Identifiers and locally-authored audit guidance
All available frameworksTechnical checks run for the selected scope, available connectors and credentials. Results provide evidence for review; missing data is not a pass.
Collector modules: ADCS, ADSEC, ASSETREC, BACKUP, CERTTLS, ENTRA, GPO, LINUX, NETWORK, SERVERS, STORAGE, VMWARE, VULN, WINDOWS.
Technical result still requires scope and assessor review. These module groups identify supporting scope; individual checks still need an explicit mapping.
| Requirement | Collector / test | What it checks or supports |
|---|---|---|
| A.5.9 | ADSEC / AD-COMPUTER-INVENTORY-001 | Supporting inventory evidence for A.5.9 — Inventory and ownership of information and related assets. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.5.9 | ASSETREC / ASSETREC-AD-001 | Supporting inventory evidence for A.5.9 — Inventory and ownership of information and related assets. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.5.9 | WINDOWS / WIN-INVENTORY-COVERAGE-001 | Supporting inventory evidence for A.5.9 — Inventory and ownership of information and related assets. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.2 | ADSEC / AD-PRIV-001 | Supporting access evidence for A.8.2 — Administration of privileged access rights. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.2 | ENTRA / ENTRA-ROLE-001 | Supporting access evidence for A.8.2 — Administration of privileged access rights. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.2 | ENTRA / ENTRA-GUEST-001 | Supporting access evidence for A.8.2 — Administration of privileged access rights. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.5 | ENTRA / ENTRA-MFA-REG-001 | Supporting mfa evidence for A.8.5 — Strong authentication appropriate to risk. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.9 | GPO / GPO-DETAIL-001 | Supporting config evidence for A.8.9 — Secure configuration baselines and change control. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.9 | WINDOWS / WIN-SMB1-001 | Supporting config evidence for A.8.9 — Secure configuration baselines and change control. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.20 | WINDOWS / WIN-FW-001 | Supporting boundary evidence for A.8.20 — Network security architecture and operation. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.8 | WINDOWS / WIN-PATCH-FRESHNESS-001 | Supporting patch evidence for A.8.8 — Identification and remediation of technical vulnerabilities. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.8 | VULN / VULN-IMPORT-001 | Supporting vulnerability evidence for A.8.8 — Identification and remediation of technical vulnerabilities. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.8 | VULN / VULN-HIGH-001 | Supporting vulnerability evidence for A.8.8 — Identification and remediation of technical vulnerabilities. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.8 | VULN / VULN-AGING-001 | Supporting vulnerability evidence for A.8.8 — Identification and remediation of technical vulnerabilities. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.7 | WINDOWS / WIN-AV-001 | Supporting malware evidence for A.8.7 — Prevention, detection and recovery from malware. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.24 | CERTTLS / CERTTLS-POSTURE-001 | Supporting transit evidence for A.8.24 — Use and lifecycle management of cryptography. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.24 | STORAGE / STOR-DATA-IN-FLIGHT-ENCRYPTION-001 | Supporting transit evidence for A.8.24 — Use and lifecycle management of cryptography. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.24 | STORAGE / STOR-AT-REST-ENCRYPTION-001 | Supporting rest evidence for A.8.24 — Use and lifecycle management of cryptography. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.13 | BACKUP / VEEAM-REPO-001 | Supporting backup evidence for A.8.13 — Resilient backup and verified restoration. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.8.17 | VMWARE / VMW-TIME-001 | Supporting time evidence for A.8.17 — Consistent time synchronization for reliable records. Verify asset/scope applicability and review the exact result; this does not establish the full requirement. |
| A.5.16 | ADSEC / AD-PREFLIGHT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ADSEC / AD-PREFLIGHT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.2 | ADSEC / AD-PREFLIGHT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | ADSEC / AD-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ADSEC / AD-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | ADSEC / AD-LIFECYCLE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ADSEC / AD-LIFECYCLE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ADSEC / AD-PRIV-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | ADSEC / AD-DC-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.16 | ADSEC / AD-DC-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | GPO / GPO-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | GPO / GPO-PASSWORD-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | GPO / GPO-PASSWORD-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | WINDOWS / WIN-OS-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | WINDOWS / WIN-OS-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-OS-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | WINDOWS / WIN-FW-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | WINDOWS / WIN-SMB1-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | WINDOWS / WIN-SMB1-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.16 | WINDOWS / WIN-AV-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-RDP-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-RDP-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | BACKUP / VEEAM-JOB-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.30 | BACKUP / VEEAM-JOB-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.23 | ENTRA / ENTRA-CONTEXT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | ENTRA / ENTRA-CONTEXT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ENTRA / ENTRA-ROLE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | VMWARE / VMW-HOST-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | VMWARE / VMW-HOST-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | VMWARE / VMW-HOST-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | VMWARE / VMW-VM-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.12 | STORAGE / STOR-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | STORAGE / STOR-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | STORAGE / STOR-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | STORAGE / STOR-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | WINDOWS / WIN-PATCH-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-PATCH-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | WINDOWS / WIN-PATCH-COHORT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-PATCH-COHORT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | LINUX / LNX-OS-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | LINUX / LNX-OS-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | LINUX / LNX-OS-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | LINUX / LNX-PATCH-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | LINUX / LNX-PATCH-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-VENDOR-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-VENDOR-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-MGMT-TLS-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | NETWORK / NET-MGMT-TLS-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-MGMT-SSH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | NETWORK / NET-MGMT-SSH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | NETWORK / NET-MERAKI-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-MERAKI-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-MERAKI-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-SCOPE-002 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-SCOPE-002 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-DEVICE-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-DEVICE-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-MGMT-PREFLIGHT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-MGMT-PREFLIGHT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | NETWORK / NET-MERAKI-ORG-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-MERAKI-ORG-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-MERAKI-ORG-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.33 | NETWORK / NET-EVIDENCE-COVERAGE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | NETWORK / NET-EVIDENCE-COVERAGE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | NETWORK / NET-OBJ-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | NETWORK / NET-OBJ-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | NETWORK / NET-OBJ-002 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | NETWORK / NET-OBJ-002 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-003 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | NETWORK / NET-OBJ-003 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | NETWORK / NET-OBJ-004 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-004 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | NETWORK / NET-OBJ-004 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.15 | NETWORK / NET-OBJ-005 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | NETWORK / NET-OBJ-005 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.2 | NETWORK / NET-OBJ-005 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | NETWORK / NET-OBJ-006 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | NETWORK / NET-OBJ-006 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | NETWORK / NET-OBJ-006 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-007 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-OBJ-007 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.15 | NETWORK / NET-OBJ-008 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.16 | NETWORK / NET-OBJ-008 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.15 | NETWORK / NET-OBJ-009 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.16 | NETWORK / NET-OBJ-009 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.17 | NETWORK / NET-OBJ-010 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-011 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-OBJ-011 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.16 | NETWORK / NET-OBJ-012 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-012 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-013 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.22 | NETWORK / NET-OBJ-013 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-014 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-OBJ-014 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-015 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-OBJ-015 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.22 | NETWORK / NET-OBJ-015 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-016 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | NETWORK / NET-OBJ-016 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-017 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | NETWORK / NET-OBJ-017 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | NETWORK / NET-OBJ-018 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.30 | NETWORK / NET-OBJ-019 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.14 | NETWORK / NET-OBJ-019 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | NETWORK / NET-OBJ-020 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | NETWORK / NET-OBJ-020 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.7 | NETWORK / NET-OBJ-021 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.16 | NETWORK / NET-OBJ-021 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-021 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.7 | NETWORK / NET-OBJ-022 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-022 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.15 | NETWORK / NET-OBJ-023 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.32 | NETWORK / NET-OBJ-023 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-024 