NIST SP 800-181 NICE-OG-WRL-003: Cybersecurity Workforce Management

What else in your programme already covers this

This control maps to 29 controls across 15 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

NIST Cybersecurity Framework 2.0 · 4 controls

NIST-CSF-GV.RR-02 Roles, responsibilities, and authorities related to cybersecurity risk management are established, communicated, understood, and enforced
NIST-CSF-GV.RR-03 Adequate resources are allocated commensurate with the cybersecurity risk strategy, roles, responsibilities, and policies
NIST-CSF-GV.RR-04 Cybersecurity is included in human resources practices
NIST-CSF-PR.AT-02 Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks with cybersecurity risks in mind

CIS Controls v8 · 3 controls

CIS-14.9 Conduct Role-Specific Security Awareness and Skills Training
CIS-17.1 Designate Personnel to Manage Incident Handling
CIS-17.5 Assign Key Roles and Responsibilities

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 3 controls

CCM-GRC-06 Governance Responsibility Model
CCM-HRS-09 Personnel Roles and Responsibilities
CCM-HRS-12 Personal and Sensitive Data Awareness and Training

NIST SP 800-53 Rev 5 · 3 controls

NIST800-AT-3 AT-3 Role-based Training
NIST800-PM-13 PM-13 Security and Privacy Workforce
NIST800-PS-9 PS-9 Position Descriptions

FedRAMP High · 2 controls

AT-3 Role-Based Training
PS-9 Position Descriptions (PS-9)

FedRAMP Moderate · 2 controls

AT-3 Role-Based Training
PS-9 Position Descriptions (PS-9)

ISO 27001:2022 · 2 controls

5.2 Information security roles and responsibilities
6.3 Information security awareness, education and training

ISO 27002:2022 · 2 controls

5.2 Information security roles and responsibilities
6.3 Information security awareness, education and training

SOC 2 · 2 controls

SOC2-CC1.3 CC1.3 Structures, reporting lines, authorities and responsibilities (COSO principle 3)
SOC2-CC1.4 CC1.4 Attracting, developing and retaining competent people (COSO principle 4)

Azure Security Benchmark · 1 control

GS-1 Align organization roles, responsibilities and accountabilities

CMMC 2.0 · 1 control

AT.L2-3.2.2 Role-Based Training

HIPAA Security Rule · 1 control

164.308(a)(5)(i) Security Awareness and Training (Standard)

NIST SP 800-171 Rev 3 · 1 control

03.02.02 Role-Based Training

NIST SP 800-66 Rev 2 · 1 control

164.308(a)(5)(i) Security Awareness and Training (Standard)

PCI DSS 4.0 · 1 control

12.1.3 12.1.3 Security roles defined and acknowledged by all personnel

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.