dod-sub-mappings.yaml

- mappings:
  - categories:
    - activity: 1.1.1 Inventory User
      phase: D
      tech: System/Organization
      type: Target
    key: AC-2
  - categories:
    - activity: 1.1.1 Inventory User
      phase: D
      tech: System/Organization
      type: Target
    key: AC-2(7)
  - categories:
    - activity: 1.1.1 Inventory User
      phase: D
      tech: System/Organization
      type: Target
    key: AC-14
  - categories:
    - activity: 1.1.1 Inventory User
      phase: D
      tech: System/Organization
      type: Target
    key: IA-2
  - categories:
    - activity: 1.1.1 Inventory User
      phase: D
      tech: System/Organization
      type: Target
    key: IA-8
  name: '1.1'
- mappings:
  - categories: []
    key: AC-2
  - categories:
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-2(6)
  - categories:
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-2(7)
  - categories:
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.5 Enterprise Government Roles and Permissions Part 2
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: AC-2(11)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-3
  - categories:
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-3(8)
  - categories:
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-3(10)
  - categories:
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-3(11)
  - categories:
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-3(13)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-5
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-6
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-6(5)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-6(10)
  - categories:
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-12
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16
  name: '1.2'
- mappings:
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(2)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(4)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(6)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(7)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(8)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(10)
  - categories: []
    key: AC-17
  - categories:
    - activity: 1.2.3 Rule Based Dynamic Access Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-17(9)
  - categories:
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-24
  - categories:
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-24(1)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-2
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-3
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-8
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-9
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-9(4)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-10
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-10(1)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-12
  name: '1.2'
- mappings:
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-2
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-4
  - categories:
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: IA-4(9)
  - categories:
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: IA-8
  - categories:
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: IA-8(4)
  - categories:
    - activity: 1.2.3 Rule Based Dynamic Access Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: IA-10
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-16
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-16(1)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-16(2)
  - categories:
    - activity: 1.2.1 Implement Application Based Permissions per Enterprise
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-16(3)
  - categories:
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-45
  - categories:
    - activity: 1.2.2 Rule Based Dynamic Access Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 1.2.4 Enterprise Government Roles and Permissions Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-45(1)
  name: '1.2'
- mappings:
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-2
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-2(2)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-2(9)
  name: '1.3'
- mappings:
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-14
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-16
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-16(1)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-16(2)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-16(3)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-16(4)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-16(6)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-16(7)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-16(8)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: AC-16(10)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-2
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-3
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-8
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-9
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-9(4)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-10
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-10(1)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-12
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: IA-2
  name: '1.3'
- mappings:
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: IA-2(1)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: IA-2(2)
  - categories:
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: IA-2(6)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: IA-2(12)
  - categories: []
    key: IA-4
  - categories:
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: IA-4(9)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: IA-5
  - categories: []
    key: IA-8
  - categories:
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: IA-8(2)
  - categories:
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: IA-8(4)
  - categories:
    - activity: 1.3.3 Alternative Flexible MFA Part 2
      phase: '4'
      tech: System
      type: Advanced
    key: IA-10
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: RA-9
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: SC-16
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: SC-16(1)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: SC-16(2)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    key: SC-16(3)
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-45
  - categories:
    - activity: 1.3.1 Organizational MFA/IdP
      phase: '1'
      tech: System
      type: Target
    - activity: 1.3.2 Alternative Flexible MFA Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-45(1)
  name: '1.3'
- mappings:
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-2
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-2(2)
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-2(7)
  - categories:
    - activity: 1.4.4 Real Time Approvals and JIT/JEA Analytics Part 2
      phase: '4'
      tech: System
      type: Advanced
    key: AC-2(12)
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: AC-6
  - categories:
    - activity: 1.4.2 Implement System and Migrate Privileged Users Part 2
      phase: '2'
      tech: System
      type: Target
    key: AC-6(5)
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-6(9)
  - categories: []
    key: AC-17
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-17(4)
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: AU-2
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: AU-3
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: AU-8
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: AU-9
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: AU-9(4)
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: AU-10
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: AU-10(1)
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: AU-12
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: IA-2
  name: '1.4'
- mappings:
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: IA-2(5)
  - categories: []
    key: IA-4
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: IA-4(9)
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: IA-5
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: IA-5(1)
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: IA-5(2)
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: IA-5(18)
  - categories:
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: RA-5
  - categories:
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: RA-5(2)
  - categories:
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: RA-5(5)
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: SC-45
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 1.4.3 Real Time Approvals and Just-in-Time (JIT)/Just-Enough-Administration
        (JEA)
      phase: '3'
      tech: System
      type: Advanced
    key: SC-45(1)
  - categories: []
    key: SI-4
  - categories:
    - activity: 1.4.1 Implement System and Migrate Privileged Users Part 1
      phase: '1'
      tech: System
      type: Target
    key: SI-4(20)
  name: '1.4'
- mappings:
  - categories: []
    key: AC-2
  - categories:
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-2(1)
  - categories:
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-2(2)
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-2(3)
  - categories:
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-2(4)
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-2(7)
  - categories:
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-2(8)
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-2(11)
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-2(13)
  name: '1.5'
- mappings:
  - categories: []
    key: AC-6
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-6(5)
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-6(7)
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-2
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-3
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-8
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-9
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-10
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-12
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-1
  - categories: []
    key: IA-2
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-4
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-4(4)
  - categories:
    - activity: 1.5.3 Enterprise ILM Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: IA-4(5)
  - categories:
    - activity: 1.5.3 Enterprise ILM Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: IA-4(6)
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-4(9)
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-5
  - categories:
    - activity: 1.5.3 Enterprise ILM Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: IA-5(9)
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.3 Enterprise ILM Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: IA-5(10)
  - categories:
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-8
  - categories:
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-8(1)
  - categories:
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-8(5)
