, and enforced commensurate with risk


[User] What outcome is expected by PR.AA-06?

[Assistant] Physical access to assets is managed, monitored, and enforced commensurate with risk


[User] What is PR.AT-01?

[Assistant] Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind


[User] Explain the requirement of PR.AT-01.

[Assistant] Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind


[User] What outcome is expected by PR.AT-01?

[Assistant] Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind


[User] What is PR.AT-02?

[Assistant] Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks with cybersecurity risks in mind


[User] Explain the requirement of PR.AT-02.

[Assistant] Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks with cybersecurity risks in mind


[User] What outcome is expected by PR.AT-02?

[Assistant] Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks with cybersecurity risks in mind


[User] What is PR.DS-01?

[Assistant] The confidentiality, integrity, and availability of data-at-rest are protected


[User] Explain the requirement of PR.DS-01.

[Assistant] The confidentiality, integrity, and availability of data-at-rest are protected


[User] What outcome is expected by PR.DS-01?

[Assistant] The confidentiality, integrity, and availability of data-at-rest are protected


[User] What is PR.DS-02?

[Assistant] The confidentiality, integrity, and availability of data-in-transit are protected


[User] Explain the requirement of PR.DS-02.

[Assistant] The confidentiality, integrity, and availability of data-in-transit are protected


[User] What outcome is expected by PR.DS-02?

[Assistant] The confidentiality, integrity, and availability of data-in-transit are protected


[User] What is PR.DS-10?

[Assistant] The confidentiality, integrity, and availability of data-in-use are protected


[User] Explain the requirement of PR.DS-10.

[Assistant] The confidentiality, integrity, and availability of data-in-use are protected


[User] What outcome is expected by PR.DS-10?

[Assistant] The confidentiality, integrity, and availability of data-in-use are protected


[User] What is PR.DS-11?

[Assistant] Backups of data are created, protected, maintained, and tested


[User] Explain the requirement of PR.DS-11.

[Assistant] Backups of data are created, protected, maintained, and tested


[User] What outcome is expected by PR.DS-11?

[Assistant] Backups of data are created, protected, maintained, and tested


[User] What is PR.PS-01?

[Assistant] Configuration management practices are established and applied


[User] Explain the requirement of PR.PS-01.

[Assistant] Configuration management practices are established and applied


[User] What outcome is expected by PR.PS-01?

[Assistant] Configuration management practices are established and applied


[User] What is PR.PS-02?

[Assistant] Software is maintained, replaced, and removed commensurate with risk


[User] Explain the requirement of PR.PS-02.

[Assistant] Software is maintained, replaced, and removed commensurate with risk


[User] What outcome is expected by PR.PS-02?

[Assistant] Software is maintained, replaced, and removed commensurate with risk


[User] What is PR.PS-03?

[Assistant] Hardware is maintained, replaced, and removed commensurate with risk


[User] Explain the requirement of PR.PS-03.

[Assistant] Hardware is maintained, replaced, and removed commensurate with risk


[User] What outcome is expected by PR.PS-03?

[Assistant] Hardware is maintained, replaced, and removed commensurate with risk


[User] What is PR.PS-04?

[Assistant] Log records are generated and made available for continuous monitoring


[User] Explain the requirement of PR.PS-04.

[Assistant] Log records are generated and made available for continuous monitoring


[User] What outcome is expected by PR.PS-04?

[Assistant] Log records are generated and made available for continuous monitoring


[User] What is PR.PS-05?

[Assistant] Installation and execution of unauthorized software are prevented


[User] Explain the requirement of PR.PS-05.

[Assistant] Installation and execution of unauthorized software are prevented


[User] What outcome is expected by PR.PS-05?

[Assistant] Installation and execution of unauthorized software are prevented


[User] What is PR.PS-06?

[Assistant] Secure software development practices are integrated, and their performance is monitored throughout the software development life cycle


[User] Explain the requirement of PR.PS-06.

[Assistant] Secure software development practices are integrated, and their performance is monitored throughout the software development life cycle


[User] What outcome is expected by PR.PS-06?

[Assistant] Secure software development practices are integrated, and their performance is monitored throughout the software development life cycle


[User] What is PR.IR-01?

[Assistant] Networks and environments are protected from unauthorized logical access and usage


[User] Explain the requirement of PR.IR-01.

[Assistant] Networks and environments are protected from unauthorized logical access and usage


[User] What outcome is expected by PR.IR-01?

[Assistant] Networks and environments are protected from unauthorized logical access and usage


[User] What is PR.IR-02?

[Assistant] The organization's technology assets are protected from environmental threats


[User] Explain the requirement of PR.IR-02.

[Assistant] The organization's technology assets are protected from environmental threats


[User] What outcome is expected by PR.IR-02?

[Assistant] The organization's technology assets are protected from environmental threats


[User] What is PR.IR-03?

[Assistant] Mechanisms are implemented to achieve resilience requirements in normal and adverse situations


[User] Explain the requirement of PR.IR-03.

[Assistant] Mechanisms are implemented to achieve resilience requirements in normal and adverse situations


[User] What outcome is expected by PR.IR-03?

[Assistant] Mechanisms are implemented to achieve resilience requirements in normal and adverse situations


[User] What is PR.IR-04?

[Assistant] Adequate resource capacity to ensure availability is maintained


[User] Explain the requirement of PR.IR-04.

[Assistant] Adequate resource capacity to ensure availability is maintained


[User] What outcome is expected by PR.IR-04?

[Assistant] Adequate resource capacity to ensure availability is maintained


[User] What is DE.CM-01?

[Assistant] Networks and network services are monitored to find potentially adverse events


[User] Explain the requirement of DE.CM-01.

[Assistant] Networks and network services are monitored to find potentially adverse events


[User] What outcome is expected by DE.CM-01?

[Assistant] Networks and network services are monitored to find potentially adverse events


[User] What is DE.CM-02?

[Assistant] The physical environment is monitored to find potentially adverse events


[User] Explain the requirement of DE.CM-02.

[Assistant] The physical environment is monitored to find potentially adverse events


[User] What outcome is expected by DE.CM-02?

[Assistant] The physical environment is monitored to find potentially adverse events


[User] What is DE.CM-03?

[Assistant] Personnel activity and technology usage are monitored to find potentially adverse events


[User] Explain the requirement of DE.CM-03.

[Assistant] Personnel activity and technology usage are monitored to find potentially adverse events


[User] What outcome is expected by DE.CM-03?

[Assistant] Personnel activity and technology usage are monitored to find potentially adverse events


[User] What is DE.CM-06?

[Assistant] External service provider activities and services are monitored to find potentially adverse events


[User] Explain the requirement of DE.CM-06.

[Assistant] External service provider activities and services are monitored to find potentially adverse events


[User] What outcome is expected by DE.CM-06?

[Assistant] External service provider activities and services are monitored to find potentially adverse events


[User] What is DE.CM-09?

[Assistant] Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events


[User] Explain the requirement of DE.CM-09.

[Assistant] Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events


[User] What outcome is expected by DE.CM-09?

[Assistant] Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events


[User] What is DE.AE-02?

[Assistant] Potentially adverse events are analyzed to better understand associated activities


[User] Explain the requirement of DE.AE-02.

[Assistant] Potentially adverse events are analyzed to better understand associated activities


[User] What outcome is expected by DE.AE-02?

[Assistant] Potentially adverse events are analyzed to better understand associated activities


[User] What is DE.AE-03?

[Assistant] Information is correlated from multiple sources


[User] Explain the requirement of DE.AE-03.

[Assistant] Information is correlated from multiple sources


[User] What outcome is expected by DE.AE-03?

[Assistant] Information is correlated from multiple sources


[User] What is DE.AE-04?

