NIST SP 800-53 Rev 5 MODERATE RA-7: Risk Response

Requires the organisation to respond to findings from security and privacy assessments, monitoring and audits, so identified risk is treated rather than only recorded.

Other controls in RA Risk Assessment

RA-1 Policy and Procedures
RA-2 Security Categorization
RA-3 Risk Assessment
RA-5 Vulnerability Monitoring and Scanning
RA-9 Criticality Analysis. Identify critical system components and functions by performing a criticality analysis for [Assignment: organization-defined systems, system components, or system services] at [Assignment: organization-defined decision points in the system development life cycle]

Query this from an agent

The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.

MCP endpoint All NIST SP 800-53 Rev 5 MODERATE controls