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-12
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    key: PL-4
  name: '1.5'
- mappings:
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    key: PS-4
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    key: PS-5
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-45
  - categories:
    - activity: 1.5.1 Organizational ILM
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 1.5.2 Enterprise ILM Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-45(1)
  name: '1.5'
- mappings:
  - categories: []
    key: AC-2
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-2(12)
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-2
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-3
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-3(3)
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-6
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    key: AU-6(8)
  name: '1.6'
- mappings:
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-7
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-7(1)
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-8
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-9
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-9(4)
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-10
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-10(1)
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-12
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    key: AU-14
  - categories:
    - activity: 1.6.2 User Activity Monitoring Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: PM-12
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    key: SC-45
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    key: SC-45(1)
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    key: SI-4
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    key: SI-4(2)
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    key: SI-4(4)
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    key: SI-4(9)
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    key: SI-4(10)
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    key: SI-4(13)
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    key: SI-4(19)
  - categories:
    - activity: 1.6.1 Implement User
      phase: '2'
      tech: System
      type: Target
    key: SI-4(20)
  name: '1.6'
- mappings:
  - categories: []
    key: AC-2
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-2(11)
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-3
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-3(7)
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-3(8)
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-3(13)
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-6
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-6(5)
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-6(10)
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-2
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-3
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-8
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-9
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-10
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-12
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: IA-11
  - categories: []
    key: SC-23
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-23(5)
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-45
  - categories:
    - activity: 1.7.1 Deny User by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-45(1)
  name: '1.7'
- mappings:
  - categories:
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: AU-2
  - categories:
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: AU-3
  - categories:
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: AU-8
  - categories:
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: AU-9
  - categories:
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: AU-9(4)
  - categories:
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: AU-10
  - categories:
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: AU-10(1)
  - categories:
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: AU-12
  - categories:
    - activity: 1.8.1 Single Authentication
      phase: '1'
      tech: Organization
      type: Target
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: IA-5
  - categories:
    - activity: 1.8.1 Single Authentication
      phase: '1'
      tech: Organization
      type: Target
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: IA-5(1)
  - categories:
    - activity: 1.8.1 Single Authentication
      phase: '1'
      tech: Organization
      type: Target
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: IA-5(2)
  - categories:
    - activity: 1.8.1 Single Authentication
      phase: '1'
      tech: Organization
      type: Target
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: IA-5(18)
  - categories:
    - activity: 1.8.1 Single Authentication
      phase: '1'
      tech: Organization
      type: Target
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: IA-11
  - categories:
    - activity: 1.8.1 Single Authentication
      phase: '1'
      tech: Organization
      type: Target
    key: SC-23
  - categories:
    - activity: 1.8.1 Single Authentication
      phase: '1'
      tech: Organization
      type: Target
    key: SC-23(5)
  - categories:
    - activity: 1.8.1 Single Authentication
      phase: '1'
      tech: Organization
      type: Target
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: SC-45
  - categories:
    - activity: 1.8.1 Single Authentication
      phase: '1'
      tech: Organization
      type: Target
    - activity: 1.8.2 Periodic Authentication
      phase: '2'
      tech: Organization
      type: Target
    - activity: 1.8.3 Continuous Authentication Part 1
      phase: '3'
      tech: Organization
      type: Advanced
    key: SC-45(1)
  name: '1.8'
- mappings:
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-2
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-2(2)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-2(9)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-14
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(1)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(2)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(3)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(4)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(6)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(7)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(8)
  - categories:
    - activity: 1.9.2 Enterprise PKI/IdP Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(9)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(10)
  name: '1.9'
- mappings:
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-2
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-3
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-8
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-9
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-10
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-12
  - categories: []
    key: IA-2
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-2(1)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-2(2)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-2(12)
  - categories: []
    key: IA-4
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-4(9)
  - categories: []
    key: IA-5
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-5(2)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-5(9)
  - categories:
    - activity: 1.9.2 Enterprise PKI/IdP Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: IA-5(12)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-5(14)
  - categories:
    - activity: 1.9.2 Enterprise PKI/IdP Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: IA-5(17)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-8
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-8(1)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-8(5)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-12
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-16
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-16(1)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-16(2)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-16(3)
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-45
  name: '1.9'
- mappings:
  - categories:
    - activity: 1.9.1 Enterprise PKI/IdP Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-45(1)
  name: '1.9'
- mappings:
  - categories:
    - activity: 2.1.2 NPE/PKI, Device under Management
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-2
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(1)
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(2)
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(3)
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(4)
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(6)
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(7)
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(8)
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(9)
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(10)
  name: '2.1'
- mappings:
  - categories:
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-2
  - categories:
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-3
  - categories:
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-8
  - categories:
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-9
  - categories:
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-10
  - categories:
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-12
  - categories:
    - activity: 2.1.1 Device Health Tool Gap Analysis
      phase: D
      tech: System/Organization
      type: Target
    key: CM-9
  - categories:
    - activity: 2.1.2 NPE/PKI, Device under Management
      phase: '1'
      tech: System/Organization
      type: Target
    key: IA-2
  - categories:
    - activity: 2.1.1 Device Health Tool Gap Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 2.1.2 NPE/PKI, Device under Management
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-3
  - categories:
    - activity: 2.1.2 NPE/PKI, Device under Management
      phase: '1'
      tech: System/Organization
      type: Target
    key: IA-4
  - categories:
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-4(6)
  - categories:
    - activity: 2.1.2 NPE/PKI, Device under Management
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-4(9)
  - categories:
    - activity: 2.1.2 NPE/PKI, Device under Management
      phase: '1'
      tech: System/Organization
      type: Target
    key: IA-5
  - categories:
    - activity: 2.1.2 NPE/PKI, Device under Management
      phase: '1'
      tech: System/Organization
      type: Target
    key: IA-5(2)
  - categories:
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: IA-8
  - categories:
    - activity: 2.1.2 NPE/PKI, Device under Management
      phase: '1'
      tech: System/Organization
      type: Target
    key: IA-9
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-16
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-16(1)
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-16(2)
  - categories:
    - activity: 2.1.4 Enterprise IdP Part 2