[Assistant] The estimated impact and scope of adverse events are understood


[User] Explain the requirement of DE.AE-04.

[Assistant] The estimated impact and scope of adverse events are understood


[User] What outcome is expected by DE.AE-04?

[Assistant] The estimated impact and scope of adverse events are understood


[User] What is DE.AE-06?

[Assistant] Information on adverse events is provided to authorized staff and tools


[User] Explain the requirement of DE.AE-06.

[Assistant] Information on adverse events is provided to authorized staff and tools


[User] What outcome is expected by DE.AE-06?

[Assistant] Information on adverse events is provided to authorized staff and tools


[User] What is DE.AE-07?

[Assistant] Cyber threat intelligence and other contextual information are integrated into the analysis


[User] Explain the requirement of DE.AE-07.

[Assistant] Cyber threat intelligence and other contextual information are integrated into the analysis


[User] What outcome is expected by DE.AE-07?

[Assistant] Cyber threat intelligence and other contextual information are integrated into the analysis


[User] What is DE.AE-08?

[Assistant] Incidents are declared when adverse events meet the defined incident criteria


[User] Explain the requirement of DE.AE-08.

[Assistant] Incidents are declared when adverse events meet the defined incident criteria


[User] What outcome is expected by DE.AE-08?

[Assistant] Incidents are declared when adverse events meet the defined incident criteria


[User] What is RS.MA-01?

[Assistant] The incident response plan is executed in coordination with relevant third parties once an incident is declared


[User] Explain the requirement of RS.MA-01.

[Assistant] The incident response plan is executed in coordination with relevant third parties once an incident is declared


[User] What outcome is expected by RS.MA-01?

[Assistant] The incident response plan is executed in coordination with relevant third parties once an incident is declared


[User] What is RS.MA-02?

[Assistant] Incident reports are triaged and validated


[User] Explain the requirement of RS.MA-02.

[Assistant] Incident reports are triaged and validated


[User] What outcome is expected by RS.MA-02?

[Assistant] Incident reports are triaged and validated


[User] What is RS.MA-03?

[Assistant] Incidents are categorized and prioritized


[User] Explain the requirement of RS.MA-03.

[Assistant] Incidents are categorized and prioritized


[User] What outcome is expected by RS.MA-03?

[Assistant] Incidents are categorized and prioritized


[User] What is RS.MA-04?

[Assistant] Incidents are escalated or elevated as needed


[User] Explain the requirement of RS.MA-04.

[Assistant] Incidents are escalated or elevated as needed


[User] What outcome is expected by RS.MA-04?

[Assistant] Incidents are escalated or elevated as needed


[User] What is RS.MA-05?

[Assistant] The criteria for initiating incident recovery are applied


[User] Explain the requirement of RS.MA-05.

[Assistant] The criteria for initiating incident recovery are applied


[User] What outcome is expected by RS.MA-05?

[Assistant] The criteria for initiating incident recovery are applied


[User] What is RS.AN-03?

[Assistant] Analysis is performed to establish what has taken place during an incident and the root cause of the incident


[User] Explain the requirement of RS.AN-03.

[Assistant] Analysis is performed to establish what has taken place during an incident and the root cause of the incident


[User] What outcome is expected by RS.AN-03?

[Assistant] Analysis is performed to establish what has taken place during an incident and the root cause of the incident


[User] What is RS.AN-06?

[Assistant] Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved


[User] Explain the requirement of RS.AN-06.

[Assistant] Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved


[User] What outcome is expected by RS.AN-06?

[Assistant] Actions performed during an investigation are recorded, and the records' integrity and provenance are preserved


[User] What is RS.AN-07?

[Assistant] Incident data and metadata are collected, and their integrity and provenance are preserved


[User] Explain the requirement of RS.AN-07.

[Assistant] Incident data and metadata are collected, and their integrity and provenance are preserved


[User] What outcome is expected by RS.AN-07?

[Assistant] Incident data and metadata are collected, and their integrity and provenance are preserved


[User] What is RS.AN-08?

[Assistant] An incident's magnitude is estimated and validated


[User] Explain the requirement of RS.AN-08.

[Assistant] An incident's magnitude is estimated and validated


[User] What outcome is expected by RS.AN-08?

[Assistant] An incident's magnitude is estimated and validated


[User] What is RS.CO-02?

[Assistant] Internal and external stakeholders are notified of incidents


[User] Explain the requirement of RS.CO-02.

[Assistant] Internal and external stakeholders are notified of incidents


[User] What outcome is expected by RS.CO-02?

[Assistant] Internal and external stakeholders are notified of incidents


[User] What is RS.CO-03?

[Assistant] Information is shared with designated internal and external stakeholders


[User] Explain the requirement of RS.CO-03.

[Assistant] Information is shared with designated internal and external stakeholders


[User] What outcome is expected by RS.CO-03?

[Assistant] Information is shared with designated internal and external stakeholders


[User] What is RS.MI-01?

[Assistant] Incidents are contained


[User] Explain the requirement of RS.MI-01.

[Assistant] Incidents are contained


[User] What outcome is expected by RS.MI-01?

[Assistant] Incidents are contained


[User] What is RS.MI-02?

[Assistant] Incidents are eradicated


[User] Explain the requirement of RS.MI-02.

[Assistant] Incidents are eradicated


[User] What outcome is expected by RS.MI-02?

[Assistant] Incidents are eradicated


[User] What is RC.RP-01?

[Assistant] The recovery portion of the incident response plan is executed once initiated from the incident response process


[User] Explain the requirement of RC.RP-01.

[Assistant] The recovery portion of the incident response plan is executed once initiated from the incident response process


[User] What outcome is expected by RC.RP-01?

[Assistant] The recovery portion of the incident response plan is executed once initiated from the incident response process


[User] What is RC.RP-02?

[Assistant] Recovery actions are selected, scoped, prioritized, and performed


[User] Explain the requirement of RC.RP-02.

[Assistant] Recovery actions are selected, scoped, prioritized, and performed


[User] What outcome is expected by RC.RP-02?

[Assistant] Recovery actions are selected, scoped, prioritized, and performed


[User] What is RC.RP-03?

[Assistant] The integrity of backups and other restoration assets is verified before using them for restoration


[User] Explain the requirement of RC.RP-03.

[Assistant] The integrity of backups and other restoration assets is verified before using them for restoration


[User] What outcome is expected by RC.RP-03?

[Assistant] The integrity of backups and other restoration assets is verified before using them for restoration


[User] What is RC.RP-04?

[Assistant] Critical mission functions and cybersecurity risk management are considered to establish post-incident operational norms


[User] Explain the requirement of RC.RP-04.

[Assistant] Critical mission functions and cybersecurity risk management are considered to establish post-incident operational norms


[User] What outcome is expected by RC.RP-04?

[Assistant] Critical mission functions and cybersecurity risk management are considered to establish post-incident operational norms


[User] What is RC.RP-05?

[Assistant] The integrity of restored assets is verified, systems and services are restored, and normal operating status is confirmed


[User] Explain the requirement of RC.RP-05.

[Assistant] The integrity of restored assets is verified, systems and services are restored, and normal operating status is confirmed


[User] What outcome is expected by RC.RP-05?

[Assistant] The integrity of restored assets is verified, systems and services are restored, and normal operating status is confirmed


[User] What is RC.RP-06?

[Assistant] The end of incident recovery is declared based on criteria, and incident-related documentation is completed


[User] Explain the requirement of RC.RP-06.

[Assistant] The end of incident recovery is declared based on criteria, and incident-related documentation is completed


[User] What outcome is expected by RC.RP-06?

[Assistant] The end of incident recovery is declared based on criteria, and incident-related documentation is completed


[User] What is RC.CO-03?

[Assistant] Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders


[User] Explain the requirement of RC.CO-03.

