Configuration management practices are established and applied

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0003 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps DE-0003 to countermeasure CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0003.03 against CM-5 Access Restrictions for Change; CM-7 Least Functionality, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps DE-0003.03 to countermeasure CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0003.04 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps DE-0003.04 to countermeasure CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0003.05 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps DE-0003.05 to countermeasure CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0003.06 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps DE-0003.06 to countermeasure CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0003.07 against CM-5 Access Restrictions for Change; CM-7 Least Functionality, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps DE-0003.07 to countermeasure CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0003.09 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps DE-0003.09 to countermeasure CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records DE-0003.11 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps DE-0003.11 to countermeasure CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0003 against CM-3 Configuration Change Control; CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0003 to countermeasure CM0030 Crypto Key Management, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0005.02 against CM-7 Least Functionality, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0005.02 to countermeasure CM0043 Backdoor Commands, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0006 against CM-5 Access Restrictions for Change; CM-7 Least Functionality, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0006 to countermeasure CM0043 Backdoor Commands, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012 against CM-3 Configuration Change Control; CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0012 to countermeasure CM0039 Least Privilege; CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.01 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0012.01 to countermeasure CM0039 Least Privilege; CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.02 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0012.02 to countermeasure CM0039 Least Privilege; CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.04 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0012.04 to countermeasure CM0039 Least Privilege; CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.05 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0012.05 to countermeasure CM0039 Least Privilege; CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.07 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0012.07 to countermeasure CM0039 Least Privilege; CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.08 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0012.08 to countermeasure CM0039 Least Privilege; CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.09 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0012.09 to countermeasure CM0039 Least Privilege; CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.10 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0012.10 to countermeasure CM0039 Least Privilege; CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EX-0012.11 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EX-0012.11 to countermeasure CM0039 Least Privilege; CM0069 Process White Listing, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records EXF-0004 against CM-7 Least Functionality, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps EXF-0004 to countermeasure CM0030 Crypto Key Management, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records PER-0001 against CM-3 Configuration Change Control, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps PER-0001 to countermeasure CM0023 Configuration Management, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records PER-0002 against CM-3 Configuration Change Control, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps PER-0002 to countermeasure CM0004 Development Environment Security; CM0007 Software Version Numbers; CM0010 Update Software, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records PER-0002.01 against CM-7 Least Functionality, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps PER-0002.01 to countermeasure CM0043 Backdoor Commands, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.

Supported by two independent derivations that agree, neither of them SafeMode's invention. Through NIST 800-53: SafeMode's curated mapping records PER-0004 against CM-5 Access Restrictions for Change, and CSF 2.0's own crosswalk names that control as an informative reference for PR.PS-01. Through SPARTA: SPARTA's catalog maps PER-0004 to countermeasure CM0030 Crypto Key Management, and that countermeasure's own CSF references include PR.PS-01. Recorded as `addresses` rather than `mitigates` because a CSF subcategory states an outcome to be achieved while the underlying control states the mechanism that achieves it, which is the mechanism-versus-mandate ceiling in decisions entry 15. PR.PS-01 is one of CSF's broader outcomes, so this edge locates the technique within CSF's structure rather than naming a specific defence.