{"text_format":"2","workbook":"xlsx","n_sheets":1,"sheets":["Control Mapping"],"not_rendered":{"charts":0,"images":0,"macros":0,"external_links":0,"defined_names":1,"comments":0,"pivot_tables":0},"unopened":[],"bounds":{"document_bytes":16777216,"sheet_cells":100000,"run_cost":"one","rows_first":2000,"rows_last":500,"rows_between":2000,"halvings":0,"cell_chars":16384,"cell_head_chars":4096},"cells_cut":0,"cells_raw":0,"read":"whole","date_system":"1900"}

{"sheet":"Control Mapping","index":0,"n_rows":610,"n_cols":23,"rows_kept":610,"cut":false,"hidden":false,"merged":[[2,0,2,14],[559,0,559,14],[501,0,501,14],[387,0,387,14],[369,0,369,14],[452,0,452,14],[219,0,219,14],[327,0,327,14],[417,0,417,14],[529,0,529,14]]}
["ENISA Control Mapping"]
["Control areas and sub-domains","UCF Control ID","ISF Standard 2007 [I34]","CobiT [I27]","ISO/IEC 24762:2008 Guidelines for ICT and disaster recovery services [I12]","ISO/IEC 27001 [I23]","ISO/IEC 27002 [I24]","ITIL Service Support [I15]","ITIL Security Management [I15]","IT Baseline Protection Manual Germany [G10]","BS 25999-1 Guide to Business Continuity Management [I10]","NIST 800-34 [G29]","NIST 800-61 [G30]","PCI DSS 1.2 [I28]","FIPS-200 [M50]","ITU-T X.1056 (01/2009) [I18]","ITU-T X.800 (1991) [I21]","ITU-T X.805 (10/2003) [I31]","UK NICC ND 1643 [M46]","ISO/IEC 27005 Information security risk management [I25]","ISO/IEC 27011 Information security management guidelines for telecommunications [I26]","ITU-T X.1051 (02/2008) [I29]","KATAKRI (FI) [G5]"]
["1.  Governance and Risk Management"]
["1.1. Analyse and document organizational objectives, functions, and activities. ","00598, 00604",{"$f":"COUNTA(C5:C7)-COUNTIF(C5:C7, \"*-*\")","v":1},{"$f":"COUNTA(D5:D7)-COUNTIF(D5:D7, \"*-*\")","v":3},{"$f":"COUNTA(E5:E7)-COUNTIF(E5:E7, \"*-*\")","v":1},0,0,0,0,0,0,0,0,0,0,{"$f":"COUNTA(P5:P7)-COUNTIF(P5:P7, \"*-*\")","v":0},{"$f":"COUNTA(Q5:Q7)-COUNTIF(Q5:Q7, \"*-*\")","v":0},{"$f":"COUNTA(R5:R7)-COUNTIF(R5:R7, \"*-*\")","v":0},{"$f":"COUNTA(S5:S7)-COUNTIF(S5:S7, \"*-*\")","v":0}]
[null,null,"SM2.2.4","DS11.1","§ 9.2.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"-","ME4.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"-","PO3.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["1.2. Establish and maintain the organizational compliance framework and controls for your organization.","01241, 00688, 00689, 00691-00694, 01260, 00695, 01636, 00813",{"$f":"COUNTA(C9:C35)-COUNTIF(C9:C35, \"*-*\")","v":27},{"$f":"COUNTA(D9:D35)-COUNTIF(D9:D35, \"*-*\")","v":5},2,3,2,0,0,0,2,1,0,2,1,0,0,0,1]
[null,null,"NW1.3.1","PO1.3","§ 6.14.9","§ 5.2.1","§ 7.1.1","-","-","-","§ 5.4.1","§ 3.1","-","§ 9.9.1","§ 3","-","-","-","13.1"]
[null,null,"SM3.5.1","PO 6.2","§ 7.14.6","§ 4.2.1a","§ 10.7.4","-","-","-","§ 10.1","-","-","§ 12","-","-","-","-","-"]
[null,null,"SM3.5.3","ME3.1","-","A.7.1.1","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.3.6","ME3.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.3.7","PO6.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB4.2.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI1.3.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI1.3.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI1.3.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI2.5.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW5.1.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB4.2.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.1.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.1.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.1.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.1.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB4.3.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW1.4.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW1.4.2b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW2.3.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM6.5.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.3.1c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI1.3.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM3.5.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB2.1.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.1.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM1.1.1c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["1.3. Establish, maintain and adopt a high-level IT plan. ","00628, 00608-00609, 01179, 00633-00634, 01609, 00871, 01444, 00824, 00814-00817, 01406",{"$f":"COUNTA(C37:C53)-COUNTIF(C37:C53, \"*-*\")","v":17},{"$f":"COUNTA(D37:D53)-COUNTIF(D37:D53, \"*-*\")","v":15},5,9,7,0,6,0,3,1,0,1,1,1,0,0,4]
[null,null,"SM2.2.2","PO1.4","§ 5.12","§ 5.1","§ 6.1.2","-","§ 5.1","-","§ 6.7","§ 3.1","-","§ 12.5.1","§ 3","5.3.1","-","-","5.1"]
[null,null,"CI1.1","PO1.3","§ 6.14.11","§ 4.2.3f","§ 5.1.2","-","§ 5.2.3","-","§ 7.10","-","-","-","-","-","-","-","6.1"]
[null,null,"NW1.1","PO1.5","§ 7.5.1"," A.6.1.1","§ 10.8.5","-","§ 3.4.5","-","§ 8.3.5","-","-","-","-","-","-","-","4.1"]