[Assistant] Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders


[User] What outcome is expected by RC.CO-03?

[Assistant] Recovery activities and progress in restoring operational capabilities are communicated to designated internal and external stakeholders


[User] What is RC.CO-04?

[Assistant] Public updates on incident recovery are shared using approved methods and messaging


[User] Explain the requirement of RC.CO-04.

[Assistant] Public updates on incident recovery are shared using approved methods and messaging


[User] What outcome is expected by RC.CO-04?

[Assistant] Public updates on incident recovery are shared using approved methods and messaging


[User] What is third? (3rd)

[Assistant] 3rd Party Risk


[User] Explain third.

[Assistant] 3rd Party Risk


[User] What is first? (1st)

[Assistant] 1st Party Risk


[User] Explain first.

[Assistant] 1st Party Risk


[User] What is ID.AM-06?

[Assistant] Cybersecurity roles and responsibilities for the entire workforce and third-party stakeholders (e.g., suppliers, customers, partners) are established


[User] Explain the requirement of ID.AM-06.

[Assistant] Cybersecurity roles and responsibilities for the entire workforce and third-party stakeholders (e.g., suppliers, customers, partners) are established


[User] What outcome is expected by ID.AM-06?

[Assistant] Cybersecurity roles and responsibilities for the entire workforce and third-party stakeholders (e.g., suppliers, customers, partners) are established


[User] What is WR-ID.AM-06?

[Assistant] Incorporated into GV.RR-02, GV.SC-02


[User] Explain WR-ID.AM-06.

[Assistant] Incorporated into GV.RR-02, GV.SC-02


[User] What is WR-ID.BE?

[Assistant] Incorporated into GV.OC


[User] Explain WR-ID.BE.

[Assistant] Incorporated into GV.OC


[User] What is ID.BE-01?

[Assistant] The organization’s role in the supply chain is identified and communicated


[User] Explain the requirement of ID.BE-01.

[Assistant] The organization’s role in the supply chain is identified and communicated


[User] What outcome is expected by ID.BE-01?

[Assistant] The organization’s role in the supply chain is identified and communicated


[User] What is WR-ID.BE-01?

[Assistant] Incorporated into GV.OC-05


[User] Explain WR-ID.BE-01.

[Assistant] Incorporated into GV.OC-05


[User] What is ID.BE-02?

[Assistant] The organization’s place in critical infrastructure and its industry sector is identified and communicated


[User] Explain the requirement of ID.BE-02.

[Assistant] The organization’s place in critical infrastructure and its industry sector is identified and communicated


[User] What outcome is expected by ID.BE-02?

[Assistant] The organization’s place in critical infrastructure and its industry sector is identified and communicated


[User] What is WR-ID.BE-02?

[Assistant] Incorporated into GV.OC-01


[User] Explain WR-ID.BE-02.

[Assistant] Incorporated into GV.OC-01


[User] What is ID.BE-03?

[Assistant] Priorities for organizational mission, objectives, and activities are established and communicated


[User] Explain the requirement of ID.BE-03.

[Assistant] Priorities for organizational mission, objectives, and activities are established and communicated


[User] What outcome is expected by ID.BE-03?

[Assistant] Priorities for organizational mission, objectives, and activities are established and communicated


[User] What is WR-ID.BE-03?

[Assistant] Incorporated into GV.OC-01


[User] Explain WR-ID.BE-03.

[Assistant] Incorporated into GV.OC-01


[User] What is ID.BE-04?

[Assistant] Dependencies and critical functions for delivery of critical services are established


[User] Explain the requirement of ID.BE-04.

[Assistant] Dependencies and critical functions for delivery of critical services are established


[User] What outcome is expected by ID.BE-04?

[Assistant] Dependencies and critical functions for delivery of critical services are established


[User] What is WR-ID.BE-04?

[Assistant] Incorporated into GV.OC-04, GV.OC-05


[User] Explain WR-ID.BE-04.

[Assistant] Incorporated into GV.OC-04, GV.OC-05


[User] What is ID.BE-05?

[Assistant] Resilience requirements to support delivery of critical services are established for all operating states (e.g. under duress/attack, during recovery, normal operations)


[User] Explain the requirement of ID.BE-05.

[Assistant] Resilience requirements to support delivery of critical services are established for all operating states (e.g. under duress/attack, during recovery, normal operations)


[User] What outcome is expected by ID.BE-05?

[Assistant] Resilience requirements to support delivery of critical services are established for all operating states (e.g. under duress/attack, during recovery, normal operations)


[User] What is WR-ID.BE-05?

[Assistant] Incorporated into GV.OC-04


[User] Explain WR-ID.BE-05.

[Assistant] Incorporated into GV.OC-04


[User] What is WR-ID.GV?

[Assistant] Incorporated into GV


[User] Explain WR-ID.GV.

[Assistant] Incorporated into GV


[User] What is ID.GV-01?

[Assistant] Organizational cybersecurity policy is established and communicated


[User] Explain the requirement of ID.GV-01.

[Assistant] Organizational cybersecurity policy is established and communicated


[User] What outcome is expected by ID.GV-01?

[Assistant] Organizational cybersecurity policy is established and communicated


[User] What is WR-ID.GV-01?

[Assistant] Incorporated into GV.PO, GV.PO-01, GV.PO-02


[User] Explain WR-ID.GV-01.

[Assistant] Incorporated into GV.PO, GV.PO-01, GV.PO-02


[User] What is ID.GV-02?

[Assistant] Cybersecurity roles and responsibilities are coordinated and aligned with internal roles and external partners


[User] Explain the requirement of ID.GV-02.

[Assistant] Cybersecurity roles and responsibilities are coordinated and aligned with internal roles and external partners


[User] What outcome is expected by ID.GV-02?

[Assistant] Cybersecurity roles and responsibilities are coordinated and aligned with internal roles and external partners


[User] What is WR-ID.GV-02?

[Assistant] Incorporated into GV.OC-02, GV.RR, GV.RR-02


[User] Explain WR-ID.GV-02.

[Assistant] Incorporated into GV.OC-02, GV.RR, GV.RR-02


[User] What is ID.GV-03?

[Assistant] Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed


[User] Explain the requirement of ID.GV-03.

[Assistant] Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed


[User] What outcome is expected by ID.GV-03?

[Assistant] Legal and regulatory requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed


[User] What is WR-ID.GV-03?

[Assistant] Moved to GV.OC-03


[User] Explain WR-ID.GV-03.

[Assistant] Moved to GV.OC-03


[User] What is ID.GV-04?

[Assistant] Governance and risk management processes address cybersecurity risks


[User] Explain the requirement of ID.GV-04.

[Assistant] Governance and risk management processes address cybersecurity risks


[User] What outcome is expected by ID.GV-04?

[Assistant] Governance and risk management processes address cybersecurity risks


[User] What is WR-ID.GV-04?

[Assistant] Moved to GV.RM-04


[User] Explain WR-ID.GV-04.

[Assistant] Moved to GV.RM-04


[User] What is WR-ID.RM?

[Assistant] Incorporated into GV.RM


[User] Explain WR-ID.RM.

[Assistant] Incorporated into GV.RM


[User] What is ID.RM-01?

[Assistant] Risk management processes are established, managed, and agreed to by organizational stakeholders


[User] Explain the requirement of ID.RM-01.

[Assistant] Risk management processes are established, managed, and agreed to by organizational stakeholders


[User] What outcome is expected by ID.RM-01?

[Assistant] Risk management processes are established, managed, and agreed to by organizational stakeholders


[User] What is WR-ID.RM-01?

[Assistant] Incorporated into GV.RM-01, GV.RM-06, GV.RR-03


[User] Explain WR-ID.RM-01.

