MITRE D3FEND MITRE-D3FEND-Model-Tactic-System-Inventory-Network-Mapping-Identity-Discovery-Asset-Identification: MITRE D3FEND Model Tactic + System Inventory + Network Mapping + Identity Discovery + Asset Identification

What else in your programme already covers this

This control maps to 24 controls across 17 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

21 CFR Part 211 - Current Good Manufacturing Practice · 3 controls

CFR211-G-122 Section 211.122 - Materials Examination and Usage Criteria
CFR211-G-125 Section 211.125 - Labeling Issuance
CFR211-G-130 Section 211.130 - Packaging and Labeling Operations

CISA Cross-Sector Cybersecurity Performance Goals (CPG) 2.0 · 2 controls

CPG-2.A Asset Inventory
CPG-2.B Prohibit Connection of Unauthorized Devices

ISO/IEC 27010:2015 · 2 controls

27010-8.1 Membership Onboarding
27010-8.2 Membership Termination

MITRE ATT&CK · 2 controls

MITRE-ATTACK-Tactics-14-Enterprise-Kill-Chain-Reconnaissance-Initial-Access-Discovery-Lateral-Movement-Impact MITRE ATT&CK 14 Enterprise Tactics + Reconnaissance + Initial Access + Discovery + Lateral Movement + Impact
MITRE-ATTACK-Techniques-Sub-Techniques-200-600-T1078-T1059-T1566-T1190-T1486-Procedures-Adversary-Behaviour MITRE ATT&CK Techniques + 200+ + Sub-Techniques + 600+ + T1078 + T1059 + T1566 + T1190 + T1486 + Procedures

API 1164 · 1 control

API1164-02 Risk Management Framework

BSI IT-Grundschutz · 1 control

BSI-15 Security categorization

FDA Quality Management System Regulation (QMSR) · 1 control

QMSR-820.45 Device labelling and packaging controls (§820.45)

FISMA · 1 control

FISMA-NIST-800-53-RMF-800-171-FIPS Operationalisation via NIST 800-53 + 800-37 RMF + 800-171 + FIPS 199 + FIPS 200

Ghana Cybersecurity Act · 1 control

GhCSA-Implementation-Roadmap Implementation Roadmap - Organizational Roles, Tooling and Metrics

IACS Unified Requirements E26/E27 - Cyber Resilience of Ships and On-Board Systems · 1 control

IACS-UR-E26-Identify-AssetInventory-CBS-NetworkArchitecture-Risk IACS UR E26 Identify Goal - Asset Inventory of Computer Based Systems + Network Architecture Documentation + Risk-Assessable Scope

IEC 60601-1 - Medical Electrical Equipment Safety · 1 control

60601-1.7.1 Equipment identification and marking

IEEE 1686 · 1 control

IEEE1686-Scope-IED-Substation-Automation-2022-IEC-NERC-NIST-Coord IEEE 1686 - Scope + Intelligent Electronic Devices (IEDs) + Substation Automation + 2022 Edition + Coordination with IEC 62351 + IEC 62443 + NERC CIP + NIST SP 800-82

IEEE 7000 · 1 control

IEEE7000-EthicalRisk-Identification-Analysis-Treatment-ValidationOutcomes IEEE 7000 Clauses 8 + 8.1 + 8.2 - Ethical Risk Identification + Analysis + Treatment + Validation of Ethical Outcomes + AI Safety + Robustness + Adversarial Protection

ISMAP (Japan) · 1 control

ISMAP-DataProtection-Classification-Encryption-DataResidencyJapan-Backup-SecureDeletion-Cryptography-FIPS ISMAP Data Protection - Data Classification + AES-256 Encryption At Rest + TLS 1.3 In Transit + Data Residency Japan + Backup + Secure Deletion + Cryptography per FIPS 140-3 + CRYPTREC + KMS HSM

Japan AI Guidelines · 1 control

JP-AIG-Risk-Based-AI-System-Categorisation-Tiered-Approach-EU-AI-Act-Aligned-Generative-Foundation-Models Japan AI Guidelines Risk-Based AI System Categorisation + Tiered Approach + EU AI Act Aligned + Generative AI + Foundation Models + High-Risk + Limited-Risk + Minimal-Risk + AISI Capability-Based Thresholds

OWASP ASVS · 1 control

OWASPASVS-8 Data Protection (V8 + V8.3)

UK Defence Standard 05-138 - Cyber Security for Defence Suppliers · 1 control

UKDEFSTD-1 Cyber Defence Cyber Risk Profile (CRP)

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.