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-16(3)
  name: '2.1'
- mappings:
  - categories:
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-45
  - categories:
    - activity: 2.1.3 Enterprise IdP Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-45(1)
  name: '2.1'
- mappings:
  - categories: []
    key: AC-2
  - categories:
    - activity: 2.2.2 Implement C2C/Compliance Based Network Authorization Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AC-2(6)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-3
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(1)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(2)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(3)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(4)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(6)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(7)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(8)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(9)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-16(10)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-17
  name: '2.2'
- mappings:
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-17(1)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: CM-3
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: CM-3(5)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: CM-6
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: CM-6(1)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: CM-6(2)
  - categories: []
    key: CM-8
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: CM-8(2)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: CM-8(3)
  - categories: []
    key: SC-7
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-7(20)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-16
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-16(1)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-16(2)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-16(3)
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-2
  - categories:
    - activity: 2.2.1 Implement C2C/Compliance Based Network Authorization Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-2(2)
  name: '2.2'
- mappings:
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(1)
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(2)
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(3)
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(4)
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(6)
  name: '2.3'
- mappings:
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(7)
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(8)
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(9)
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(10)
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-2
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-3
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-6
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-7
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-7(1)
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-8
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-9
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-9(4)
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-10
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-10(1)
  name: '2.3'
- mappings:
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-12
  - categories: []
    key: CM-7
  - categories:
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: CM-7(2)
  - categories:
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: CM-7(5)
  - categories:
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: CM-11
  - categories:
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: CM-11(3)
  - categories: []
    key: IA-4
  - categories:
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: IA-4(6)
  - categories: []
    key: IA-5
  - categories:
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: IA-5(9)
  - categories:
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: IA-5(14)
  - categories:
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-12
  name: '2.3'
- mappings:
  - categories:
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-12(1)
  - categories:
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-12(3)
  - categories:
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-13
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-16
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-16(1)
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-16(2)
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-16(3)
  - categories:
    - activity: 2.3.6 Enterprise PKI Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-17
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-45
  - categories:
    - activity: 2.3.1 Entity Activity Monitoring Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    - activity: 2.3.5 Fully Integrate Device Security stack with C2Cas Appropriate
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-45(1)
  - categories:
    - activity: 2.3.4 Integrate NextGen AV Tools with C2C
      phase: D
      tech: System
      type: Target
    key: SI-3
  - categories:
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: SI-3(8)
  name: '2.3'
- mappings:
  - categories: []
    key: SI-4
  - categories:
    - activity: 2.3.2 Entity Activity Monitoring Part 2
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: SI-4(3)
  - categories:
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: SI-7
  - categories:
    - activity: 2.3.3 Implement Application Control and FIM Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: SI-7(8)
  name: '2.3'
- mappings:
  - categories: []
    key: AC-2
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-2(6)
  - categories:
    - activity: 2.4.1 Deny Device by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-3
  - categories:
    - activity: 2.4.1 Deny Device by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-3(7)
  - categories:
    - activity: 2.4.1 Deny Device by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-3(8)
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-3(11)
  - categories:
    - activity: 2.4.1 Deny Device by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-3(13)
  - categories:
    - activity: 2.4.1 Deny Device by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-6
  - categories:
    - activity: 2.4.1 Deny Device by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-17
  - categories:
    - activity: 2.4.1 Deny Device by Default Policy
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-17(1)
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-19
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-2
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-3
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-8
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-9
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-10
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-12
  name: '2.4'
- mappings:
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-45
  - categories:
    - activity: 2.4.2 Managed and Limited Bring Your Own Device (BYOD) &IoT Support
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-45(1)
  name: '2.4'
- mappings:
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: AU-2
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: AU-3
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: AU-8
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: AU-9
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: AU-10
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: AU-12
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: CM-2
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: CM-2(2)
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: CM-6
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: CM-6(1)
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: RA-5
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: SC-45
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: SC-45(1)
  name: '2.5'
- mappings:
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: SI-2
  - categories:
    - activity: 2.5.1 Implement Asset, Vulnerability, and Patch Management Tools
      phase: '1'
      tech: System
      type: Target
    key: SI-2(2)
  name: '2.5'
- mappings:
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(1)
  name: '2.6'
- mappings:
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(2)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(3)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(4)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(6)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(7)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(8)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(9)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(10)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-2
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-3
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-8
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-9
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-10
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-12
  - categories: []
    key: CM-8
  - categories:
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: CM-8(2)
  - categories:
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: CM-8(6)
  - categories:
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: CM-8(9)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: CM-11
  name: '2.6'
- mappings:
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: CM-11(3)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: CM-14
  - categories:
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: RA-9
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-16
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-16(1)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-16(2)
  - categories:
    - activity: 2.6.1 Implement UEDM or equivalent Tools
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-16(3)
  - categories:
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-25
  - categories: []
    key: SI-4
  - categories:
    - activity: 2.6.2 Enterprise Device Management Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SI-4(23)
  name: '2.6'
- mappings:
  - categories:
    - activity: 2.7.1 Implement Endpoint Detection & Response Tools and Integrate
        with C2C
      phase: '1'
      tech: System
      type: Target
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-2
  - categories:
    - activity: 2.7.1 Implement Endpoint Detection & Response Tools and Integrate
        with C2C
      phase: '1'
      tech: System
      type: Target
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-3
  - categories:
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-6
  - categories:
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-6(4)
  - categories:
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-6(5)
  - categories:
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-7
  - categories:
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-7(1)
  - categories:
    - activity: 2.7.1 Implement Endpoint Detection & Response Tools and Integrate
        with C2C
      phase: '1'
      tech: System
      type: Target
