PR.AA Identity Management, Authentication, and Access Control

control

framework

The control catalogue this belongs to.

nist_csf_2_0NIST Cybersecurity Framework 2.0

maps to

Cross-framework control mappings.

mapped from (36)

AC-1nist_800_53_r5
AC-10nist_800_53_r5
AC-12nist_800_53_r5
AC-14nist_800_53_r5
AC-16nist_800_53_r5
AC-17nist_800_53_r5
AC-18nist_800_53_r5
AC-19nist_800_53_r5
AC-2nist_800_53_r5
AC-24nist_800_53_r5
AC-3nist_800_53_r5
AC-5nist_800_53_r5
AC-6nist_800_53_r5
AC-7nist_800_53_r5
IA-1nist_800_53_r5
IA-10nist_800_53_r5
IA-11nist_800_53_r5
IA-12nist_800_53_r5
IA-13nist_800_53_r5
IA-2nist_800_53_r5
IA-3nist_800_53_r5
IA-4nist_800_53_r5
IA-5nist_800_53_r5
IA-6nist_800_53_r5
IA-7nist_800_53_r5
IA-8nist_800_53_r5
IA-9nist_800_53_r5
PE-18nist_800_53_r5
PE-19nist_800_53_r5
PE-2nist_800_53_r5
PE-20nist_800_53_r5
PE-3nist_800_53_r5
PE-4nist_800_53_r5
PE-5nist_800_53_r5
PE-6nist_800_53_r5
PE-8nist_800_53_r5

Cross-framework crosswalk (rel_maps_to_control) — a third-party advisory judgement, not a certified equivalency or compliance mapping.

techniques (349)

ATT&CK techniques this enables or maps to.

showing 0 of 349

ATT&CK techniques mitigated by this control, directly or — for a control like a NIST CSF category, which mitigates nothing directly — via the controls crosswalked to it. Derived, indicative relevance, not a compliance or coverage claim.