search

bilkoh / nist-controls

An npm module to access NIST framework controls.
MIT License
1 stars 0 forks source link

CA-7(4) statement missing sub statements #3

Open bilkoh opened 2 years ago

bilkoh commented 2 years ago 
{
  statement:
  "Ensure risk monitoring is an integral part of the continuous monitoring strategy that includes the following:"
}
bilkoh commented 2 years ago

Should read: 

Ensure risk monitoring is an integral part of the continuous monitoring strategy that includes the following:

Effectiveness monitoring;
Compliance monitoring; and
Change monitoring.
bilkoh commented 2 years ago

Same with: IA-4 IA-5 IA-5(1)