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-8
  - categories:
    - activity: 2.7.1 Implement Endpoint Detection & Response Tools and Integrate
        with C2C
      phase: '1'
      tech: System
      type: Target
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-9
  - categories:
    - activity: 2.7.1 Implement Endpoint Detection & Response Tools and Integrate
        with C2C
      phase: '1'
      tech: System
      type: Target
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-9(4)
  - categories:
    - activity: 2.7.1 Implement Endpoint Detection & Response Tools and Integrate
        with C2C
      phase: '1'
      tech: System
      type: Target
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-10
  - categories:
    - activity: 2.7.1 Implement Endpoint Detection & Response Tools and Integrate
        with C2C
      phase: '1'
      tech: System
      type: Target
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-10(1)
  - categories:
    - activity: 2.7.1 Implement Endpoint Detection & Response Tools and Integrate
        with C2C
      phase: '1'
      tech: System
      type: Target
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-12
  - categories:
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: AU-12(1)
  name: '2.7'
- mappings:
  - categories:
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: SC-45
  - categories:
    - activity: 2.7.3 Implement XDR Tools and Integrate with C2C Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: SC-45(1)
  - categories:
    - activity: 2.7.1 Implement Endpoint Detection & Response Tools and Integrate
        with C2C
      phase: '1'
      tech: System
      type: Target
    key: SI-4
  - categories:
    - activity: 2.7.2 Implement XDR Tools and Integrate with C2C Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-4(1)
  - categories:
    - activity: 2.7.1 Implement Endpoint Detection & Response Tools and Integrate
        with C2C
      phase: '1'
      tech: System
      type: Target
    key: SI-4(2)
  - categories:
    - activity: 2.7.2 Implement XDR Tools and Integrate with C2C Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-4(4)
  - categories:
    - activity: 2.7.2 Implement XDR Tools and Integrate with C2C Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-4(10)
  - categories:
    - activity: 2.7.2 Implement XDR Tools and Integrate with C2C Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-4(11)
  - categories:
    - activity: 2.7.2 Implement XDR Tools and Integrate with C2C Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-4(13)
  - categories:
    - activity: 2.7.2 Implement XDR Tools and Integrate with C2C Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-4(16)
  - categories:
    - activity: 2.7.1 Implement Endpoint Detection & Response Tools and Integrate
        with C2C
      phase: '1'
      tech: System
      type: Target
    key: SI-4(23)
  - categories:
    - activity: 2.7.1 Implement Endpoint Detection & Response Tools and Integrate
        with C2C
      phase: '1'
      tech: System
      type: Target
    key: SI-4(24)
  name: '2.7'
- mappings:
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: D
      tech: System
      type: Target
    key: CM-8
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: D
      tech: System
      type: Target
    key: CM-8(9)
  name: '3.2'
- mappings:
  - categories: []
    key: AC-3
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-3(12)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-4
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-4(1)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: AC-4(17)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-2
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-3
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-8
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-9
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-10
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: AU-12
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: CA-2
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: CA-5
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: CA-5(1)
  name: '3.2'
- mappings:
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: CM-2
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: CM-2(2)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: CM-3
  - categories:
    - activity: 3.2.2 Build DevSecOps Software Factory Part 2
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.4 Automate Application Security & Code Remediation Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: CM-3(1)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: CM-3(3)
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: CM-4
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: CM-6
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: CM-6(1)
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: CM-7
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: CM-9
  - categories: []
    key: IA-5
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-5(5)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-5(7)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: IA-6
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: RA-5
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: RA-5(2)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: RA-5(5)
  name: '3.2'
- mappings:
  - categories: []
    key: SA-8
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: SA-8(14)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SA-11
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SA-11(1)
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SA-11(4)
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SA-11(8)
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SA-11(9)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: SA-15
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: SA-15(2)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: SA-15(7)
  - categories: []
    key: SA-17
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: SA-17(7)
  - categories: []
    key: SC-7
  - categories:
    - activity: 3.2.4 Automate Application Security & Code Remediation Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: SC-7(17)
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: SC-27
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-45
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SC-45(1)
  name: '3.2'
- mappings:
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: SI-2
  - categories:
    - activity: 3.2.1 Build DevSecOps Software Factory Part 1
      phase: '1'
      tech: System
      type: Target
    key: SI-2(2)
  - categories:
    - activity: 3.2.2 Build DevSecOps Software Factory Part 2
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-2(4)
  - categories:
    - activity: 3.2.2 Build DevSecOps Software Factory Part 2
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-2(5)
  - categories: []
    key: SI-7
  - categories:
    - activity: 3.2.4 Automate Application Security & Code Remediation Part 2
      phase: '3'
      tech: System
      type: Advanced
    key: SI-7(17)
  - categories:
    - activity: 3.2.2 Build DevSecOps Software Factory Part 2
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-10
  - categories:
    - activity: 3.2.2 Build DevSecOps Software Factory Part 2
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-10(2)
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-10(4)
  - categories:
    - activity: 3.2.2 Build DevSecOps Software Factory Part 2
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-10(5)
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-10(6)
  - categories:
    - activity: 3.2.2 Build DevSecOps Software Factory Part 2
      phase: '1'
      tech: System
      type: Target
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-11
  - categories:
    - activity: 3.2.2 Build DevSecOps Software Factory Part 2
      phase: '1'
      tech: System
      type: Target
    key: SI-14
  - categories:
    - activity: 3.2.2 Build DevSecOps Software Factory Part 2
      phase: '1'
      tech: System
      type: Target
    key: SI-15
  - categories:
    - activity: 3.2.3 Automate Application Security & Code Remediation Part 1
      phase: '2'
      tech: System
      type: Target
    key: SI-23
  name: '3.2'
- mappings: []
  name: '3.3'
- mappings:
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-2
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-3
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-8
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-9
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-10
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-12
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CA-2
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CA-5
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CA-5(1)
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CA-7
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CA-7(6)
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CM-2
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CM-2(2)
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CM-2(6)
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CM-3
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CM-3(2)
  - categories: []
    key: CM-4
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CM-4(1)
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CM-4(2)
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CM-6
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: CM-6(1)
  name: '3.3'
- mappings:
  - categories: []
    key: CM-7
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: CM-7(8)
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: CM-10
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: CM-10(1)
  - categories:
    - activity: 3.3.3 Vulnerability Management Program Part 2
      phase: '2'
      tech: System/Organization
      type: Target
    key: PM-15
  - categories: []
    key: RA-3
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: RA-3(1)
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: RA-5
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: RA-5(2)
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: RA-5(5)
  - categories:
    - activity: 3.3.3 Vulnerability Management Program Part 2
      phase: '2'
      tech: System/Organization
      type: Target
    key: RA-5(11)
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: SA-10
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: SA-10(1)
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: SA-10(4)
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: SA-10(6)
  name: '3.3'
- mappings:
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: SA-11
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: SA-11(1)
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: SA-11(4)
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: SA-11(8)
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: SA-11(9)
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: SA-15
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: SA-15(1)
  - categories:
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: SA-15(7)
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-45