[Assistant] Incorporated into GV.RM-01, GV.RM-06, GV.RR-03


[User] What is ID.RM-02?

[Assistant] Organizational risk tolerance is determined and clearly expressed


[User] Explain the requirement of ID.RM-02.

[Assistant] Organizational risk tolerance is determined and clearly expressed


[User] What outcome is expected by ID.RM-02?

[Assistant] Organizational risk tolerance is determined and clearly expressed


[User] What is WR-ID.RM-02?

[Assistant] Incorporated into GV.RM-02, GV.RM-04


[User] Explain WR-ID.RM-02.

[Assistant] Incorporated into GV.RM-02, GV.RM-04


[User] What is ID.RM-03?

[Assistant] The organization’s determination of risk tolerance is informed by its role in critical infrastructure and sector specific risk analysis


[User] Explain the requirement of ID.RM-03.

[Assistant] The organization’s determination of risk tolerance is informed by its role in critical infrastructure and sector specific risk analysis


[User] What outcome is expected by ID.RM-03?

[Assistant] The organization’s determination of risk tolerance is informed by its role in critical infrastructure and sector specific risk analysis


[User] What is WR-ID.RM-03?

[Assistant] Moved into GV.RM-02


[User] Explain WR-ID.RM-03.

[Assistant] Moved into GV.RM-02


[User] What is WR-ID.SC?

[Assistant] Incorporated into GV.SC


[User] Explain WR-ID.SC.

[Assistant] Incorporated into GV.SC


[User] What is ID.SC-01?

[Assistant] Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders


[User] Explain the requirement of ID.SC-01.

[Assistant] Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders


[User] What outcome is expected by ID.SC-01?

[Assistant] Cyber supply chain risk management processes are identified, established, assessed, managed, and agreed to by organizational stakeholders


[User] What is WR-ID.SC-01?

[Assistant] Incorporated into GV.RM-05, GV.SC-01, GV.SC-06, GV.SC-09, GV.SC-10


[User] Explain WR-ID.SC-01.

[Assistant] Incorporated into GV.RM-05, GV.SC-01, GV.SC-06, GV.SC-09, GV.SC-10


[User] What is ID.SC-02?

[Assistant] Suppliers and third party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply chain risk assessment process


[User] Explain the requirement of ID.SC-02.

[Assistant] Suppliers and third party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply chain risk assessment process


[User] What outcome is expected by ID.SC-02?

[Assistant] Suppliers and third party partners of information systems, components, and services are identified, prioritized, and assessed using a cyber supply chain risk assessment process


[User] What is WR-ID.SC-02?

[Assistant] Incorporated into GV.OC-02, GV.SC-03, GV.SC-04, GV.SC-07, ID.RA-10


[User] Explain WR-ID.SC-02.

[Assistant] Incorporated into GV.OC-02, GV.SC-03, GV.SC-04, GV.SC-07, ID.RA-10


[User] What is ID.SC-03?

[Assistant] Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s cybersecurity program and Cyber Supply Chain Risk Management Plan.


[User] Explain the requirement of ID.SC-03.

[Assistant] Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s cybersecurity program and Cyber Supply Chain Risk Management Plan.


[User] What outcome is expected by ID.SC-03?

[Assistant] Contracts with suppliers and third-party partners are used to implement appropriate measures designed to meet the objectives of an organization’s cybersecurity program and Cyber Supply Chain Risk Management Plan.


[User] What is WR-ID.SC-03?

[Assistant] Moved to GV.SC-05


[User] Explain WR-ID.SC-03.

[Assistant] Moved to GV.SC-05


[User] What is ID.SC-04?

[Assistant] Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their contractual obligations.


[User] Explain the requirement of ID.SC-04.

[Assistant] Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their contractual obligations.


[User] What outcome is expected by ID.SC-04?

[Assistant] Suppliers and third-party partners are routinely assessed using audits, test results, or other forms of evaluations to confirm they are meeting their contractual obligations.


[User] What is WR-ID.SC-04?

[Assistant] Incorporated into GV.SC-07, ID.RA-10


[User] Explain WR-ID.SC-04.

[Assistant] Incorporated into GV.SC-07, ID.RA-10


[User] What is ID.SC-05?

[Assistant] Response and recovery planning and testing are conducted with suppliers and third-party providers


[User] Explain the requirement of ID.SC-05.

[Assistant] Response and recovery planning and testing are conducted with suppliers and third-party providers


[User] What outcome is expected by ID.SC-05?

[Assistant] Response and recovery planning and testing are conducted with suppliers and third-party providers


[User] What is WR-ID.SC-05?

[Assistant] Incorporated into GV.SC-08, ID.IM-02


[User] Explain WR-ID.SC-05.

[Assistant] Incorporated into GV.SC-08, ID.IM-02


[User] What is WR-PR.AC?

[Assistant] Moved to PR.AA


[User] Explain WR-PR.AC.

[Assistant] Moved to PR.AA


[User] What is PR.AC-01?

[Assistant] Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processes


[User] Explain the requirement of PR.AC-01.

[Assistant] Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processes


[User] What outcome is expected by PR.AC-01?

[Assistant] Identities and credentials are issued, managed, verified, revoked, and audited for authorized devices, users and processes


[User] What is WR-PR.AC-01?

[Assistant] Incorporated into PR.AA-01, PR.AA-05


[User] Explain WR-PR.AC-01.

[Assistant] Incorporated into PR.AA-01, PR.AA-05


[User] What is PR.AC-02?

[Assistant] Physical access to assets is managed and protected


[User] Explain the requirement of PR.AC-02.

[Assistant] Physical access to assets is managed and protected


[User] What outcome is expected by PR.AC-02?

[Assistant] Physical access to assets is managed and protected


[User] What is WR-PR.AC-02?

[Assistant] Moved to PR.AA-06


[User] Explain WR-PR.AC-02.

[Assistant] Moved to PR.AA-06


[User] What is PR.AC-03?

[Assistant] Remote access is managed


[User] Explain the requirement of PR.AC-03.

[Assistant] Remote access is managed


[User] What outcome is expected by PR.AC-03?

[Assistant] Remote access is managed


[User] What is WR-PR.AC-03?

[Assistant] Incorporated into PR.AA-03, PR.AA-05, PR.IR-01


[User] Explain WR-PR.AC-03.

[Assistant] Incorporated into PR.AA-03, PR.AA-05, PR.IR-01


[User] What is PR.AC-04?

[Assistant] Access permissions and authorizations are managed, incorporating the principles of least privilege and separation of duties


[User] Explain the requirement of PR.AC-04.

[Assistant] Access permissions and authorizations are managed, incorporating the principles of least privilege and separation of duties


[User] What outcome is expected by PR.AC-04?

[Assistant] Access permissions and authorizations are managed, incorporating the principles of least privilege and separation of duties


[User] What is WR-PR.AC-04?

[Assistant] Moved to PR.AA-05


[User] Explain WR-PR.AC-04.

[Assistant] Moved to PR.AA-05


[User] What is PR.AC-05?

[Assistant] Network integrity is protected (e.g., network segregation, network segmentation)


[User] Explain the requirement of PR.AC-05.

[Assistant] Network integrity is protected (e.g., network segregation, network segmentation)


[User] What outcome is expected by PR.AC-05?

[Assistant] Network integrity is protected (e.g., network segregation, network segmentation)


[User] What is WR-PR.AC-05?

[Assistant] Incorporated into PR.IR-01


[User] Explain WR-PR.AC-05.

[Assistant] Incorporated into PR.IR-01


[User] What is PR.AC-06?

[Assistant] Identities are proofed and bound to credentials and asserted in interactions


[User] Explain the requirement of PR.AC-06.

