
PR.PT-2: Protective Technology
Removable media is protected and its use restricted according to policy.

PR.PT-1: Protective Technology
Audit/log records are determined, documented, implemented, and reviewed in accordance with policy.


—ID.BE-5: Business Environment
Resilience requirements to support delivery of critical services are established.

—ID.BE-4: Business Environment
Dependencies and critical functions for delivery of critical services are established.

ID.BE-3: Business Environment
Priorities for organizational mission, objectives, and activities are established and communicated.

ID.BE-2 Business Environment-2
The organization’s place in critical infrastructure and its industry sector is identified and communicated.

Identity Management, Authentication and Access Control
The organization’s role in the supply chain is identified and communicated.

Asset Management-6
Cybersecurity roles and responsibilities for the entire workforce and third-party stakeholders are established.