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-45(1)
  - categories:
    - activity: 3.3.2 Vulnerability Management Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.3.4 Continual Validation
      phase: '2'
      tech: System
      type: Target
    key: SI-2
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: SR-3
  - categories: []
    key: SR-4
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: SR-4(3)
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: SR-4(4)
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: SR-9
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: SR-10
  name: '3.3'
- mappings:
  - categories:
    - activity: 3.3.1 Approved Binaries/Code
      phase: '1'
      tech: System
      type: Target
    key: SR-11
  name: '3.3'
- mappings:
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-2
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-3
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-3(12)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-3(13)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-4
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-4(3)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-4(8)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-4(10)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-4(11)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-4(17)
  name: '3.4'
- mappings:
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.3 Enrich Attributes for Resource Authorization Part 1
      phase: '3'
      tech: System
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-16
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.3 Enrich Attributes for Resource Authorization Part 1
      phase: '3'
      tech: System
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-16(1)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.3 Enrich Attributes for Resource Authorization Part 1
      phase: '3'
      tech: System
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-16(2)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.3 Enrich Attributes for Resource Authorization Part 1
      phase: '3'
      tech: System
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-16(3)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.3 Enrich Attributes for Resource Authorization Part 1
      phase: '3'
      tech: System
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-16(4)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.3 Enrich Attributes for Resource Authorization Part 1
      phase: '3'
      tech: System
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-16(6)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.3 Enrich Attributes for Resource Authorization Part 1
      phase: '3'
      tech: System
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-16(7)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-16(8)
  name: '3.4'
- mappings:
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.5 REST API Micro-Segments
      phase: '4'
      tech: System/Organization
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-16(9)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.3 Enrich Attributes for Resource Authorization Part 1
      phase: '3'
      tech: System
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-16(10)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-17
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-17(1)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: AC-17(2)
  - categories: []
    key: IA-3
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: IA-3(1)
  - categories: []
    key: SC-7
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: SC-7(8)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: SC-7(11)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: SC-7(16)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: SC-10
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.3 Enrich Attributes for Resource Authorization Part 1
      phase: '3'
      tech: System
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: SC-16
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.3 Enrich Attributes for Resource Authorization Part 1
      phase: '3'
      tech: System
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: SC-16(1)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.3 Enrich Attributes for Resource Authorization Part 1
      phase: '3'
      tech: System
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: SC-16(2)
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.3 Enrich Attributes for Resource Authorization Part 1
      phase: '3'
      tech: System
      type: Advanced
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: SC-16(3)
  - categories: []
    key: SC-23
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: SC-23(5)
  name: '3.4'
- mappings:
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: SC-30
  - categories: []
    key: SI-10
  - categories:
    - activity: 3.4.1 Resource Authorization Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 3.4.6 SDC Resource Authorization Part 1
      phase: '1'
      tech: System
      type: Target
    key: SI-10(5)
  name: '3.4'
- mappings:
  - categories:
    - activity: 3.5.1 cATO Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: CA-2
  - categories:
    - activity: 3.5.1 cATO Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: CA-5
  - categories:
    - activity: 3.5.2 cATO Part 2
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: CA-5(1)
  - categories:
    - activity: 3.5.1 cATO Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: CA-6
  - categories:
    - activity: 3.5.1 cATO Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: CA-7
  - categories:
    - activity: 3.5.2 cATO Part 2
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: CA-7(6)
  name: '3.5'
- mappings:
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: AC-16
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: AC-16(1)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: AC-16(2)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: AC-16(3)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: AC-16(4)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: AC-16(6)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: AC-16(7)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: AC-16(8)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: AC-16(9)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: AC-16(10)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: PT-2
  name: '4.2'
- mappings:
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: PT-2(1)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: PT-2(2)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: PT-3
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: PT-3(1)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: PT-3(2)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: SC-16
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: SC-16(1)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: SC-16(2)
  - categories:
    - activity: 4.2.1 Define Data Tagging Standards
      phase: '1'
      tech: Organization
      type: Target
    key: SC-16(3)
  name: '4.2'
- mappings:
  - categories:
    - activity: 4.3.2 Manual Data Tagging Part 1
      phase: '2'
      tech: System
      type: Target
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(1)
  - categories:
    - activity: 4.3.2 Manual Data Tagging Part 1
      phase: '2'
      tech: System
      type: Target
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(2)
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(3)
  - categories:
    - activity: 4.3.2 Manual Data Tagging Part 1
      phase: '2'
      tech: System
      type: Target
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(4)
  - categories:
    - activity: 4.3.2 Manual Data Tagging Part 1
      phase: '2'
      tech: System
      type: Target
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(6)
  - categories:
    - activity: 4.3.2 Manual Data Tagging Part 1
      phase: '2'
      tech: System
      type: Target
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(7)
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(8)
  name: '4.3'
- mappings:
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(9)
  - categories:
    - activity: 4.3.2 Manual Data Tagging Part 1
      phase: '2'
      tech: System
      type: Target
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AC-16(10)
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-2
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-3
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-8
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-9
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-9(4)
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-10
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-10(1)
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: AU-12
  - categories:
    - activity: 4.3.2 Manual Data Tagging Part 1
      phase: '2'
      tech: System
      type: Target
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-16
  - categories:
    - activity: 4.3.2 Manual Data Tagging Part 1
      phase: '2'
      tech: System
      type: Target
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-16(1)
  - categories:
    - activity: 4.3.2 Manual Data Tagging Part 1
      phase: '2'
      tech: System
      type: Target
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-16(2)
  - categories:
    - activity: 4.3.2 Manual Data Tagging Part 1
      phase: '2'
      tech: System
      type: Target
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-16(3)
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-45
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SC-45(1)
  - categories: []
    key: SI-18
  - categories:
    - activity: 4.3.4 Automated Data Tagging & Support Part 1
      phase: '3'
      tech: System
      type: Advanced
    key: SI-18(2)
  name: '4.3'
- mappings:
  - categories: []
    key: AC-4
  - categories:
    - activity: 4.4.1 DLP Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    key: AC-4(26)
  - categories:
    - activity: 4.4.3 File Activity Monitoring Part 2
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.4.5 Database Activity Monitoring
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-23
  - categories:
    - activity: 4.4.1 DLP Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.2 DRM Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.3 File Activity Monitoring Part 2
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.4.5 Database Activity Monitoring
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-2
  - categories:
    - activity: 4.4.1 DLP Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.2 DRM Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.3 File Activity Monitoring Part 2
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.4.5 Database Activity Monitoring
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-3
  - categories:
    - activity: 4.4.1 DLP Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.2 DRM Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.3 File Activity Monitoring Part 2
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.4.5 Database Activity Monitoring
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-6