[Assistant] Identities are proofed and bound to credentials and asserted in interactions


[User] What outcome is expected by PR.AC-06?

[Assistant] Identities are proofed and bound to credentials and asserted in interactions


[User] What is WR-PR.AC-06?

[Assistant] Moved to PR.AA-02


[User] Explain WR-PR.AC-06.

[Assistant] Moved to PR.AA-02


[User] What is PR.AC-07?

[Assistant] Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals’ security and privacy risks and other organizational risks)


[User] Explain the requirement of PR.AC-07.

[Assistant] Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals’ security and privacy risks and other organizational risks)


[User] What outcome is expected by PR.AC-07?

[Assistant] Users, devices, and other assets are authenticated (e.g., single-factor, multi-factor) commensurate with the risk of the transaction (e.g., individuals’ security and privacy risks and other organizational risks)


[User] What is WR-PR.AC-07?

[Assistant] Moved to PR.AA-03


[User] Explain WR-PR.AC-07.

[Assistant] Moved to PR.AA-03


[User] What is PR.AT-03?

[Assistant] Third-party stakeholders (e.g., suppliers, customers, partners) understand their roles and responsibilities


[User] Explain the requirement of PR.AT-03.

[Assistant] Third-party stakeholders (e.g., suppliers, customers, partners) understand their roles and responsibilities


[User] What outcome is expected by PR.AT-03?

[Assistant] Third-party stakeholders (e.g., suppliers, customers, partners) understand their roles and responsibilities


[User] What is WR-PR.AT-03?

[Assistant] Incorporated into PR.AT-01, PR.AT-02


[User] Explain WR-PR.AT-03.

[Assistant] Incorporated into PR.AT-01, PR.AT-02


[User] What is PR.AT-04?

[Assistant] Senior executives understand their roles and responsibilities


[User] Explain the requirement of PR.AT-04.

[Assistant] Senior executives understand their roles and responsibilities


[User] What outcome is expected by PR.AT-04?

[Assistant] Senior executives understand their roles and responsibilities


[User] What is WR-PR.AT-04?

[Assistant] Incorporated into PR.AT-02


[User] Explain WR-PR.AT-04.

[Assistant] Incorporated into PR.AT-02


[User] What is PR.AT-05?

[Assistant] Physical and cybersecurity personnel understand their roles and responsibilities


[User] Explain the requirement of PR.AT-05.

[Assistant] Physical and cybersecurity personnel understand their roles and responsibilities


[User] What outcome is expected by PR.AT-05?

[Assistant] Physical and cybersecurity personnel understand their roles and responsibilities


[User] What is WR-PR.AT-05?

[Assistant] Incorporated into PR.AT-02


[User] Explain WR-PR.AT-05.

[Assistant] Incorporated into PR.AT-02


[User] What is PR.DS-03?

[Assistant] Assets are formally managed throughout removal, transfers, and disposition


[User] Explain the requirement of PR.DS-03.

[Assistant] Assets are formally managed throughout removal, transfers, and disposition


[User] What outcome is expected by PR.DS-03?

[Assistant] Assets are formally managed throughout removal, transfers, and disposition


[User] What is WR-PR.DS-03?

[Assistant] Incorporated into ID.AM-08, PR.PS-03


[User] Explain WR-PR.DS-03.

[Assistant] Incorporated into ID.AM-08, PR.PS-03


[User] What is PR.DS-04?

[Assistant] Adequate capacity to ensure availability is maintained


[User] Explain the requirement of PR.DS-04.

[Assistant] Adequate capacity to ensure availability is maintained


[User] What outcome is expected by PR.DS-04?

[Assistant] Adequate capacity to ensure availability is maintained


[User] What is WR-PR.DS-04?

[Assistant] Moved to PR.IR-04


[User] Explain WR-PR.DS-04.

[Assistant] Moved to PR.IR-04


[User] What is PR.DS-05?

[Assistant] Protections against data leaks are implemented


[User] Explain the requirement of PR.DS-05.

[Assistant] Protections against data leaks are implemented


[User] What outcome is expected by PR.DS-05?

[Assistant] Protections against data leaks are implemented


[User] What is WR-PR.DS-05?

[Assistant] Incorporated into PR.DS-01, PR.DS-02, PR.DS-10


[User] Explain WR-PR.DS-05.

[Assistant] Incorporated into PR.DS-01, PR.DS-02, PR.DS-10


[User] What is PR.DS-06?

[Assistant] Integrity checking mechanisms are used to verify software, firmware, and information integrity


[User] Explain the requirement of PR.DS-06.

[Assistant] Integrity checking mechanisms are used to verify software, firmware, and information integrity


[User] What outcome is expected by PR.DS-06?

[Assistant] Integrity checking mechanisms are used to verify software, firmware, and information integrity


[User] What is WR-PR.DS-06?

[Assistant] Incorporated into PR.DS-01, DE.CM-09


[User] Explain WR-PR.DS-06.

[Assistant] Incorporated into PR.DS-01, DE.CM-09


[User] What is PR.DS-07?

[Assistant] The development and testing environment(s) are separate from the production environment


[User] Explain the requirement of PR.DS-07.

[Assistant] The development and testing environment(s) are separate from the production environment


[User] What outcome is expected by PR.DS-07?

[Assistant] The development and testing environment(s) are separate from the production environment


[User] What is WR-PR.DS-07?

[Assistant] Incorporated into PR.IR-01


[User] Explain WR-PR.DS-07.

[Assistant] Incorporated into PR.IR-01


[User] What is PR.DS-08?

[Assistant] Integrity checking mechanisms are used to verify hardware integrity


[User] Explain the requirement of PR.DS-08.

[Assistant] Integrity checking mechanisms are used to verify hardware integrity


[User] What outcome is expected by PR.DS-08?

[Assistant] Integrity checking mechanisms are used to verify hardware integrity


[User] What is WR-PR.DS-08?

[Assistant] Incorporated into ID.RA-09, DE.CM-09


[User] Explain WR-PR.DS-08.

[Assistant] Incorporated into ID.RA-09, DE.CM-09


[User] What is WR-PR.IP?

[Assistant] Incorporated into other Categories and Functions


[User] Explain WR-PR.IP.

[Assistant] Incorporated into other Categories and Functions


[User] What is PR.IP-01?

[Assistant] A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality)


[User] Explain the requirement of PR.IP-01.

[Assistant] A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality)


[User] What outcome is expected by PR.IP-01?

[Assistant] A baseline configuration of information technology/industrial control systems is created and maintained incorporating security principles (e.g. concept of least functionality)


[User] What is WR-PR.IP-01?

[Assistant] Incorporated into PR.PS-01


[User] Explain WR-PR.IP-01.

[Assistant] Incorporated into PR.PS-01


[User] What is PR.IP-02?

[Assistant] A System Development Life Cycle to manage systems is implemented


[User] Explain the requirement of PR.IP-02.

[Assistant] A System Development Life Cycle to manage systems is implemented


[User] What outcome is expected by PR.IP-02?

[Assistant] A System Development Life Cycle to manage systems is implemented


[User] What is WR-PR.IP-02?

[Assistant] Incorporated into ID.AM-08, PR.PS-06


[User] Explain WR-PR.IP-02.

[Assistant] Incorporated into ID.AM-08, PR.PS-06


[User] What is PR.IP-03?

[Assistant] Configuration change control processes are in place


[User] Explain the requirement of PR.IP-03.

[Assistant] Configuration change control processes are in place


[User] What outcome is expected by PR.IP-03?

[Assistant] Configuration change control processes are in place


[User] What is WR-PR.IP-03?

[Assistant] Incorporated into PR.PS-01, ID.RA-07


[User] Explain WR-PR.IP-03.

[Assistant] Incorporated into PR.PS-01, ID.RA-07


[User] What is PR.IP-04?

