AC-1 Policy And Procedures
ViewAC-4 Information Flow Enforcement
ViewMitigations
MI-16Preserving Source Data Access Controls in AI Systems
MI-17AI Firewall Implementation and Management
MI-01AI Data Leakage Prevention and Detection
MI-22Multi-Agent Isolation and Segmentation
MI-02Data Filtering From External Knowledge Bases
MI-03User/App/Model Firewalling/Filtering
MI-06Data Quality & Classification/Sensitivity
AC-5 Separation Of Duties
ViewAC-19 Access Control For Mobile Devices
ViewMitigations
AC-20 Use Of External Systems
ViewAC-21 Information Sharing
ViewAC-22 Publicly Accessible Content
ViewAT-2 Literacy Training And Awareness
ViewAT-3 Role-based Training
ViewMitigations
AU-3 Content Of Audit Records
ViewAU-6 Audit Record Review, Analysis, And Reporting
ViewMitigations
MI-12Role-Based Access Control for AI Data
MI-15Using Large Language Models for Automated Evaluation (LLM-as-a-Judge)
MI-16Preserving Source Data Access Controls in AI Systems
MI-21Agent Decision Audit and Explainability
MI-23Agentic System Credential Protection Framework
MI-04AI System Observability
AU-10 Non-repudiation
ViewAU-11 Audit Record Retention
ViewMitigations
AU-12 Audit Record Generation
ViewMitigations
AU-13 Monitoring For Information Disclosure
ViewMitigations
CA-2 Control Assessments
ViewCA-3 Information Exchange
ViewCA-6 Authorization
ViewMitigations
CA-7 Authorization
ViewMitigations
MI-11Human Feedback Loop for AI Systems
MI-15Using Large Language Models for Automated Evaluation (LLM-as-a-Judge)
MI-16Preserving Source Data Access Controls in AI Systems
MI-01AI Data Leakage Prevention and Detection
MI-21Agent Decision Audit and Explainability
MI-04AI System Observability
MI-06Data Quality & Classification/Sensitivity
MI-08Quality of Service (QoS) and DDoS Prevention for AI Systems
MI-09AI System Alerting and Denial of Wallet (DoW) / Spend Monitoring
CA-8 Penetration Testing
ViewCM-2 Baseline Configuration
ViewMitigations
CM-3 Configuration Change Control
ViewCM-4 Impact Analyses
ViewCM-7 Least Functionality
ViewCM-8 System Component Inventory
ViewMitigations
CM-12 Information Location
ViewMitigations
CM-13 Data Action Mapping
ViewMitigations
CP-9 System Backup
ViewMitigations
IA-2 Identification And Authentication (organizational Users)
ViewMitigations
IA-4 Identifier Management
ViewMitigations
IA-5 Authenticator Management
ViewIR-5 Incident Monitoring
ViewMitigations
IR-6 Incident Reporting
ViewIR-9 Information Spillage Response
ViewMitigations
MP-6 Media Sanitization
ViewPM-11 Mission And Business Process Definition
ViewMitigations
PM-22 Personally Identifiable Information Quality Management
ViewMitigations
PM-23 Data Governance Body
ViewMitigations
PM-26 Complaint Management
ViewMitigations
PM-30 Supply Chain Risk Management Strategy
ViewPS-7 External Personnel Security
ViewPT-2 Authority To Process Personally Identifiable Information
ViewRA-2 Security Categorization
ViewMitigations
RA-3 Risk Assessment
ViewRA-5 Vulnerability Monitoring And Scanning
ViewMitigations
RA-10 Threat Hunting
ViewSA-4 Acquisition Process
ViewSA-8 Security And Privacy Engineering Principles
ViewSA-9 External System Services
ViewSA-10 Developer Configuration Management
ViewMitigations
SA-11 Developer Testing And Evaluation
ViewSA-22 Unsupported System Components
ViewMitigations
SC-3 Security Function Isolation
ViewMitigations
SC-4 Information In Shared System Resources
ViewMitigations
SC-6 Resource Availability
ViewSC-8 Transmission Confidentiality And Integrity
ViewSC-12 Cryptographic Key Establishment And Management
ViewMitigations
SC-13 Cryptographic Protection
ViewMitigations
SC-28 Protection Of Information AT Rest
ViewSC-32 System Partitioning
ViewMitigations
SI-2 Flaw Remediation
ViewSI-3 Malicious Code Protection
ViewMitigations
SI-4 System Monitoring
ViewMitigations
MI-11Human Feedback Loop for AI Systems
MI-15Using Large Language Models for Automated Evaluation (LLM-as-a-Judge)
MI-16Preserving Source Data Access Controls in AI Systems
MI-17AI Firewall Implementation and Management
MI-01AI Data Leakage Prevention and Detection
MI-20MCP Server Security Governance
MI-24Human-in-the-Loop Action Approval Gate
MI-02Data Filtering From External Knowledge Bases
MI-03User/App/Model Firewalling/Filtering
MI-04AI System Observability
MI-08Quality of Service (QoS) and DDoS Prevention for AI Systems
MI-09AI System Alerting and Denial of Wallet (DoW) / Spend Monitoring
SI-6 Security And Privacy Function Verification
ViewMitigations
SI-7 Software, Firmware, And Information Integrity
ViewMitigations
MI-13Providing Citations and Source Traceability for AI-Generated Information
MI-15Using Large Language Models for Automated Evaluation (LLM-as-a-Judge)
MI-16Preserving Source Data Access Controls in AI Systems
MI-25Skill/Plugin Integrity and Governance
MI-04AI System Observability
MI-06Data Quality & Classification/Sensitivity
SI-12 Information Management And Retention
ViewSI-13 Predictable Failure Prevention
ViewSI-15 Information Output Filtering
ViewSI-18 Personally Identifiable Information Quality Operations
ViewMitigations
SI-19 De-identification
ViewSI-20 Tainting
ViewMitigations