Labels

Something isn't working

Improvements or additions to documentation

This issue or pull request already exists

New feature or request

Good for newcomers

Extra attention is needed

HIPAA compliance related

This doesn't seem right

NIST 800-171 compliance related

NIST 800-53 compliance related

1 ID 2 Perm 3 CUI 4 Privsep 5-7 Least 8/10/11 Lock 9 Notice 12-15 VPN 16-19 Mob 20 VDI 21 USB 22 Pub

171: 3.2 AWARENESS AND TRAINING 3.2.1 Awareness, 3.2.2 Training, 3.2.3 Insider

171: 3.3 AUDIT AND ACCOUNTABILITY 3.3.1 Audit log, 3.3.2 Audit log identities, 3.3.7 NTP

171: 3.12 SECURITY ASSESSMENT fka Cert and Accred 3.12.1 Meta 3.12.2 POAM 3.12.3 ConMon 3.12.4 SSP

171: 3.4.1 Repo 3.4.2 Harden 3.4.3 CCB/Git 3.4.4 PR 3.4.5 Gitop 3.4.6/7/8 Minimal 3.4.9 User install

171: 3.5 IDENTIFICATION AND AUTHENTICATION 3.5.1 Who, 3.5.2 Authenticate, 3.5.3 MFA

171: 3.6 INCIDENT RESPONSE 3.6.1 Do it, 3.6.2 Who, 3.6.3 Test

171: 3.7 MAINTENANCE 3.7.1 Do it, 3.7.2 Tool, 3.7.3 Sanitize, 3.7.4 Verify, 3.7.5 MFA, 3.7.6 Vendor

171: 3.8 MEDIA PROTECTION 3.8.1 Catalog, lock, encrypt 3.8.2 Users 3.8.3 Sanitize

171: 3.10 PHYSICAL PROTECTION (53: PHY + ENV) 3.10.1 Equipment 3.10.2 Facility 3.10.6 WFH

171: 3.9 PERSONNEL SECURITY 3.9.1 Background Check 3.9.2 Firing

171: 3.11 RISK ASSESSMENT 3.11.1 Assess, 3.11.2 Vulnerability scan, 3.11.3 Vulnerability remediate

171: 3.13 SYSTEM AND COMMUNICATIONS PROTECTION 3.13.1 Firewall/Virt/Crypt 3.13.2 SDLC/Security Eng

171: 3.14 SYSTEM AND INFORMATION INTEGRITY 3.14.1 Patch, 3.14.2 SIEM/EDR/AV, 3.14.3 CVE

This is an arthiectural decision record

This is a production change request

This is technical documentation

This is a policy document

Further information is requested

This will not be worked on