[null,null,"SD1.1","PO1.6","§ 5.12","§ 4.2.1j","§ 5.1.1","-","§ 5.2.5","-","-","-","-","-","-","-","-","-","6.4"]
[null,null,"SM1.1.1","ME4.2","§ 6.3.14","§ 4.2.1b","§ 6.1","-","§ 2.2.3","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM1.1.4","PO1.1","-","§ 4.3.2","§ 6.1.1","-","§ 4.2.3.2","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.1.5","DS6.1","-","§ 4.2.2b","§ 6.1.8","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM6.6.4","DS6.2","-","§ 5.2.1","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.1.3e","DS6.3","-","§ 4.2.3g","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM1.3.6","PO4.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI1.1.4","PO4.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW1.1.4","PO1.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM1.2.3d","PO6.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM1.2.4b","PO6.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB2.3.5c","PO6.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW3.2.5c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM1.2.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["1.4. Define an IT security policy. ","00812, 00820, 00823, 01362-01363",{"$f":"COUNTA(C55:C88)-COUNTIF(C55:C88, \"*-*\")","v":34},{"$f":"COUNTA(D55:D88)-COUNTIF(D55:D88, \"*-*\")","v":2},2,3,3,0,2,0,1,0,2,5,1,0,0,0,2]
[null,null,"SM1.2.1","PO6.3","§ 9.2.4","A.5.1.1","§ 5.1","-","§ 3.1.1","-","§ 10.2","-","§ 3.1.2","§ 12.1","§ 3","-","-","-","4.1"]
[null,null,"SM2.4.1","PO6.5","§ 6.3.9e","§ 4.2.2e","§ 8.2.2","-","§ 4.2.2.2","-","-","-","§ 7.2.2","§ 12.6","-","-","-","-","6.3"]
[null,null,"SM2.4.4","-","-","§ 4.3.1","§ 5.1.1","-","-","-","-","-","-","§ 12.1.1","-","-","-","-","-"]
[null,null,"SM1.2.7","-","-","-","-","-","-","-","-","-","-","§ 12.6.2","-","-","-","-","-"]
[null,null,"CB3.4.4","-","-","-","-","-","-","-","-","-","-","§ 12.6.1","-","-","-","-","-"]
[null,null,"CI5.2.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.2.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD2.2.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.2.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM1.2.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM2.2.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI4.1.2a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB3.4.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB3.4.2c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB3.4.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB3.4.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.2.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.2.2c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.2.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.2.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.2.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.2.2c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.2.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.2.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD2.2.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD2.2.2c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD2.2.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD2.2.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.2.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.2.2c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.2.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.2.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.1.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD2.2.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["1.5. Establish usage and proper behaviour policies. ","01350",{"$f":"COUNTA(C90:C113)-COUNTIF(C90:C113, \"*-*\")","v":24},{"$f":"COUNTA(D90:D113)-COUNTIF(D90:D113, \"*-*\")","v":0},0,2,1,0,0,0,0,0,1,1,1,0,0,0,0]
[null,null,"SM1.2.7a","-","-","A.10.6.2","§ 11.4.1","-","-","-","-","-","§ 7.2.2","§ 12.3.a","§ 3","-","-","-","-"]
[null,null,"SM1.2.7b","-","-","A.11.4.1","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB3.4.4a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB3.4.4b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.2.4a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.2.4b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.2.4a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.2.4b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD2.2.4a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD2.2.4b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.2.6a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.2.6b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.2.2a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.2.2c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.3.2a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.3.2c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.4.3a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.4.3c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.5.2a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.5.2c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.5.3b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.5.3d","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.6.2a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE5.6.2c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["1.6. Establish and maintain formalized operations procedures.","00831, 00867, 00838, 04536",{"$f":"COUNTA(C168:C188)-COUNTIF(C168:C188, \"*-*\")","v":21},4,0,1,2,0,1,0,0,0,0,0,1,0,0,0,0]
