Products / Frameworks / 4.1.0

NIST SP 800-53 / FedRAMP

Evidence organization for applicable NIST SP 800-53 Rev. 5 control-family readiness work.

All frameworks Download control list (CSV)

This is the MSP 4.1.0 catalog snapshot, not the full publisher standard and not an assertion of Free/Professional parity. All conclusions require scope, adequate evidence and an authorized reviewer. This profile uses clause, family, criteria-group or locally authored readiness entries. It does not enumerate every official subcontrol or assessment objective.

19 catalog entries0 with exact test mappings10 family-support entries9 manual / unmapped

Search controls or testsCoverage

Control / requirement	Packaged guidance & evidence	Coverage
`AC`Access Control	Access Control Evidence and test details Applicable supporting collectors: ADSEC, ENTRA, GPO, NETWORK. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`AT`Awareness & Training	Awareness & Training Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`AU`Audit & Accountability	Audit & Accountability Evidence and test details Applicable supporting collectors: ENTRA, NETWORK, WINDOWS. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`CA`Assessment, Authorization & Monitoring	Assessment, Authorization & Monitoring Evidence and test details Applicable supporting collectors: ASSETREC, VULN. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`CM`Configuration Management	Configuration Management Evidence and test details Applicable supporting collectors: GPO, STORAGE, VMWARE, WINDOWS. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`CP`Contingency Planning	Contingency Planning Evidence and test details Applicable supporting collectors: BACKUP, STORAGE. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`IA`Identification & Authentication	Identification & Authentication Evidence and test details Applicable supporting collectors: ADSEC, ENTRA, GPO. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`IR`Incident Response	Incident Response Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`MA`Maintenance	Maintenance Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`MP`Media Protection	Media Protection Evidence and test details Applicable supporting collectors: BACKUP, STORAGE. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`PE`Physical & Environmental Protection	Physical & Environmental Protection Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`PL`Planning	Planning Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`PM`Program Management	Program Management Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`PS`Personnel Security	Personnel Security Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`RA`Risk Assessment	Risk Assessment Evidence and test details Applicable supporting collectors: VULN. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`SA`System & Services Acquisition	System & Services Acquisition Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping
`SC`System & Communications Protection	System & Communications Protection Evidence and test details Applicable supporting collectors: CERTTLS, ENTRA, NETWORK, VMWARE. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`SI`System & Information Integrity	System & Information Integrity Evidence and test details Applicable supporting collectors: VULN, WINDOWS. No exact requirement-to-test mapping is published for this row in the 4.1.0 mapping CSV. Family applicability is not proof that this requirement receives a mapped test result.	Family supporting scope
`SR`Supply Chain Risk Management	Supply Chain Risk Management Evidence and test details No exact automated mapping is packaged for this entry. Supply and review policies, records, interviews, observations or other appropriate evidence; absence of a mapping is not PASS.	Manual / no exact mapping