External service provider activities and services are monitored to find potentially adverse events
Parent: DE.CM
Description
No description available.
Mapped SPARTA techniques
2 techniques
Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records IA-0012 against PS-7 External Personnel Security, and CSF 2.0's own crosswalk names that control as an informative reference for DE.CM-06. Through SPARTA: SPARTA's catalog maps IA-0012 to countermeasure CM0005 Ground-based Countermeasures, and that countermeasure's own CSF references include DE.CM-06. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.
Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records REC-0008.04 against PS-7 External Personnel Security, and CSF 2.0's own crosswalk names that control as an informative reference for DE.CM-06. Through SPARTA: SPARTA's catalog maps REC-0008.04 to countermeasure CM0005 Ground-based Countermeasures, and that countermeasure's own CSF references include DE.CM-06. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.
Cross-framework references
Relationships published by the source frameworks themselves, reproduced here with attribution. They are not SafeMode Space mappings and carry no confidence rating of ours.
Crosswalks to 5 in NIST SP 800-53 Rev. 5
Cite as SafeMode Space, csf-2-0 DE.CM-06.