["1.7. Establish and maintain the IT Governance risk assessment framework.","00685-00687, 01147, 01157, 00698, 01443, 00701, 01902, 00705-00706, 00708",{"$f":"COUNTA(C116:C167)-COUNTIF(C116:C167, \"*-*\")","v":52},{"$f":"COUNTA(D116:D167)-COUNTIF(D116:D167, \"*-*\")","v":9},2,11,4,0,2,0,10,3,1,1,1,0,0,0,0]
[null,null,"SM3.4.4","PO9.1","§ 9.5.1","§ 4.2.1e","§ 4.1","-","§ 1.1","-","§ 6.2.1","§ 3.2","§ 3.1.2","§ 6.2.b","§ 3","-","-","-","-"]
[null,null,"CI2.3.5","PO6.2","§ 7.15.5.2","§ 4.2.1c","§ 4.2","-","§ 2.2.4","-","§ 6.2.3","§ 5.1.1","-","-","-","-","-","-","-"]
[null,null,"SM3.4.1","PO9.2","-","§ 4.2.1d","§ 6.1.2","-","-","-","§ 6.5.2","B","-","-","-","-","-","-","-"]
[null,null,"SM3.4.5","PO9.3","-","§ 4.2.1f","§ 6.2.1","-","-","-","§ 6.5.1","-","-","-","-","-","-","-","-"]
[null,null,"SM3.4.6b","PO1.3","-","§ 1.2","-","-","-","-","§ 6.5.3","-","-","-","-","-","-","-","-"]
[null,null,"SM3.4.8","PO9.4","-","§ 4.2.1h","-","-","-","-","§ 6.5.4","-","-","-","-","-","-","-","-"]
[null,null,"SD3.2.1","ME4.5","-","§ 5.1","-","-","-","-","§ 6.5.5","-","-","-","-","-","-","-","-"]
[null,null,"SM1.1.2b","PO4.8","-","§ 4.2.2a","-","-","-","-","§ 6.6.3","-","-","-","-","-","-","-","-"]
[null,null,"SM3.3.4","PO9.5","-","§ 4.2.3d","-","-","-","-","§ 6.6.4","-","-","-","-","-","-","-","-"]
[null,null,"SM1.2.3c","-","-","A.6.2.1","-","-","-","-","§ 6.6.5","-","-","-","-","-","-","-","-"]
[null,null,"SM2.2.3a","-","-","A.14.1.2","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM3.3.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB5.3.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI2.5.4a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.4.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW2.4.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.4.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB5.3.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB5.3.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.4.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.4.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.4.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.4.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.4.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.4.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.5.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM3.4.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM3.4.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM3.3.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM3.4.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM6.6.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB5.3.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI2.5.4b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.4.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.4.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.4.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.5.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.5.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM2.2.4c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM2.2.4d","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.3.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.4.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM6.6.5b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM6.6.5c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB5.3.7","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.4.8","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.4.8","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.5.8","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM3.3.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB5.3.8","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.4.9","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.4.9","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB3.3.1c","DS9.2","-","A.6.1.5","§ 6.1.5","-","§ 3.3.1","-","-","-","-","-","§ 3","-","-","-","-"]