  - categories:
    - activity: 4.4.6 Comprehensive Data Activity Monitoring
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: AU-6(3)
  - categories:
    - activity: 4.4.6 Comprehensive Data Activity Monitoring
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: AU-6(4)
  - categories:
    - activity: 4.4.1 DLP Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.2 DRM Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.3 File Activity Monitoring Part 2
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.4.5 Database Activity Monitoring
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-8
  - categories:
    - activity: 4.4.1 DLP Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.2 DRM Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.3 File Activity Monitoring Part 2
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.4.5 Database Activity Monitoring
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-9
  - categories:
    - activity: 4.4.1 DLP Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.2 DRM Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.3 File Activity Monitoring Part 2
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.4.5 Database Activity Monitoring
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-9(4)
  - categories:
    - activity: 4.4.1 DLP Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.2 DRM Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.3 File Activity Monitoring Part 2
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.4.5 Database Activity Monitoring
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-10
  - categories:
    - activity: 4.4.1 DLP Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.2 DRM Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.3 File Activity Monitoring Part 2
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.4.5 Database Activity Monitoring
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-10(1)
  - categories:
    - activity: 4.4.1 DLP Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.2 DRM Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.3 File Activity Monitoring Part 2
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.4.5 Database Activity Monitoring
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AU-12
  name: '4.4'
- mappings:
  - categories:
    - activity: 4.4.1 DLP Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.2 DRM Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.3 File Activity Monitoring Part 2
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.4.5 Database Activity Monitoring
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-45
  - categories:
    - activity: 4.4.1 DLP Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.2 DRM Enforcement Point Logging and Analysis
      phase: D
      tech: System/Organization
      type: Target
    - activity: 4.4.3 File Activity Monitoring Part 2
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.4.5 Database Activity Monitoring
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-45(1)
  name: '4.4'
- mappings:
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-3
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-3(11)
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-3(13)
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-21
  - categories:
    - activity: 4.5.5 DRM Enforcement via Data Tags and Analytics Part 3
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: AC-21(1)
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-23
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-24
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-24(1)
  name: '4.5'
- mappings:
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-2
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-3
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-8
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-9
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-10
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-12
  - categories:
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: PT-2
  - categories:
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: PT-2(2)
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-8
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-8(1)
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-12
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-12(1)
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-12(2)
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-12(3)
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-13
  name: '4.5'
- mappings:
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-28
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-28(1)
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-28(3)
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-45
  - categories:
    - activity: 4.5.1 Implement DRM and Protection Tools Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-45(1)
  - categories:
    - activity: 4.5.3 DRM Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SI-20
  name: '4.5'
- mappings:
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-4
  - categories:
    - activity: 4.6.1 Implement DLP Enforcement Points
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-4(1)
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-4(3)
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-4(6)
  name: '4.6'
- mappings:
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-4(8)
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-4(10)
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-4(11)
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-4(12)
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-4(19)
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-4(23)
  - categories:
    - activity: 4.6.1 Implement DLP Enforcement Points
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4(26)
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-2
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-3
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-8
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-9
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-10
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-12
  - categories: []
    key: PT-2
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: PT-2(2)
  - categories: []
    key: SC-7
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-7(10)
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-45
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-45(1)
  - categories: []
    key: SI-4
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SI-4(10)
  name: '4.6'
- mappings:
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SI-4(18)
  - categories:
    - activity: 4.6.2 DLP Enforcement via Data Tags and Analytics Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: SI-20
  name: '4.6'
- mappings:
  - categories: []
    key: AC-4
  - categories:
    - activity: 4.7.1 Integrate DAAS Access with SDS Policy Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-4(1)
  name: '4.7'
- mappings:
  - categories:
    - activity: 5.1.2 Define Granular Control Access Rules & Policies Part 2
      phase: '1'
      tech: System
      type: Target
    key: AC-4
  - categories:
    - activity: 5.1.2 Define Granular Control Access Rules & Policies Part 2
      phase: '1'
      tech: System
      type: Target
    key: AC-4(1)
  - categories:
    - activity: 5.1.2 Define Granular Control Access Rules & Policies Part 2
      phase: '1'
      tech: System
      type: Target
    key: AC-4(6)
  - categories:
    - activity: 5.1.2 Define Granular Control Access Rules & Policies Part 2
      phase: '1'
      tech: System
      type: Target
    key: AC-4(8)
  - categories:
    - activity: 5.1.2 Define Granular Control Access Rules & Policies Part 2
      phase: '1'
      tech: System
      type: Target
    key: AC-4(11)
  - categories:
    - activity: 5.1.2 Define Granular Control Access Rules & Policies Part 2
      phase: '1'
      tech: System
      type: Target
    key: AC-4(12)
  - categories:
    - activity: 5.1.2 Define Granular Control Access Rules & Policies Part 2
      phase: '1'
      tech: System
      type: Target
    key: AC-4(19)
  - categories:
    - activity: 5.1.1 Define Granular Control Access Rules & Policies Part 1
      phase: D
      tech: System
      type: Target
    key: CM-12
  name: '5.1'
- mappings:
  - categories:
    - activity: 5.2.2 Implement SDN Programable Infrastructure
      phase: '1'
      tech: System
      type: Target
    - activity: 5.2.5 Real-Time Access Decisions
      phase: '3'
      tech: System
      type: Advanced
    key: AC-3
  - categories:
    - activity: 5.2.2 Implement SDN Programable Infrastructure
      phase: '1'
      tech: System
      type: Target
    key: AC-3(7)
  - categories:
    - activity: 5.2.2 Implement SDN Programable Infrastructure
      phase: '1'
      tech: System
      type: Target
    key: AC-3(13)
  - categories:
    - activity: 5.2.3 Segment Flows into Control
      phase: '2'
      tech: System
      type: Target
    key: AC-4
  - categories:
    - activity: 5.2.3 Segment Flows into Control
      phase: '2'
      tech: System
      type: Target
    key: AC-4(21)
  name: '5.2'
- mappings:
  - categories:
    - activity: 5.2.3 Segment Flows into Control
      phase: '2'
      tech: System
      type: Target
    key: CA-9
  - categories:
    - activity: 5.2.3 Segment Flows into Control
      phase: '2'
      tech: System
      type: Target
    key: SC-2
  - categories:
    - activity: 5.2.3 Segment Flows into Control
      phase: '2'
      tech: System
      type: Target
    key: SC-2(1)
  - categories: []
    key: SC-7
  - categories:
    - activity: 5.2.3 Segment Flows into Control
      phase: '2'
      tech: System
      type: Target
    key: SC-7(15)
  - categories: []
    key: SI-4
  - categories:
    - activity: 5.2.5 Real-Time Access Decisions
      phase: '3'
      tech: System
      type: Advanced
    key: SI-4(3)
  - categories:
    - activity: 5.2.4 Network Asset Discovery & Optimization
      phase: '3'
      tech: System
      type: Advanced
    key: SI-4(25)
  name: '5.2'
- mappings:
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4(21)
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 5.3.2 Base/Camp/Post/Station (B/C/P/S) Macro-segmentation
      phase: '2'
      tech: System/Organization
      type: Target
    key: CA-9
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 5.3.2 Base/Camp/Post/Station (B/C/P/S) Macro-segmentation
      phase: '2'
      tech: System/Organization
      type: Target
    key: CA-9(1)
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-2
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-2(1)
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 5.3.2 Base/Camp/Post/Station (B/C/P/S) Macro-segmentation
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-7
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 5.3.2 Base/Camp/Post/Station (B/C/P/S) Macro-segmentation
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-7(4)
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 5.3.2 Base/Camp/Post/Station (B/C/P/S) Macro-segmentation
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-7(5)
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 5.3.2 Base/Camp/Post/Station (B/C/P/S) Macro-segmentation
