Control Objectives: Mapping

1. Identity and Access

1.1 Secure Login (Multi-Factor Authentication).

1.2 Privileged Access Management (PAM)

10.1 Third Party Risk Management (TPRM)

11.1 Security Policy and Exception Management

11.2 Vendor Security & Privacy Risk Assessment (VSA)

2. Network and Infrastructure Security

3. Logging

4. Data Protection with Encryption

5. Host and Endpoint Security

6. Vulnerability and Configuration Analysis

7. Application Security

7.1 Vulnerability and Flaw Remediation

8. Privacy

8.1 Security in Development (Application Security)

9.1 IT Service Management (ITSM)

9.2 Approved Hosting and Processing Location

Monitoring

Threat Detection

and Analytics