[Assistant] Backups of information are conducted, maintained, and tested


[User] Explain the requirement of PR.IP-04.

[Assistant] Backups of information are conducted, maintained, and tested


[User] What outcome is expected by PR.IP-04?

[Assistant] Backups of information are conducted, maintained, and tested


[User] What is WR-PR.IP-04?

[Assistant] Moved to PR.DS-11


[User] Explain WR-PR.IP-04.

[Assistant] Moved to PR.DS-11


[User] What is PR.IP-05?

[Assistant] Policy and regulations regarding the physical operating environment for organizational assets are met


[User] Explain the requirement of PR.IP-05.

[Assistant] Policy and regulations regarding the physical operating environment for organizational assets are met


[User] What outcome is expected by PR.IP-05?

[Assistant] Policy and regulations regarding the physical operating environment for organizational assets are met


[User] What is WR-PR.IP-05?

[Assistant] Moved to PR.IR-02


[User] Explain WR-PR.IP-05.

[Assistant] Moved to PR.IR-02


[User] What is PR.IP-06?

[Assistant] Data is destroyed according to policy


[User] Explain the requirement of PR.IP-06.

[Assistant] Data is destroyed according to policy


[User] What outcome is expected by PR.IP-06?

[Assistant] Data is destroyed according to policy


[User] What is WR-PR.IP-06?

[Assistant] Incorporated into ID.AM-08


[User] Explain WR-PR.IP-06.

[Assistant] Incorporated into ID.AM-08


[User] What is PR.IP-07?

[Assistant] Protection processes are improved


[User] Explain the requirement of PR.IP-07.

[Assistant] Protection processes are improved


[User] What outcome is expected by PR.IP-07?

[Assistant] Protection processes are improved


[User] What is WR-PR.IP-07?

[Assistant] Incorporated into ID.IM, ID.IM-03


[User] Explain WR-PR.IP-07.

[Assistant] Incorporated into ID.IM, ID.IM-03


[User] What is PR.IP-08?

[Assistant] Effectiveness of protection technologies is shared


[User] Explain the requirement of PR.IP-08.

[Assistant] Effectiveness of protection technologies is shared


[User] What outcome is expected by PR.IP-08?

[Assistant] Effectiveness of protection technologies is shared


[User] What is WR-PR.IP-08?

[Assistant] Moved to ID.IM-03


[User] Explain WR-PR.IP-08.

[Assistant] Moved to ID.IM-03


[User] What is PR.IP-09?

[Assistant] Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed


[User] Explain the requirement of PR.IP-09.

[Assistant] Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed


[User] What outcome is expected by PR.IP-09?

[Assistant] Response plans (Incident Response and Business Continuity) and recovery plans (Incident Recovery and Disaster Recovery) are in place and managed


[User] What is WR-PR.IP-09?

[Assistant] Moved to ID.IM-04


[User] Explain WR-PR.IP-09.

[Assistant] Moved to ID.IM-04


[User] What is PR.IP-10?

[Assistant] Response and recovery plans are tested


[User] Explain the requirement of PR.IP-10.

[Assistant] Response and recovery plans are tested


[User] What outcome is expected by PR.IP-10?

[Assistant] Response and recovery plans are tested


[User] What is WR-PR.IP-10?

[Assistant] Incorporated into ID.IM-02, ID.IM-04


[User] Explain WR-PR.IP-10.

[Assistant] Incorporated into ID.IM-02, ID.IM-04


[User] What is PR.IP-11?

[Assistant] Cybersecurity is included in human resources practices (e.g., deprovisioning, personnel screening)


[User] Explain the requirement of PR.IP-11.

[Assistant] Cybersecurity is included in human resources practices (e.g., deprovisioning, personnel screening)


[User] What outcome is expected by PR.IP-11?

[Assistant] Cybersecurity is included in human resources practices (e.g., deprovisioning, personnel screening)


[User] What is WR-PR.IP-11?

[Assistant] Moved to GV.RR-04


[User] Explain WR-PR.IP-11.

[Assistant] Moved to GV.RR-04


[User] What is PR.IP-12?

[Assistant] A vulnerability management plan is developed and implemented


[User] Explain the requirement of PR.IP-12.

[Assistant] A vulnerability management plan is developed and implemented


[User] What outcome is expected by PR.IP-12?

[Assistant] A vulnerability management plan is developed and implemented


[User] What is WR-PR.IP-12?

[Assistant] Incorporated into ID.RA-01, PR.PS-02


[User] Explain WR-PR.IP-12.

[Assistant] Incorporated into ID.RA-01, PR.PS-02


[User] What is WR-PR.MA?

[Assistant] Incorporated into ID.AM-08


[User] Explain WR-PR.MA.

[Assistant] Incorporated into ID.AM-08


[User] What is PR.MA-01?

[Assistant] Maintenance and repair of organizational assets are performed and logged, with approved and controlled tools


[User] Explain the requirement of PR.MA-01.

[Assistant] Maintenance and repair of organizational assets are performed and logged, with approved and controlled tools


[User] What outcome is expected by PR.MA-01?

[Assistant] Maintenance and repair of organizational assets are performed and logged, with approved and controlled tools


[User] What is WR-PR.MA-01?

[Assistant] Incorporated into ID.AM-08, PR.PS-03


[User] Explain WR-PR.MA-01.

[Assistant] Incorporated into ID.AM-08, PR.PS-03


[User] What is PR.MA-02?

[Assistant] Remote maintenance of organizational assets is approved, logged, and performed in a manner that prevents unauthorized access


[User] Explain the requirement of PR.MA-02.

[Assistant] Remote maintenance of organizational assets is approved, logged, and performed in a manner that prevents unauthorized access


[User] What outcome is expected by PR.MA-02?

[Assistant] Remote maintenance of organizational assets is approved, logged, and performed in a manner that prevents unauthorized access


[User] What is WR-PR.MA-02?

[Assistant] Incorporated into ID.AM-08, PR.PS-02


[User] Explain WR-PR.MA-02.

[Assistant] Incorporated into ID.AM-08, PR.PS-02


[User] What is WR-PR.PT?

[Assistant] Incorporated into other Protect Categories


[User] Explain WR-PR.PT.

[Assistant] Incorporated into other Protect Categories


[User] What is PR.PT-01?

[Assistant] Audit/log records are determined, documented, implemented, and reviewed in accordance with policy


[User] Explain the requirement of PR.PT-01.

[Assistant] Audit/log records are determined, documented, implemented, and reviewed in accordance with policy


[User] What outcome is expected by PR.PT-01?

[Assistant] Audit/log records are determined, documented, implemented, and reviewed in accordance with policy


[User] What is WR-PR.PT-01?

[Assistant] Incorporated into PR.PS-04


[User] Explain WR-PR.PT-01.

[Assistant] Incorporated into PR.PS-04


[User] What is PR.PT-02?

[Assistant] Removable media is protected and its use restricted according to policy


[User] Explain the requirement of PR.PT-02.

[Assistant] Removable media is protected and its use restricted according to policy


[User] What outcome is expected by PR.PT-02?

[Assistant] Removable media is protected and its use restricted according to policy


[User] What is WR-PR.PT-02?

[Assistant] Incorporated into PR.DS-01, PR.PS-01


[User] Explain WR-PR.PT-02.

[Assistant] Incorporated into PR.DS-01, PR.PS-01


[User] What is PR.PT-03?

[Assistant] The principle of least functionality is incorporated by configuring systems to provide only essential capabilities


[User] Explain the requirement of PR.PT-03.

[Assistant] The principle of least functionality is incorporated by configuring systems to provide only essential capabilities


[User] What outcome is expected by PR.PT-03?

