800-53 · SI System and Information Integrity
SI-5
Security Alerts, Advisories, and Directives
frameworkNIST SP 800-53 Rev 5.2
sectionSI System and Information Integrity
csf 2.0ID.RA-01 ID.RA-02 ID.RA-03
topicsThreat Intelligence
frameworks4 2 0
Official texta. Receive system security alerts, advisories, and directives from [Assignment: organization-defined external organizations] on an ongoing basis;
b. Generate internal security alerts, advisories, and directives as deemed necessary;
c. Disseminate security alerts, advisories, and directives to: [Selection (one or more): [Assignment: organization-defined personnel or roles]; [Assignment: organization-defined elements]; [Assignment: organization-defined external organizations] ]; and
d. Implement security directives in accordance with established time frames, or notify the issuing organization of the degree of noncompliance.NIST SP 800-53 Rev 5.2 control statement (public domain)
b. Generate internal security alerts, advisories, and directives as deemed necessary;
c. Disseminate security alerts, advisories, and directives to: [Selection (one or more): [Assignment: organization-defined personnel or roles]; [Assignment: organization-defined elements]; [Assignment: organization-defined external organizations] ]; and
d. Implement security directives in accordance with established time frames, or notify the issuing organization of the degree of noncompliance.NIST SP 800-53 Rev 5.2 control statement (public domain)
Wrong or missing mapping? Report it
| Framework | Requirement | Title | Link | Source / reason |
|---|---|---|---|---|
| NIST CSF 2.0 | DE.AE-07ID.RA-02ID.RA-03 | Cyber threat intelligence and other contextual information are integrated into the analysis; Cyber threat intelligence is received from information sharing forums and sources… | Crosswalk | Same topic: Threat Intelligence1 loosely related (not mappings)ID.RA-01 Vulnerabilities in assets are identified, validated, and recorded Only shares CSF ID.RA-01: related, not a mapping |
| ISO 27001 | A.5.7A.5.6A.8.8 | Threat intelligence; Contact with special interest groups… | Crosswalk | Same topic: Threat Intelligence NIST SP 800-53 → ISO 27001 mapping 5 loosely related (not mappings)A.5.22 Monitoring, review and change management of supplier services Only shares CSF ID.RA-02, ID.RA-03: related, not a mapping |
| CIS v8.1 | CIS 7.1CIS 7.5CIS 7.6CIS 7.7 | Establish and Maintain a Vulnerability Management Process; Perform Automated Vulnerability Scans of Internal Enterprise Assets… | No mapping. Only shares CSF ID.RA-01: related, not a mapping+6 more loosely related (not mappings)CIS 16.6 Establish and Maintain a Severity Rating System and Process for Application Vulnerabilities Only shares CSF ID.RA-01: related, not a mapping CIS 18.1 Establish and Maintain a Penetration Testing Program Only shares CSF ID.RA-01: related, not a mapping CIS 18.2 Perform Periodic External Penetration Tests Only shares CSF ID.RA-01: related, not a mapping …and 2 more in the downloads | |
| SOC 2 | CC3.2CC3.3CC3.4CC7.1 | Risk identification and analysis; Considering the potential for fraud… | No mapping. Only shares CSF ID.RA-03, ID.RA-01: related, not a mapping | |
| PCI DSS | 6.3.1 | Vulnerabilities identified and risk-ranked | Crosswalk | Same topic: Threat Intelligence5 loosely related (not mappings)6.3.2 Inventory of custom software and its components Only shares CSF ID.RA-01: related, not a mapping 11.3.1 Internal vulnerability scans every three months Only shares CSF ID.RA-01: related, not a mapping 11.4.4 Penetration test findings corrected and retested Only shares CSF ID.RA-01: related, not a mapping 12.3.1 Targeted risk analysis for flexible-frequency requirements Only shares CSF ID.RA-03: related, not a mapping |
| CMMC | SI.L2-3.14.3SI.L2-3.14.1SI.L2-3.14.2 | Security Alerts & Advisories; Flaw Remediation… | Crosswalk | Same topic: Threat Intelligence NIST SP 800-171r2 Appendix D 8 loosely related (not mappings) |
| HIPAA | §164.308(a)(1)(ii)(A)§164.308(a)(1)(ii)(B)§164.316(a)§164.308(a)(1)(ii)(D) | Risk Analysis; Risk Management… | No mapping. Only shares CSF ID.RA-01, ID.RA-03: related, not a mapping+2 more loosely related (not mappings) | |
| GDPR | Art.32(1)(d)Art.35(1)Art.35(7) | Security of processing; Data protection impact assessment… | No mapping. Only shares CSF ID.RA-01, ID.RA-03: related, not a mapping | |
| NIS2 | 2.16.106.5 | Risk management framework; Vulnerability handling and disclosure… | No mapping. Only shares CSF ID.RA-01, ID.RA-02, ID.RA-03: related, not a mapping | |
| Essential Eight | ISM-0304ISM-1407ISM-1501ISM-1690 | Applications other than office productivity suites, web browsers and their extensions…; The latest release, or the previous release, of operating systems are used… | No mapping. Only shares CSF ID.RA-01: related, not a mapping+25 more loosely related (not mappings)ISM-1691 Patches, updates or other vendor mitigations for vulnerabilities in office productivity suites, web browsers and their extensions, email clients, PDF applications, and security products are applied within two weeks of release Only shares CSF ID.RA-01: related, not a mapping ISM-1692 Patches, updates or other vendor mitigations for vulnerabilities in office productivity suites, web browsers and their extensions, email clients, PDF applications, and security products are applied within 48… Only shares CSF ID.RA-01: related, not a mapping ISM-1693 Patches, updates or other vendor mitigations for vulnerabilities in applications other… Only shares CSF ID.RA-01: related, not a mapping ISM-1694 Patches, updates or other vendor mitigations for vulnerabilities in operating systems of internet-facing servers and internet-facing network devices are applied within two weeks… Only shares CSF ID.RA-01: related, not a mapping …and 21 more in the downloads | |
| DORA | Art.8(2)Art.13(1)Art.45(1) | Identification; Learning and evolving… | Editorial | Same topic: Threat Intelligence (editorial pick) |
| CPS 234 | Para 17 | Keep capability current as threats and vulnerabilities change | Editorial | Same topic: Threat Intelligence (editorial pick)3 loosely related (not mappings)Para 21 Timely controls commensurate with risk and asset life-cycle Only shares CSF ID.RA-03: related, not a mapping Para 27 Systematic testing programme for control effectiveness Only shares CSF ID.RA-01: related, not a mapping Para 30 Testing by skilled, functionally independent specialists Only shares CSF ID.RA-01: related, not a mapping |
| Cyber Essentials | CE 3 | Security Update Management | No mapping. Only shares CSF ID.RA-01: related, not a mapping |
Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.