NIST SP 800-150 TIS-9: Indicator and Observable Management

Capture, validate, and manage indicators of compromise and observables across their lifecycle, including expiration, confidence, and source attribution.

Maintained by Gerard BlokdykVerified against the published standard 31 May 2026Control text last updated 21 May 2026

Other controls in Information Acquisition

TIS-7 Threat Information Sources and Feeds
TIS-8 Threat Information Production and Curation

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-150 controls