FFIEC Cybersecurity Assessment Tool (CAT) CAT-IRP-5: External threats

What else in your programme already covers this

This control maps to 19 controls across 14 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

HKMA Cyber Resilience Assessment Framework (C-RAF) · 2 controls

HKMA-CRAF-Domain3-4-Protection-Detection HKMA C-RAF Domain 3 (Protection) + Domain 4 (Detection) - Access, Data, Infrastructure, Application, Monitoring, Testing, Threat Intel
HKMA-CRAF-Domain5-6-Response-Recovery-SitAwareness HKMA C-RAF Domain 5 (Response and Recovery) + Domain 6 (Situational Awareness) - Incident Response, Recovery, Threat Landscape, Information Sharing

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-DE.AE-07 Cyber threat intelligence and other contextual information are integrated into the analysis
NIST-CSF-ID.RA-02 Cyber threat intelligence is received from information sharing forums and sources

BSI IT-Grundschutz · 1 control

BSI-16 Threat intelligence integration

FISMA · 1 control

FISMA-NIST-800-53-RMF-800-171-FIPS Operationalisation via NIST 800-53 + 800-37 RMF + 800-171 + FIPS 199 + FIPS 200

Ghana Cybersecurity Act · 1 control

GhCSA-Implementation-Roadmap Implementation Roadmap - Organizational Roles, Tooling and Metrics

IAEA Nuclear Security Series - Computer Security at Nuclear Facilities (NSS-17-T Rev 1) · 1 control

IAEA-NSS17-Assurance-Regulator-Inspection-Reporting-Improvement IAEA NSS-17 - Assurance Activities + Regulator Interface + Inspection + Reporting + Information Sharing + Continuous Improvement

ISO/IEC 27011:2024 · 1 control

27011-5.4 Threat intelligence for telecom

ISO/IEC 27400:2022 · 1 control

27400-5.1 IoT Security and Privacy Governance

Japan FSA Cybersecurity Guidelines for Financial Institutions · 1 control

JP-FSA-CYB-Security-Monitoring-SOC-Operations-SIEM-EDR-MDR-XDR-24x7-Detection-Alert-Triage Japan FSA Cybersecurity Security Monitoring + SOC 24x7 Operations + SIEM + EDR + MDR + XDR + Detection + Alert Triage + Threat Hunting + Incident Response Integration + Threat Intelligence Integration + UEBA

NATO Cyber Defence Policy and NATO Computer Incident Response Capability (NCIRC) · 1 control

NATO-NCIRC-4 Cyber Threat Intelligence Sharing and Coordinated Vulnerability Disclosure

O-RAN WG11 Security Specification · 1 control

ORANWG11-1 O-RAN Threat Model, Risk Management, and Security Architecture

OWASP DevSecOps Maturity Model (DSOMM) · 1 control

DSOMM-2 Implementation Practices, Secure Coding, and Threat Modelling

Secure by Design: A Guide for Manufacturers (CISA) · 1 control

SBD-DEV-06 Threat Modeling

Space ISAC (Information Sharing and Analysis Center) - Threat Framework · 1 control

TI-3 Indicator of Compromise Sharing

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.