[Assistant] The principle of least functionality is incorporated by configuring systems to provide only essential capabilities


[User] What is WR-PR.PT-03?

[Assistant] Incorporated into PR.PS-01


[User] Explain WR-PR.PT-03.

[Assistant] Incorporated into PR.PS-01


[User] What is PR.PT-04?

[Assistant] Communications and control networks are protected


[User] Explain the requirement of PR.PT-04.

[Assistant] Communications and control networks are protected


[User] What outcome is expected by PR.PT-04?

[Assistant] Communications and control networks are protected


[User] What is WR-PR.PT-04?

[Assistant] Incorporated into PR.AA-06, PR.IR-01


[User] Explain WR-PR.PT-04.

[Assistant] Incorporated into PR.AA-06, PR.IR-01


[User] What is PR.PT-05?

[Assistant] Mechanisms (e.g., failsafe, load balancing, hot swap) are implemented to achieve resilience requirements in normal and adverse situations


[User] Explain the requirement of PR.PT-05.

[Assistant] Mechanisms (e.g., failsafe, load balancing, hot swap) are implemented to achieve resilience requirements in normal and adverse situations


[User] What outcome is expected by PR.PT-05?

[Assistant] Mechanisms (e.g., failsafe, load balancing, hot swap) are implemented to achieve resilience requirements in normal and adverse situations


[User] What is WR-PR.PT-05?

[Assistant] Moved to PR.IR-03


[User] Explain WR-PR.PT-05.

[Assistant] Moved to PR.IR-03


[User] What is DE.CM-04?

[Assistant] Malicious code is detected


[User] Explain the requirement of DE.CM-04.

[Assistant] Malicious code is detected


[User] What outcome is expected by DE.CM-04?

[Assistant] Malicious code is detected


[User] What is WR-DE.CM-04?

[Assistant] Incorporated into DE.CM-01, DE.CM-09


[User] Explain WR-DE.CM-04.

[Assistant] Incorporated into DE.CM-01, DE.CM-09


[User] What is DE.CM-05?

[Assistant] Unauthorized mobile code is detected


[User] Explain the requirement of DE.CM-05.

[Assistant] Unauthorized mobile code is detected


[User] What outcome is expected by DE.CM-05?

[Assistant] Unauthorized mobile code is detected


[User] What is WR-DE.CM-05?

[Assistant] Incorporated into DE.CM-01, DE.CM-09


[User] Explain WR-DE.CM-05.

[Assistant] Incorporated into DE.CM-01, DE.CM-09


[User] What is DE.CM-07?

[Assistant] Monitoring for unauthorized personnel, connections, devices, and software is performed


[User] Explain the requirement of DE.CM-07.

[Assistant] Monitoring for unauthorized personnel, connections, devices, and software is performed


[User] What outcome is expected by DE.CM-07?

[Assistant] Monitoring for unauthorized personnel, connections, devices, and software is performed


[User] What is WR-DE.CM-07?

[Assistant] Incorporated into DE.CM-01, DE.CM-03, DE.CM-06, DE.CM-09


[User] Explain WR-DE.CM-07.

[Assistant] Incorporated into DE.CM-01, DE.CM-03, DE.CM-06, DE.CM-09


[User] What is DE.CM-08?

[Assistant] Vulnerability scans are performed


[User] Explain the requirement of DE.CM-08.

[Assistant] Vulnerability scans are performed


[User] What outcome is expected by DE.CM-08?

[Assistant] Vulnerability scans are performed


[User] What is WR-DE.CM-08?

[Assistant] Incorporated into ID.RA-01


[User] Explain WR-DE.CM-08.

[Assistant] Incorporated into ID.RA-01


[User] What is DE.AE-01?

[Assistant] A baseline of network operations and expected data flows for users and systems is established and managed


[User] Explain the requirement of DE.AE-01.

[Assistant] A baseline of network operations and expected data flows for users and systems is established and managed


[User] What outcome is expected by DE.AE-01?

[Assistant] A baseline of network operations and expected data flows for users and systems is established and managed


[User] What is WR-DE.AE-01?

[Assistant] Incorporated into ID.AM-03


[User] Explain WR-DE.AE-01.

[Assistant] Incorporated into ID.AM-03


[User] What is DE.AE-05?

[Assistant] Incident alert thresholds are established


[User] Explain the requirement of DE.AE-05.

[Assistant] Incident alert thresholds are established


[User] What outcome is expected by DE.AE-05?

[Assistant] Incident alert thresholds are established


[User] What is WR-DE.AE-05?

[Assistant] Moved to DE.AE-08


[User] Explain WR-DE.AE-05.

[Assistant] Moved to DE.AE-08


[User] What is WR-DE.DP?

[Assistant] Incorporated into other Categories and Functions


[User] Explain WR-DE.DP.

[Assistant] Incorporated into other Categories and Functions


[User] What is DE.DP-01?

[Assistant] Roles and responsibilities for detection are well defined to ensure accountability


[User] Explain the requirement of DE.DP-01.

[Assistant] Roles and responsibilities for detection are well defined to ensure accountability


[User] What outcome is expected by DE.DP-01?

[Assistant] Roles and responsibilities for detection are well defined to ensure accountability


[User] What is WR-DE.DP-01?

[Assistant] Incorporated into GV.RR-02


[User] Explain WR-DE.DP-01.

[Assistant] Incorporated into GV.RR-02


[User] What is DE.DP-02?

[Assistant] Detection activities comply with all applicable requirements


[User] Explain the requirement of DE.DP-02.

[Assistant] Detection activities comply with all applicable requirements


[User] What outcome is expected by DE.DP-02?

[Assistant] Detection activities comply with all applicable requirements


[User] What is WR-DE.DP-02?

[Assistant] Incorporated into DE.AE


[User] Explain WR-DE.DP-02.

[Assistant] Incorporated into DE.AE


[User] What is DE.DP-03?

[Assistant] Detection processes are tested


[User] Explain the requirement of DE.DP-03.

[Assistant] Detection processes are tested


[User] What outcome is expected by DE.DP-03?

[Assistant] Detection processes are tested


[User] What is WR-DE.DP-03?

[Assistant] Incorporated into ID.IM-02


[User] Explain WR-DE.DP-03.

[Assistant] Incorporated into ID.IM-02


[User] What is DE.DP-04?

[Assistant] Event detection information is communicated


[User] Explain the requirement of DE.DP-04.

[Assistant] Event detection information is communicated


[User] What outcome is expected by DE.DP-04?

[Assistant] Event detection information is communicated


[User] What is WR-DE.DP-04?

[Assistant] Incorporated into DE.AE-06


[User] Explain WR-DE.DP-04.

[Assistant] Incorporated into DE.AE-06


[User] What is DE.DP-05?

[Assistant] Detection processes are continuously improved


[User] Explain the requirement of DE.DP-05.

[Assistant] Detection processes are continuously improved


[User] What outcome is expected by DE.DP-05?

[Assistant] Detection processes are continuously improved


[User] What is WR-DE.DP-05?

[Assistant] Incorporated into ID.IM, ID.IM-03


[User] Explain WR-DE.DP-05.

[Assistant] Incorporated into ID.IM, ID.IM-03


[User] What is WR-RS.RP?

[Assistant] Incorporated into RS.MA


[User] Explain WR-RS.RP.

[Assistant] Incorporated into RS.MA


[User] What is RS.RP-01?

[Assistant] Response plan is executed during or after an incident


[User] Explain the requirement of RS.RP-01.

[Assistant] Response plan is executed during or after an incident


[User] What outcome is expected by RS.RP-01?

[Assistant] Response plan is executed during or after an incident


[User] What is WR-RS.RP-01?

[Assistant] Incorporated into RS.MA-01


[User] Explain WR-RS.RP-01.