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | NETWORK / NET-OBJ-024 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | NETWORK / NET-OBJ-025 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | NETWORK / NET-OBJ-025 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.14 | NETWORK / NET-OBJ-026 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-026 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.31 | NETWORK / NET-OBJ-027 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | NETWORK / NET-OBJ-027 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | NETWORK / NET-OBJ-028 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | NETWORK / NET-OBJ-028 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.2 | NETWORK / NET-OBJ-028 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.15 | NETWORK / NET-OBJ-029 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | NETWORK / NET-OBJ-029 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.33 | NETWORK / NET-OBJ-030 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | NETWORK / NET-OBJ-030 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.33 | NETWORK / NET-CLI-RAW-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | NETWORK / NET-CLI-RAW-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.15 | NETWORK / NET-CLI-RAW-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | WINDOWS / WIN-INVENTORY-COVERAGE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-INVENTORY-COVERAGE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | WINDOWS / WIN-ROLE-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | WINDOWS / WIN-ROLE-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | WINDOWS / WIN-SERVICE-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-SERVICE-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.16 | WINDOWS / WIN-SERVICE-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.15 | WINDOWS / WIN-LOCAL-ACCOUNT-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | WINDOWS / WIN-LOCAL-ACCOUNT-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | WINDOWS / WIN-LOCAL-ACCOUNT-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.2 | WINDOWS / WIN-LOCAL-ACCOUNT-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | WINDOWS / WIN-SHARE-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.3 | WINDOWS / WIN-SHARE-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | WINDOWS / WIN-SHARE-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | WINDOWS / WIN-STORAGE-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | WINDOWS / WIN-STORAGE-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.10 | WINDOWS / WIN-STORAGE-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | WINDOWS / WIN-NETWORK-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | WINDOWS / WIN-NETWORK-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | WINDOWS / WIN-NETWORK-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | WINDOWS / WIN-REMOTE-AUDIT-ACCESS-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | WINDOWS / WIN-REMOTE-AUDIT-ACCESS-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-REMOTE-AUDIT-ACCESS-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | ADSEC / AD-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | ADSEC / AD-DC-MAINTENANCE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | ADSEC / AD-DC-MAINTENANCE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.14 | ADSEC / AD-DC-MAINTENANCE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | ADSEC / AD-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ADSEC / AD-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | ADSEC / AD-PASSWORD-NOT-REQUIRED-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ADSEC / AD-PASSWORD-NOT-REQUIRED-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | ADSEC / AD-KERBEROS-PREAUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ADSEC / AD-KERBEROS-PREAUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.15 | ADSEC / AD-DELEGATION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ADSEC / AD-DELEGATION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.2 | ADSEC / AD-DELEGATION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ADSEC / AD-DELEGATION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | ADSEC / AD-KERBEROS-DES-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ADSEC / AD-KERBEROS-DES-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | ADSEC / AD-PRIV-PASSWORD-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ADSEC / AD-PRIV-PASSWORD-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.2 | ADSEC / AD-PRIV-PASSWORD-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.15 | ADSEC / AD-MACHINE-ACCOUNT-QUOTA-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ADSEC / AD-MACHINE-ACCOUNT-QUOTA-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | ADSEC / AD-MACHINE-ACCOUNT-QUOTA-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | ADSEC / AD-KRBTGT-AGE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ADSEC / AD-KRBTGT-AGE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | ADSEC / AD-KRBTGT-AGE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | ADSEC / AD-PASSWORD-POLICY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ADSEC / AD-PASSWORD-POLICY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.15 | ADSEC / AD-TRUST-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ADSEC / AD-TRUST-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | ADSEC / AD-TRUST-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | ADSEC / AD-COMPUTER-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | ADSEC / AD-COMPUTER-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.14 | ADSEC / AD-REPLICATION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.16 | ADSEC / AD-REPLICATION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | ADSEC / AD-REPLICATION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | ADSEC / AD-ADVANCED-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ADSEC / AD-ADVANCED-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ADSEC / AD-ADVANCED-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | ADCS / ADCS-PREFLIGHT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ADCS / ADCS-PREFLIGHT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | ADCS / ADCS-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | ADCS / ADCS-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | ADCS / ADCS-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | ADCS / ADCS-TEMPLATE-RISK-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.15 | ADCS / ADCS-TEMPLATE-RISK-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ADCS / ADCS-TEMPLATE-RISK-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ADCS / ADCS-TEMPLATE-RISK-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | ADCS / ADCS-CA-CERT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | ADCS / ADCS-CA-CERT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | ADCS / ADCS-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ADCS / ADCS-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | ASSETREC / ASSETREC-AD-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | ASSETREC / ASSETREC-BACKUP-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | ASSETREC / ASSETREC-BACKUP-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.30 | ASSETREC / ASSETREC-BACKUP-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | ASSETREC / ASSETREC-COVERAGE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | ASSETREC / ASSETREC-COVERAGE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | BACKUP / BACKUP-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.30 | BACKUP / BACKUP-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | BACKUP / VEEAM-PROTECTED-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | BACKUP / VEEAM-PROTECTED-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.30 | BACKUP / VEEAM-PROTECTED-INVENTORY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | BACKUP / VEEAM-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.30 | BACKUP / VEEAM-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | BACKUP / VEEAM-REST-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.30 | BACKUP / VEEAM-REST-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | BACKUP / VEEAM-REST-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | BACKUP / VEEAM-REST-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | BACKUP / VEEAM-REST-JOB-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.30 | BACKUP / VEEAM-REST-JOB-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | BACKUP / VEEAM-REST-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.30 | BACKUP / VEEAM-REST-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | BACKUP / BACKUP-MGMT-ENDPOINT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.30 | BACKUP / BACKUP-MGMT-ENDPOINT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | BACKUP / BACKUP-MGMT-TARGET-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.30 | BACKUP / BACKUP-MGMT-TARGET-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | BACKUP / BACKUP-DEEP-ADAPTER-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.30 | BACKUP / BACKUP-DEEP-ADAPTER-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | CERTTLS / CERTTLS-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | CERTTLS / CERTTLS-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | CERTTLS / CERTTLS-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | CERTTLS / CERTTLS-CONNECT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | CERTTLS / CERTTLS-CONNECT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | CERTTLS / CERTTLS-CONNECT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | CERTTLS / CERTTLS-POSTURE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | CERTTLS / CERTTLS-POSTURE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.15 | ENTRA / ENTRA-GUEST-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | ENTRA / ENTRA-GUEST-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ENTRA / ENTRA-GUEST-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | ENTRA / ENTRA-APP-CREDENTIAL-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ENTRA / ENTRA-APP-CREDENTIAL-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ENTRA / ENTRA-APP-CREDENTIAL-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.15 | ENTRA / ENTRA-CA-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | ENTRA / ENTRA-CA-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ENTRA / ENTRA-CA-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | ENTRA / ENTRA-MFA-REG-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | ENTRA / INTUNE-DEVICE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | ENTRA / INTUNE-DEVICE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | ENTRA / INTUNE-DEVICE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | ENTRA / INTUNE-DEVICE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | ENTRA / INTUNE-COMPLIANCE-POLICY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | ENTRA / INTUNE-COMPLIANCE-POLICY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.7 | ENTRA / DEFENDER-SECURE-SCORE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | ENTRA / DEFENDER-SECURE-SCORE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.16 | ENTRA / DEFENDER-SECURE-SCORE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.23 | ENTRA / ENTRA-GRAPH-DEPENDENCY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | ENTRA / ENTRA-GRAPH-DEPENDENCY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.2 | ENTRA / ENTRA-GRAPH-DEPENDENCY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | ENTRA / ENTRA-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ENTRA / ENTRA-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ENTRA / ENTRA-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | ENTRA / ENTRA-AUTH-002 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | ENTRA / ENTRA-AUTH-002 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ENTRA / ENTRA-AUTH-002 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.23 | ENTRA / ENTRA-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | ENTRA / ENTRA-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.2 | ENTRA / ENTRA-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | GPO / GPO-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | LINUX / LNX-SSH-DEPENDENCY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | LINUX / LNX-SSH-DEPENDENCY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | LINUX / LNX-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | LINUX / LNX-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | LINUX / LNX-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | LINUX / LNX-SSH-KEY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | LINUX / LNX-SSH-KEY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.12 | STORAGE / STOR-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | STORAGE / STOR-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | STORAGE / STOR-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | STORAGE / STOR-PROFILE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | STORAGE / STOR-PROFILE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | STORAGE / STOR-CONNECTION-POLICY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | STORAGE / STOR-CONNECTION-POLICY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | STORAGE / STOR-MGMT-TRANSIT-ENCRYPTION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | STORAGE / STOR-MGMT-TRANSIT-ENCRYPTION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | STORAGE / STOR-MGMT-TRANSIT-ENCRYPTION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | STORAGE / STOR-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | STORAGE / STOR-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.12 | STORAGE / STOR-AT-REST-ENCRYPTION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.13 | STORAGE / STOR-AT-REST-ENCRYPTION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | STORAGE / STOR-DATA-IN-FLIGHT-ENCRYPTION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.21 | STORAGE / STOR-DATA-IN-FLIGHT-ENCRYPTION-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | STORAGE / STOR-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | STORAGE / STOR-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | VMWARE / VMW-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | VMWARE / VMW-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | VMWARE / VMW-POWERCLI-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | VMWARE / VMW-POWERCLI-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | VMWARE / VMW-TLS-TRUST-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.24 | VMWARE / VMW-TLS-TRUST-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | VMWARE / VMW-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.20 | VMWARE / VMW-COLLECT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | VULN / VULN-IMPORT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | VULN / VULN-HIGH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | VULN / VULN-IMPORT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.9 | VULN / VULN-IMPORT-ERROR | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | WINDOWS / WIN-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | WINDOWS / WIN-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-PATCH-FRESHNESS-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | WINDOWS / WIN-REBOOT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-REBOOT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.14 | WINDOWS / WIN-REBOOT-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | WINDOWS / WIN-PATCH-REBOOT-SUMMARY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-PATCH-REBOOT-SUMMARY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.14 | WINDOWS / WIN-PATCH-REBOOT-SUMMARY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.15 | WINDOWS / WIN-DOMAIN-MEMBERSHIP-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | WINDOWS / WIN-DOMAIN-MEMBERSHIP-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.18 | WINDOWS / WIN-DOMAIN-MEMBERSHIP-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-DOMAIN-MEMBERSHIP-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.6 | WINDOWS / WIN-DISK-CAPACITY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.14 | WINDOWS / WIN-DISK-CAPACITY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | WINDOWS / WIN-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | WINDOWS / WIN-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-SCOPE-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.15 | WINDOWS / WIN-CRED-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.17 | WINDOWS / WIN-CRED-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | WINDOWS / WIN-CRED-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | WINDOWS / WIN-DISCOVERY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.8 | WINDOWS / WIN-DISCOVERY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-DISCOVERY-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.1 | WINDOWS / WIN-SCOPE-002 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.9 | WINDOWS / WIN-SCOPE-002 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.23 | ENTRA / CLOUD-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.5.16 | ENTRA / CLOUD-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.2 | ENTRA / CLOUD-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
| A.8.5 | ENTRA / CLOUD-AUTH-001 | Existing ISO collector control reference retained as supporting evidence. Scope, applicability and full control implementation require independent review. |
Confirm scope and applicability, review the requirement guidance, collect policies and records, conduct interviews or observations where needed, and assess evidence relevance and freshness. Record owners, rationale, workpaper conclusions and remediation. An assessor makes the final decision; a technical pass does not approve the whole framework.
ISO control titles/text require an appropriately licensed copy.
This preparation framework is listed in the C32 Professional/MSP application catalog. Free retains its ISO assessment limits. Availability of a framework is separate from the extent of automated scanning.
Coverage shown here comes from the application’s C32 requirement and mapping catalogs.
