Networks and environments are protected from unauthorized logical access and usage

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0002.03 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps DE-0002.03 to countermeasure CM0070 Alternate Communications Paths, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.01 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.01 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.02 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.02 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.03 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.03 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.04 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.04 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.05 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.05 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.06 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.06 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.07 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.07 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.08 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.08 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.09 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.09 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.10 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.10 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.11 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.11 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.12 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps EX-0012.12 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records IA-0003 against AC-4 Information Flow Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps IA-0003 to countermeasure CM0055 Secure Command Mode(s), and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records IA-0005 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps IA-0005 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records IA-0005.02 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps IA-0005.02 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records IA-0008.02 against AC-4 Information Flow Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps IA-0008.02 to countermeasure CM0055 Secure Command Mode(s), and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records IA-0011 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps IA-0011 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records LM-0002 against SC-7 Boundary Protection, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps LM-0002 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records LM-0003 against AC-4 Information Flow Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps LM-0003 to countermeasure CM0055 Secure Command Mode(s), and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records LM-0004 against AC-3 Access Enforcement, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps LM-0004 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records LM-0006 against AC-3 Access Enforcement; SC-7 Boundary Protection, and CSF 2.0's own crosswalk names that control as an informative reference for PR.IR-01. Through SPARTA: SPARTA's catalog maps LM-0006 to countermeasure CM0038 Segmentation, and that countermeasure's own CSF references include PR.IR-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.IR-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.