The confidentiality, integrity, and availability of data-at-rest are protected

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0002.02 against SI-4 System Monitoring, and CSF 2.0's own crosswalk names that control as an informative reference for PR.DS-01. Through SPARTA: SPARTA's catalog maps DE-0002.02 to countermeasure CM0002 COMSEC, and that countermeasure's own CSF references include PR.DS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0006 against SI-7 Software, Firmware, and Information Integrity, and CSF 2.0's own crosswalk names that control as an informative reference for PR.DS-01. Through SPARTA: SPARTA's catalog maps EX-0006 to countermeasure CM0002 COMSEC, and that countermeasure's own CSF references include PR.DS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EXF-0004 against SI-4 System Monitoring, and CSF 2.0's own crosswalk names that control as an informative reference for PR.DS-01. Through SPARTA: SPARTA's catalog maps EXF-0004 to countermeasure CM0002 COMSEC; CM0030 Crypto Key Management, and that countermeasure's own CSF references include PR.DS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EXF-0010 against SI-4 System Monitoring, and CSF 2.0's own crosswalk names that control as an informative reference for PR.DS-01. Through SPARTA: SPARTA's catalog maps EXF-0010 to countermeasure CM0002 COMSEC; CM0030 Crypto Key Management, and that countermeasure's own CSF references include PR.DS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records IA-0005 against SI-4 System Monitoring, and CSF 2.0's own crosswalk names that control as an informative reference for PR.DS-01. Through SPARTA: SPARTA's catalog maps IA-0005 to countermeasure CM0002 COMSEC, and that countermeasure's own CSF references include PR.DS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records REC-0005.04 against SI-4 System Monitoring, and CSF 2.0's own crosswalk names that control as an informative reference for PR.DS-01. Through SPARTA: SPARTA's catalog maps REC-0005.04 to countermeasure CM0002 COMSEC, and that countermeasure's own CSF references include PR.DS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15.