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-7(18)
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 5.3.2 Base/Camp/Post/Station (B/C/P/S) Macro-segmentation
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-7(21)
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 5.3.2 Base/Camp/Post/Station (B/C/P/S) Macro-segmentation
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-7(22)
  - categories:
    - activity: 5.3.1 Datacenter Macro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 5.3.2 Base/Camp/Post/Station (B/C/P/S) Macro-segmentation
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-7(29)
  name: '5.3'
- mappings:
  - categories:
    - activity: 5.4.1 Implement Micro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4
  - categories:
    - activity: 5.4.2 Application & Device Micro-segmentation
      phase: '2'
      tech: System
      type: Target
    key: AC-4(1)
  - categories:
    - activity: 5.4.3 Process Micro-segmentation
      phase: '3'
      tech: System
      type: Advanced
    key: AC-4(2)
  - categories:
    - activity: 5.4.1 Implement Micro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4(3)
  - categories:
    - activity: 5.4.1 Implement Micro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4(17)
  - categories:
    - activity: 5.4.3 Process Micro-segmentation
      phase: '3'
      tech: System
      type: Advanced
    key: SC-4
  - categories: []
    key: SC-7
  - categories:
    - activity: 5.4.1 Implement Micro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-7(12)
  - categories:
    - activity: 5.4.4 Protect Data in Transit
      phase: '2'
      tech: System
      type: Target
    key: SC-8
  - categories:
    - activity: 5.4.4 Protect Data in Transit
      phase: '2'
      tech: System
      type: Target
    key: SC-8(1)
  - categories:
    - activity: 5.4.4 Protect Data in Transit
      phase: '2'
      tech: System
      type: Target
    key: SC-13
  - categories:
    - activity: 5.4.3 Process Micro-segmentation
      phase: '3'
      tech: System
      type: Advanced
    key: SC-39
  name: '5.4'
- mappings:
  - categories:
    - activity: 5.4.3 Process Micro-segmentation
      phase: '3'
      tech: System
      type: Advanced
    key: SC-39(2)
  - categories: []
    key: SI-4
  - categories:
    - activity: 5.4.1 Implement Micro-segmentation
      phase: '1'
      tech: System/Organization
      type: Target
    key: SI-4(10)
  name: '5.4'
- mappings:
  - categories:
    - activity: 6.1.1 Policy Inventory & Development
      phase: D
      tech: System/Organization
      type: Target
    key: AC-1
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-2
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-2(11)
  - categories: []
    key: AC-4
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4(3)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4(6)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4(8)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4(10)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4(11)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4(19)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-4(29)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-6
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(1)
  name: '6.1'
- mappings:
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(2)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(3)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(4)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(6)
  - categories:
    - activity: 6.1.3 Enterprise Security Profile Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(7)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(9)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-16(10)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-24
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-24(1)
  - categories:
    - activity: 6.1.1 Policy Inventory & Development
      phase: D
      tech: System/Organization
      type: Target
    key: IA-1
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-16
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-16(1)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-16(2)
  - categories:
    - activity: 6.1.2 Organization Access Profile
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-16(3)
  name: '6.1'
- mappings:
  - categories:
    - activity: 6.2.1 Task Automation Analysis
      phase: D
      tech: Organization
      type: Target
    key: IR-4
  - categories:
    - activity: 6.2.1 Task Automation Analysis
      phase: D
      tech: Organization
      type: Target
    key: IR-4(1)
  name: '6.2'
- mappings:
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(1)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(2)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(3)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(4)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(6)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(7)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(8)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(9)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-16(10)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-2
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-3
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-8
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-9
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-9(4)
  name: '6.3'
- mappings:
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-10
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-12
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: PT-2
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: PT-2(1)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: PT-2(2)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: PT-3
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: PT-3(1)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: PT-3(2)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-16
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-16(1)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-16(2)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-16(3)
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-45
  - categories:
    - activity: 6.3.1 Implement Data Tagging & Classification ML Tools
      phase: '2'
      tech: System/Organization
      type: Target
    key: SC-45(1)
  name: '6.3'
- mappings:
  - categories: []
    key: IR-4
  - categories:
    - activity: 6.4.2 AI Driven by Analytics Decides Automation and Orchestration
        Modifications
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: IR-4(1)
  - categories:
    - activity: 6.4.2 AI Driven by Analytics Decides Automation and Orchestration
        Modifications
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: RA-3
  - categories:
    - activity: 6.4.2 AI Driven by Analytics Decides Automation and Orchestration
        Modifications
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: RA-3(4)
  name: '6.4'
- mappings:
  - categories:
    - activity: 6.5.2 Implement SOAR Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-2
  - categories:
    - activity: 6.5.2 Implement SOAR Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-3
  - categories:
    - activity: 6.5.2 Implement SOAR Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-8
  - categories:
    - activity: 6.5.2 Implement SOAR Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-9
  - categories:
    - activity: 6.5.2 Implement SOAR Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 6.5.2 Implement SOAR Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-10
  - categories:
    - activity: 6.5.2 Implement SOAR Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 6.5.2 Implement SOAR Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-12
  - categories:
    - activity: 6.5.1 Response Automation Analysis
      phase: D
      tech: Organization
      type: Target
    - activity: 6.5.3 Implement Playbooks
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: IR-4
  - categories:
    - activity: 6.5.3 Implement Playbooks
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: IR-4(1)
  - categories:
    - activity: 6.5.3 Implement Playbooks
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: IR-4(2)
  name: '6.5'
- mappings:
  - categories:
    - activity: 6.5.3 Implement Playbooks
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: IR-4(9)
  - categories:
    - activity: 6.5.1 Response Automation Analysis
      phase: D
      tech: Organization
      type: Target
    key: RA-7
  - categories: []
    key: SA-17
  - categories:
    - activity: 6.5.3 Implement Playbooks
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: SA-17(8)
  - categories:
    - activity: 6.5.2 Implement SOAR Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-45
  - categories:
    - activity: 6.5.2 Implement SOAR Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-45(1)
  name: '6.5'
- mappings:
  - categories:
    - activity: 6.6.2 Standardized API Calls & Schemas Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SA-15
  name: '6.6'
- mappings:
  - categories:
    - activity: 6.7.1 Workflow Enrichment Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: IR-4
  - categories:
    - activity: 6.7.1 Workflow Enrichment Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: IR-4(1)
  - categories:
    - activity: 6.7.1 Workflow Enrichment Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: IR-4(2)
  name: '6.7'
- mappings:
  - categories:
    - activity: 6.7.1 Workflow Enrichment Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: IR-4(9)
  - categories:
    - activity: 6.7.1 Workflow Enrichment Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: IR-4(14)
  - categories:
    - activity: 6.7.1 Workflow Enrichment Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: IR-5
  - categories:
    - activity: 6.7.4 Automated Workflow
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: IR-5(1)
  - categories:
    - activity: 6.7.1 Workflow Enrichment Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: IR-6
  - categories:
    - activity: 6.7.4 Automated Workflow
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: IR-6(1)
  - categories:
    - activity: 6.7.1 Workflow Enrichment Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: IR-6(2)
  - categories:
    - activity: 6.7.1 Workflow Enrichment Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: IR-8
  - categories: []
    key: SI-4
  - categories:
    - activity: 6.7.4 Automated Workflow
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: SI-4(7)
  - categories: []
    key: SI-7
  - categories:
    - activity: 6.7.1 Workflow Enrichment Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SI-7(7)
  name: '6.7'
- mappings:
  - categories: []
    key: AC-6
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AC-6(9)
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-2
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-3
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-3(1)
  name: '7.1'
- mappings:
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-3(3)
  - categories:
    - activity: 7.1.1 Scale Considerations
      phase: D
      tech: System/Organization
