Apply · Mappings
NIST Cybersecurity Framework 2.0
From principle to practice. From practice to recognised controls.
Every virtue against NIST Cybersecurity Framework 2.0. Control identifiers link to the NIST reference; strengths are stated as words.
- 01Virtue
- 02Behaviour
- 03Practice
- 04Control
- 05Evidence
- 06Assessment
| Virtue | Control | Control title | Strength | Why it maps |
|---|---|---|---|---|
| 義01 / 08Gi | PR.DS-01 | Confidentiality, integrity, and availability of data at rest | direct | Integrity protection for data at rest is what lets a system stand behind its own recorded actions. |
| GV.PO-01 | Policy for managing cybersecurity risk | partial | Policy sets the expectation of provable, non-repudiable conduct but does not itself produce the evidence. |