Frameworks / NIST SP 800-53 Rev 5 LOW / SI-5 NIST SP 800-53 Rev 5 LOW
SI System and Information Integrity
NIST SP 800-53 Rev 5 LOW SI-5: Security Alerts, Advisories, and Directives Receive alerts/advisories/directives from FedRAMP-defined external organizations (US-CERT, CISA); generate internal; disseminate.
What else in your programme already covers this This control maps to 45 controls across 23 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.
5.24 Information security incident management planning and preparation 5.5 Contact with authorities 5.6 Contact with special interest groups 5.7 Threat intelligence 8.16 Monitoring activities 5.24 Information security incident management planning and preparation 5.5 Contact with authorities 5.6 Contact with special interest groups 5.7 Threat intelligence 8.16 Monitoring activities NIST-CSF-DE.AE-06 Information on adverse events is provided to authorized staff and tools NIST-CSF-DE.AE-07 Cyber threat intelligence and other contextual information are integrated into the analysis NIST-CSF-ID.RA-02 Cyber threat intelligence is received from information sharing forums and sources NIST-CSF-RS.CO-03 Information is shared with designated internal and external stakeholders 10.7.1 Critical security control failure detection (SP) 12.10.5 IRP includes monitoring and response to security control alerts 6.3.1 Security vulnerabilities are identified and managed as follows: • New security vulnerabilities are identified using industry-recognized sources for security vulnerability information, including alerts from international and national computer emergency response teams (CERTs). • Vulnerabilities SOC2-CC2.3 COSO principle 15: Communicates with external parties regarding matters affecting controls SOC2-CC7.1 Detection and monitoring procedures for security events are in place SOC2-CC7.3 Evaluates security events to determine incident status C5-OIS-05 Contact with Relevant Government Agencies and Interest Groups C5-PSS-03 Online Register of Known Vulnerabilities CIS-13.1 Centralize Security Event Alerting CIS-7.1 Establish and Maintain a Vulnerability Management Process CCM-GRC-08 Special Interest Groups CCM-TVM-01 Threat and Vulnerability Management Policy and Procedures Art.21.3 Take account of supplier-specific vulnerabilities and of Union coordinated supply chain risk assessments Art.23.2 Tell affected service recipients about significant cyber threats and the remedies open to them 3.11.1e Threat-Aware Risk Assessment 3.14.6e Use Threat Indicator Information for Detection ANSSI-HYG-35 Anticipate the End of Maintenance of Software and Systems CPS234-P17 Active Maintenance of Capability Against Change SEC01-BP04 Stay up to date with security threats and recommendations ASBv3-IR-2 Preparation - setup incident notification 161R1-SI-5 Security Alerts, Advisories, and Directives 03.14.03 Security Alerts, Advisories, and Directives CE-SU.3 Critical and High Updates within 14 Days Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected .
Other controls in SI System and Information Integrity Query this from an agent The graph holds this control, the 45 it maps to, and the evidence behind each claim, over MCP and REST.