cm/controlmapping
Sources
NIST CSF 2.0 · Identify (ID)
ID.RA-02

Cyber threat intelligence is received from information sharing forums and sources

frameworkNIST Cybersecurity Framework 2.0 sectionIdentify (ID) topicsThreat Intelligence frameworks4 2 1 6

Wrong or missing mapping? Report it

Equivalents of ID.RA-02 in other frameworks
FrameworkRequirementTitleLinkSource / reason
ISO 27001A.5.7Threat intelligenceCrosswalkSame topic: Threat Intelligence
2 loosely related (not mappings)
A.5.22 Monitoring, review and change management of supplier services Loosely related
Only shares CSF ID.RA-02: related, not a mapping
A.8.16 Monitoring activities Loosely related
Only shares CSF ID.RA-02: related, not a mapping
CIS v8.1—No requirementNo mapping in our dataNo mapping in our data (most CIS links are editorial: CIS's published crosswalk covers 49 of 153 safeguards).
SOC 2—No requirementNo mapping in our dataNo mapping in our data (SOC 2 links are editorial only).
PCI DSS6.3.1Vulnerabilities identified and risk-rankedCrosswalkSame topic: Threat Intelligence
CMMCSI.L2-3.14.3Security Alerts & AdvisoriesCrosswalkSame topic: Threat Intelligence
1 loosely related (not mappings)
RA.L2-3.11.1 Risk Assessments Loosely related
Only shares CSF ID.RA-02: related, not a mapping
800-53PM-15PM-16SI-5Security and Privacy Groups and Associations; Threat Awareness Program…CrosswalkSame topic: Threat Intelligence
HIPAA—No requirementNo mapping in our dataNo mapping in our data.
GDPR—No requirementNo mapping in our dataNo mapping in our data (only GDPR's security articles are mapped, editorially).
NIS22.16.10Risk management framework; Vulnerability handling and disclosureLoosely relatedNo mapping. Only shares CSF ID.RA-02: related, not a mapping
Essential Eight—No requirementNo mapping in our dataNo mapping in our data (Essential Eight links are editorial only).
DORAArt.8(2)Art.13(1)Art.45(1)Identification; Learning and evolving…EditorialSame topic: Threat Intelligence (editorial pick)
CPS 234Para 17Keep capability current as threats and vulnerabilities changeEditorialSame topic: Threat Intelligence (editorial pick)
Cyber Essentials—No requirementNo mapping in our dataNo mapping in our data (Cyber Essentials covers five technical controls only).

Crosswalk a published crosswalk (NIST, ENISA, CIS, PCI SSC) makes the link · Editorial ControlMapping's judgement where no crosswalk exists; the reason is shown · Loosely related only shares a CSF 2.0 outcome: worth checking, not a mapping · No mapping in our data nothing mapped in our data; often new work, but check the coverage notes. How links are sourced.