      type: Target
    key: AU-4
  - categories:
    - activity: 7.1.1 Scale Considerations
      phase: D
      tech: System/Organization
      type: Target
    key: AU-4(1)
  - categories:
    - activity: 7.1.1 Scale Considerations
      phase: D
      tech: System/Organization
      type: Target
    key: AU-5
  - categories:
    - activity: 7.1.3 Log Analysis
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-6
  - categories:
    - activity: 7.1.1 Scale Considerations
      phase: D
      tech: System/Organization
      type: Target
    - activity: 7.1.3 Log Analysis
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-7
  - categories:
    - activity: 7.1.1 Scale Considerations
      phase: D
      tech: System/Organization
      type: Target
    - activity: 7.1.3 Log Analysis
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-7(1)
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-8
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-9
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-10
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 7.1.1 Scale Considerations
      phase: D
      tech: System/Organization
      type: Target
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-11
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-12
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-12(2)
  - categories:
    - activity: 7.1.2 Log Parsing Name
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-12(3)
  - categories:
    - activity: 7.1.1 Scale Considerations
      phase: D
      tech: System/Organization
      type: Target
    key: CP-2
  - categories:
    - activity: 7.1.1 Scale Considerations
      phase: D
      tech: System/Organization
      type: Target
    key: CP-2(2)
  name: '7.1'
- mappings:
  - categories: []
    key: AC-2
  - categories:
    - activity: 7.2.3 Threat Alerting Part 3
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 7.2.5 User/Device Baselines
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-2(12)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-2
  name: '7.2'
- mappings:
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-3
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 7.2.4 Asset Identification (ID) & Alert Correlation
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-6
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-6(1)
  - categories:
    - activity: 7.2.2 Threat Alerting Part 2
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-6(3)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-6(4)
  - categories:
    - activity: 7.2.2 Threat Alerting Part 2
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-6(5)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-6(6)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 7.2.4 Asset Identification (ID) & Alert Correlation
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-8
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-9
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-9(4)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-10
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-10(1)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-11
  - categories:
    - activity: 7.2.5 User/Device Baselines
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-11(1)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-12
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 7.2.4 Asset Identification (ID) & Alert Correlation
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-12(1)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-12(2)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-12(3)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 7.2.4 Asset Identification (ID) & Alert Correlation
      phase: '1'
      tech: System/Organization
      type: Target
    key: IR-4
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 7.2.4 Asset Identification (ID) & Alert Correlation
      phase: '1'
      tech: System/Organization
      type: Target
    key: IR-4(1)
  - categories:
    - activity: 7.2.2 Threat Alerting Part 2
      phase: '2'
      tech: System/Organization
      type: Target
    key: IR-4(4)
  name: '7.2'
- mappings:
  - categories:
    - activity: 7.2.2 Threat Alerting Part 2
      phase: '2'
      tech: System/Organization
      type: Target
    key: IR-4(13)
  - categories: []
    key: SC-5
  - categories:
    - activity: 7.2.3 Threat Alerting Part 3
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-5(3)
  - categories:
    - activity: 7.2.3 Threat Alerting Part 3
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-26
  - categories:
    - activity: 7.2.3 Threat Alerting Part 3
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-44
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 7.2.4 Asset Identification (ID) & Alert Correlation
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-45
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    - activity: 7.2.4 Asset Identification (ID) & Alert Correlation
      phase: '1'
      tech: System/Organization
      type: Target
    key: SC-45(1)
  - categories:
    - activity: 7.2.3 Threat Alerting Part 3
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-48
  - categories:
    - activity: 7.2.3 Threat Alerting Part 3
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-48(1)
  - categories: []
    key: SI-3
  - categories:
    - activity: 7.2.3 Threat Alerting Part 3
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SI-3(10)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SI-4
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SI-4(1)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SI-4(2)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SI-4(5)
  - categories:
    - activity: 7.2.1 Threat Alerting Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SI-4(12)
  - categories:
    - activity: 7.2.4 Asset Identification (ID) & Alert Correlation
      phase: '1'
      tech: System/Organization
      type: Target
    key: SI-4(16)
  - categories:
    - activity: 7.2.4 Asset Identification (ID) & Alert Correlation
      phase: '1'
      tech: System/Organization
      type: Target
    key: SI-4(17)
  name: '7.2'
- mappings:
  - categories: []
    key: AC-2
  - categories:
    - activity: 7.3.2 Establish User Baseline Behavior
      phase: '2'
      tech: System/Organization
      type: Target
    key: AC-2(12)
  - categories:
    - activity: 7.3.1 Implement Analytics Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-6
  - categories:
    - activity: 7.3.1 Implement Analytics Tools
      phase: '1'
      tech: System/Organization
      type: Target
    key: AU-6(1)
  - categories: []
    key: AU-11
  - categories:
    - activity: 7.3.2 Establish User Baseline Behavior
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-11(1)
  name: '7.3'
- mappings:
  - categories: []
    key: AC-2
  - categories:
    - activity: 7.4.1 Baseline & Profiling Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 7.4.3 UEBA Baseline Support Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-2(12)
  - categories: []
    key: IR-4
  - categories:
    - activity: 7.4.1 Baseline & Profiling Part 1
      phase: '2'
      tech: System/Organization
      type: Target
    - activity: 7.4.3 UEBA Baseline Support Part 1
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: IR-4(13)
  name: '7.4'
- mappings:
  - categories: []
    key: AU-6
  - categories:
    - activity: 7.5.2 Cyber Threat Intelligence Program Part 2
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-6(5)
  name: '7.5'
- mappings:
  - categories:
    - activity: 7.5.2 Cyber Threat Intelligence Program Part 2
      phase: '2'
      tech: System/Organization
      type: Target
    key: AU-6(9)
  - categories:
    - activity: 7.5.2 Cyber Threat Intelligence Program Part 2
      phase: '2'
      tech: System/Organization
      type: Target
    key: PM-15
  - categories:
    - activity: 7.5.1 Cyber Threat Intelligence Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: PM-16
  - categories:
    - activity: 7.5.2 Cyber Threat Intelligence Program Part 2
      phase: '2'
      tech: System/Organization
      type: Target
    key: PM-16(1)
  - categories: []
    key: RA-3
  - categories:
    - activity: 7.5.1 Cyber Threat Intelligence Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: RA-3(3)
  - categories: []
    key: SI-4
  - categories:
    - activity: 7.5.1 Cyber Threat Intelligence Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SI-4(24)
  - categories:
    - activity: 7.5.1 Cyber Threat Intelligence Program Part 1
      phase: '1'
      tech: System/Organization
      type: Target
    key: SI-5
  name: '7.5'
- mappings:
  - categories: []
    key: AC-2
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    - activity: 7.6.2 AI-enabled Dynamic Access Control
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: AC-2(6)
  - categories:
    - activity: 7.6.2 AI-enabled Dynamic Access Control
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: AC-2(11)
  - categories:
    - activity: 7.6.2 AI-enabled Dynamic Access Control
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: AC-3
  - categories:
    - activity: 7.6.2 AI-enabled Dynamic Access Control
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: AC-3(8)
  - categories:
    - activity: 7.6.2 AI-enabled Dynamic Access Control
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: AC-3(11)
  name: '7.6'
- mappings:
  - categories:
    - activity: 7.6.2 AI-enabled Dynamic Access Control
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: AC-3(13)
  - categories: []
    key: AC-16
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(1)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(2)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(3)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(4)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(6)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(7)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(8)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(9)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-16(10)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-17
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-17(1)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-17(9)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-24
  name: '7.6'
- mappings:
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: AC-24(1)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: IA-10
  - categories: []
    key: RA-3
  - categories:
    - activity: 7.6.2 AI-enabled Dynamic Access Control
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: RA-3(4)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-16
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-16(1)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-16(2)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-16(3)
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-45
  - categories:
    - activity: 7.6.1 AI-enabled Network Access
      phase: '3'
      tech: System/Organization
      type: Advanced
    key: SC-45(1)
  - categories: []
    key: SI-4
  - categories:
    - activity: 7.6.2 AI-enabled Dynamic Access Control
      phase: '4'
      tech: System/Organization
      type: Advanced
    key: SI-4(3)
  name: '7.6'