NIST SP 800-53A Rev. 5 53A-3.4: Analyze Assessment Report Results

What else in your programme already covers this

This control maps to 19 controls across 13 other frameworks. If you already hold one of them, the evidence you collected for it is the starting point here rather than new work.

FedRAMP High · 2 controls

CA-5 Plan of Action and Milestones
CA-7(4) Continuous Monitoring | Risk Monitoring. Ensure risk monitoring is an integral part of the continuous monitoring strategy that includes the following: (a) Effectiveness monitoring; (b) Compliance monitoring; and (c) Change monitoring

FedRAMP Moderate · 2 controls

CA-5 Plan of Action and Milestones
CA-7(4) Continuous Monitoring | Risk Monitoring. Ensure risk monitoring is an integral part of the continuous monitoring strategy that includes the following: (a) Effectiveness monitoring; (b) Compliance monitoring; and (c) Change monitoring

NIST Cybersecurity Framework 2.0 · 2 controls

NIST-CSF-ID.IM-01 Improvements are identified from evaluations
NIST-CSF-ID.IM-02 Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties

NIST SP 800-53 Rev 5 LOW · 2 controls

CA-5 Plan of Action and Milestones
CA-7(4) Continuous Monitoring | Risk Monitoring. Ensure risk monitoring is an integral part of the continuous monitoring strategy that includes the following: (a) Effectiveness monitoring; (b) Compliance monitoring; and (c) Change monitoring

NIST SP 800-53 Rev 5 MODERATE · 2 controls

CA-5 Plan of Action and Milestones
CA-7(4) Continuous Monitoring | Risk Monitoring. Ensure risk monitoring is an integral part of the continuous monitoring strategy that includes the following: (a) Effectiveness monitoring; (b) Compliance monitoring; and (c) Change monitoring

NIST SP 800-53 Revision 5.1 HIGH · 2 controls

CA-5 Plan of Action and Milestones
CA-7(4) Continuous Monitoring | Risk Monitoring. Ensure risk monitoring is an integral part of the continuous monitoring strategy that includes the following: (a) Effectiveness monitoring; (b) Compliance monitoring; and (c) Change monitoring

CIS Controls v8 · 1 control

CIS-18.3 Remediate Penetration Test Findings

CMMC 2.0 · 1 control

CA.L2-3.12.2 Plan of Action

Cloud Security Alliance Cloud Controls Matrix (CCM) v4.0.1 · 1 control

CCM-A&A-06 Remediation

NIST SP 800-171 Rev 3 · 1 control

03.12.02 Plan of Action and Milestones

NIST SP 800-53 Rev 5 · 1 control

NIST800-CA-5 Plan of action and milestones

PCI DSS 4.0 · 1 control

11.4.4 Pen test findings remediated

SOC 2 · 1 control

SOC2-CC4.2 COSO principle 17: Evaluates and communicates deficiencies in a timely manner

Every mapping shown was judged rather than inferred from wording similarity, and the ones that failed review are published too. See the coverage reports and what was rejected.