Apply · Mappings
NIST Cybersecurity Framework 2.0
From principle to practice. From practice to recognised controls.
Every virtue against NIST Cybersecurity Framework 2.0. Control identifiers link to the NIST reference; strengths are stated as words.
- 01Virtue
- 02Behaviour
- 03Practice
- 04Control
- 05Evidence
- 06Assessment
| Virtue | Control | Control title | Strength | Why it maps |
|---|---|---|---|---|
| 礼04 / 08Rei | PR.AA-05 | Access permissions incorporate least privilege | direct | Least privilege in access permissions is Rei stated almost word for word. |
| PR.AA-01 | Identities managed for authorised users and services | direct | Managing identities for authorised users and services is the precondition for granting only what duty demands. |