O'Reilly logo

The CISSP® and CAP by Russell Dean Vines, CISSP, CISM, Security +, CCNA, MCSE, MCNE, Ronald L. Krutz, Ph.D. P.E., CISSP, ISSEP

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Appendix G. Control Baselines

CONTROL

CONTROL BASELINES

NO.

Name

LOW

MOD

HIGH

AU-10

Non-repudiation

Not Selected

Not Selected

Not Selected

AU-11

Audit Retention

AU-11

AU-11

AU-11

CERTIFICATION, ACCREDITATION, AND SECURITY ASSESSMENTS

CA-1

Certification, Accreditation, and Security Assessment Policies and Procedures

CA-1

CA-1

CA-1

CA-2

Security Assessments

Not Selected

CA-2

CA-3

CA-3

Information System Connections

CA-3

CA-3

CA-3

CA-4

Security Certification

CA-4

CA-4

CA-4

CA-5

Plan of Action and Milestones

CA-5

CA-5

CA-5

CA-6

Security Accreditation

CA-6

CA-6

CA-6

CA-7

Continuous Monitoring

CA-7

CA-7

CA-7

CONFIGURATION MANAGEMENT

CM-1

Configuration Management Policy and Procedures

CM-1

CM-1

CM-1

CM-2

Baseline Configuration

CM-2

CM-2 (1)

CM-2 (1) (2)

CM-3

Configuration Change Control

Not Selected

CM-3

CM-3 (1)

CM-4

Monitoring Configuration Changes

Not Selected

CM-4

CM-4

CM-5

Access Restrictions for Change

Not Selected

CM-5

CM-5 (1)

CM-6

Configuration Settings

CM-6

CM-6

CM-6 (1)

CM-7

Least Functionality

Not Selected

CM-7

CM-7 (1)

CONTINGENCY PLANNING

CP-1

Contingency Planning Policy and Procedures

CP-1

CP-1

CP-1

CP-2

Contingency Plan

CP-2

CP-2 (1)

CP-2 (1)

CP-3

Contingency Training

Not Selected

CP-3

CP-3 (1)

CP-4

Contingency Plan Testing

Not Selected

CP-4 (1)

CP-4 (1) (2)

CP-5

Contingency Plan Update

CP-5

CP-5

CP-5

CP-6

Alternate Storage Sites

Not Selected

CP-6 (1)

CP-6 (1) (2) (3)

CP-7

Alternate Processing Sites

Not Selected

CP-7 (1) (2) (3)

CP-7 (1) (2) (3) (4)

CP-8

Telecommunications Services

Not Selected

CP-8 (1) (2)

CP-8 (1) (2) (3) (4)

CP-9

Information System Backup

CP-9

CP-9 (1)

CP-9 (1) (2) (3)

CP-10

Information ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required