Cybersecurity controls list
Project detail
Looking for a listing of cybersecurity controls that may be mapped to the NIST CSF control set, you likely need to work in cybersecurity to be able to provide this list. For example, NIST ID function has a category PR.AC = Identify Management and Access Control. What I am looking for a list of ‘typical controls’ that one may implement against this category such as 1. Strong/complex passwords, MFA, Role based access, least privilege, restricted access, separation of duties, HR vetting etc. I’d be looking for a number of controls listed again each Category Unique Identifier, the more the better. This is a super simple task if you know your application, network, cloud security controls that can be applied to the NIST CSF. All you need to do is list them against the categories on the attached spreadsheet. Applicaiton cybersecurity controls would be particularly useful.