Policy and Inventory

Generating Inventories

Use authoritative sources to automatically generate real-time inventories of all information resources when needed.

Reviewing Executive Support

Persistently review executive support for achieving the organization's security objectives.

Reviewing Investments in Security

Persistently review the effectiveness of the organization's investments in achieving security objectives.

Reviewing Security in the SDLC

Persistently review the effectiveness of building security and privacy considerations into the Software Development Lifecycle and aligning with CISA Secure By Design principles.

Reviewing Vulnerability Disclosures

Persistently review the effectiveness of the provider's vulnerability disclosure program.