[Assistant] Incorporated into RS.MA-01


[User] What is RS.AN-01?

[Assistant] Notifications from detection systems are investigated


[User] Explain the requirement of RS.AN-01.

[Assistant] Notifications from detection systems are investigated


[User] What outcome is expected by RS.AN-01?

[Assistant] Notifications from detection systems are investigated


[User] What is WR-RS.AN-01?

[Assistant] Incorporated into RS.MA-02


[User] Explain WR-RS.AN-01.

[Assistant] Incorporated into RS.MA-02


[User] What is RS.AN-02?

[Assistant] The impact of the incident is understood


[User] Explain the requirement of RS.AN-02.

[Assistant] The impact of the incident is understood


[User] What outcome is expected by RS.AN-02?

[Assistant] The impact of the incident is understood


[User] What is WR-RS.AN-02?

[Assistant] Incorporated into RS.MA-02, RS.MA-03, RS.MA-04


[User] Explain WR-RS.AN-02.

[Assistant] Incorporated into RS.MA-02, RS.MA-03, RS.MA-04


[User] What is RS.AN-04?

[Assistant] Incidents are categorized consistent with response plans


[User] Explain the requirement of RS.AN-04.

[Assistant] Incidents are categorized consistent with response plans


[User] What outcome is expected by RS.AN-04?

[Assistant] Incidents are categorized consistent with response plans


[User] What is WR-RS.AN-04?

[Assistant] Moved to RS.MA-03


[User] Explain WR-RS.AN-04.

[Assistant] Moved to RS.MA-03


[User] What is RS.AN-05?

[Assistant] Processes are established to receive, analyze and respond to vulnerabilities disclosed to the organization from internal and external sources (e.g. internal testing, security bulletins, or security researchers)


[User] Explain the requirement of RS.AN-05.

[Assistant] Processes are established to receive, analyze and respond to vulnerabilities disclosed to the organization from internal and external sources (e.g. internal testing, security bulletins, or security researchers)


[User] What outcome is expected by RS.AN-05?

[Assistant] Processes are established to receive, analyze and respond to vulnerabilities disclosed to the organization from internal and external sources (e.g. internal testing, security bulletins, or security researchers)


[User] What is WR-RS.AN-05?

[Assistant] Moved to ID.RA-08


[User] Explain WR-RS.AN-05.

[Assistant] Moved to ID.RA-08


[User] What is RS.CO-01?

[Assistant] Personnel know their roles and order of operations when a response is needed


[User] Explain the requirement of RS.CO-01.

[Assistant] Personnel know their roles and order of operations when a response is needed


[User] What outcome is expected by RS.CO-01?

[Assistant] Personnel know their roles and order of operations when a response is needed


[User] What is WR-RS.CO-01?

[Assistant] Incorporated into PR.AT-01


[User] Explain WR-RS.CO-01.

[Assistant] Incorporated into PR.AT-01


[User] What is RS.CO-04?

[Assistant] Coordination with stakeholders occurs consistent with response plans


[User] Explain the requirement of RS.CO-04.

[Assistant] Coordination with stakeholders occurs consistent with response plans


[User] What outcome is expected by RS.CO-04?

[Assistant] Coordination with stakeholders occurs consistent with response plans


[User] What is WR-RS.CO-04?

[Assistant] Incorporated into RS.MA-01, RS.MA-04


[User] Explain WR-RS.CO-04.

[Assistant] Incorporated into RS.MA-01, RS.MA-04


[User] What is RS.CO-05?

[Assistant] Voluntary information sharing occurs with external stakeholders to achieve broader cybersecurity situational awareness


[User] Explain the requirement of RS.CO-05.

[Assistant] Voluntary information sharing occurs with external stakeholders to achieve broader cybersecurity situational awareness


[User] What outcome is expected by RS.CO-05?

[Assistant] Voluntary information sharing occurs with external stakeholders to achieve broader cybersecurity situational awareness


[User] What is WR-RS.CO-05?

[Assistant] Incorporated into RS.CO-03


[User] Explain WR-RS.CO-05.

[Assistant] Incorporated into RS.CO-03


[User] What is RS.MI-03?

[Assistant] Newly identified vulnerabilities are mitigated or documented as accepted risks


[User] Explain the requirement of RS.MI-03.

[Assistant] Newly identified vulnerabilities are mitigated or documented as accepted risks


[User] What outcome is expected by RS.MI-03?

[Assistant] Newly identified vulnerabilities are mitigated or documented as accepted risks


[User] What is WR-RS.MI-03?

[Assistant] Incorporated into ID.RA-06


[User] Explain WR-RS.MI-03.

[Assistant] Incorporated into ID.RA-06


[User] What is WR-RS.IM?

[Assistant] Incorporated into ID.IM


[User] Explain WR-RS.IM.

[Assistant] Incorporated into ID.IM


[User] What is RS.IM-01?

[Assistant] Response plans incorporate lessons learned


[User] Explain the requirement of RS.IM-01.

[Assistant] Response plans incorporate lessons learned


[User] What outcome is expected by RS.IM-01?

[Assistant] Response plans incorporate lessons learned


[User] What is WR-RS.IM-01?

[Assistant] Incorporated into ID.IM-03, ID.IM-04


[User] Explain WR-RS.IM-01.

[Assistant] Incorporated into ID.IM-03, ID.IM-04


[User] What is RS.IM-02?

[Assistant] Response strategies are updated


[User] Explain the requirement of RS.IM-02.

[Assistant] Response strategies are updated


[User] What outcome is expected by RS.IM-02?

[Assistant] Response strategies are updated


[User] What is WR-RS.IM-02?

[Assistant] Incorporated into ID.IM-03


[User] Explain WR-RS.IM-02.

[Assistant] Incorporated into ID.IM-03


[User] What is RC.CO-01?

[Assistant] Public relations are managed


[User] Explain the requirement of RC.CO-01.

[Assistant] Public relations are managed


[User] What outcome is expected by RC.CO-01?

[Assistant] Public relations are managed


[User] What is WR-RC.CO-01?

[Assistant] Incorporated into RC.CO-04


[User] Explain WR-RC.CO-01.

[Assistant] Incorporated into RC.CO-04


[User] What is RC.CO-02?

[Assistant] Reputation is repaired after an incident


[User] Explain the requirement of RC.CO-02.

[Assistant] Reputation is repaired after an incident


[User] What outcome is expected by RC.CO-02?

[Assistant] Reputation is repaired after an incident


[User] What is WR-RC.CO-02?

[Assistant] Incorporated into RC.CO-04


[User] Explain WR-RC.CO-02.

[Assistant] Incorporated into RC.CO-04


[User] What is WR-RC.IM?

[Assistant] Incorporated into ID.IM


[User] Explain WR-RC.IM.

[Assistant] Incorporated into ID.IM


[User] What is RC.IM-01?

[Assistant] Recovery plans incorporate lessons learned


[User] Explain the requirement of RC.IM-01.

[Assistant] Recovery plans incorporate lessons learned


[User] What outcome is expected by RC.IM-01?

[Assistant] Recovery plans incorporate lessons learned


[User] What is WR-RC.IM-01?

[Assistant] Incorporated into ID.IM-03, ID.IM-04


[User] Explain WR-RC.IM-01.

[Assistant] Incorporated into ID.IM-03, ID.IM-04


[User] What is RC.IM-02?

[Assistant] Recovery strategies are updated


[User] Explain the requirement of RC.IM-02.

[Assistant] Recovery strategies are updated


[User] What outcome is expected by RC.IM-02?

[Assistant] Recovery strategies are updated


[User] What is WR-RC.IM-02?

[Assistant] Incorporated into ID.IM-03


[User] Explain WR-RC.IM-02.

[Assistant] Incorporated into ID.IM-03