[null,null,"SM2.2.3g","DS1.2","-","-","§ 10.1.1","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM1.3.2c","DS1.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB3.3.2e","AI4.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI2.4.1c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI2.4.2e","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE4.1.1c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE4.2.2a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM6.5.1e","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM6.6.7e","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB4.1.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB4.1.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI1.2.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.4.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW1.5.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.4.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM1.3.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI1.1.3b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW1.1.3b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.1.6d","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.1.9a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["1.8. Establish and maintain a project management framework.","00990, 01026, 01044, 00991, 01033, 01053, 01035, 01037, 01613, 00992, 01056, 01000, 01009, 01612, 01001, 01002, 00999, 01003",{"$f":"COUNTA(C190:C210)-COUNTIF(C190:C210, \"*-*\")","v":21},{"$f":"COUNTA(D190:D210)-COUNTIF(D190:D210, \"*-*\")","v":17},0,0,0,0,1,0,0,0,0,0,0,0,0,0,0]
[null,null,"SD1.2.4","PO10.5","-","-","-","-","§ 4.2.1.2","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.1.1","PO10.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.1.7","PO10.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.1.1","AI1.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM3.3.1","AI1.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.3.2","PO10.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.2.1","PO10.7","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.5.1","PO10.9","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.1.2","PO10.10","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.4.11","PO10.11","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.1.3","AI7.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.2.5","PO10.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.1.4","PO10.12","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.1.6","PO10.14","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.2.2","AI1.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.1.5","AI1.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.5.4","PO10.13","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD3.5.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.4.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.4.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD2.2.7","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["1.9. Establish and maintain quality assurance standards.","01004, 01008, 01016",{"$f":"COUNTA(C212:C219)-COUNTIF(C212:C219, \"*-*\")","v":7},{"$f":"COUNTA(D212:D219)-COUNTIF(D212:D219, \"*-*\")","v":8},0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]
[null,null,"SD1.3.2","PO8.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD6.1.3b","AI4.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.3.4b","PO8.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.3.1","PO8.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.3.3","PO8.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.5.1","PO8.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.5.3","ME2.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"-","AI4.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["2.  Information Systems Acquisition and Development"]
["2.1. Define security requirements and/or specifications for information systems acquisition and development.","01124, 01447",{"$f":"COUNTA(C222:C222)-COUNTIF(C222:C222, \"*-*\")","v":1},{"$f":"COUNTA(D222:D222)-COUNTIF(D222:D222, \"*-*\")","v":1},0,1,0,0,0,0,0,0,0,0,1,0,0,0,0]
[null,null,"SD4.4.3b","AI1.1","-","A.12.1.1","-","-","-","-","-","-","-","-","§ 3","-","-","-","-"]
["2.2. Establish and maintain procedures and standards for procuring hardware, software, services, and facilities.","01134, 01136, 01144, 01898-01899, 01133",{"$f":"COUNTA(C224:C232)-COUNTIF(C224:C232, \"*-*\")","v":9},{"$f":"COUNTA(D224:D232)-COUNTIF(D224:D232, \"*-*\")","v":3},0,2,2,0,0,0,0,0,0,0,1,0,0,0,0]
[null,null,"SD4.4.6","AI5.6","-","A.6.1.4","§ 6.1.4","-","-","-","-","-","-","-","§ 3","-","-","-","-"]
[null,null,"SM4.3.3","AI5.1","-","A.10.2.3","§ 10.2.3","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM6.4.2","AI5.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.4.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.3.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.4.4a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.4.4b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.4.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM6.7.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["2.3. Establish and maintain a software product acquisition methodology.","01138, 01129, 01135, 01130, 01140, 01143",{"$f":"COUNTA(C234:C249)-COUNTIF(C234:C249, \"*-*\")","v":16},{"$f":"COUNTA(D234:D249)-COUNTIF(D234:D249, \"*-*\")","v":6},0,1,2,0,0,0,0,0,0,1,1,0,0,0,0]
[null,null,"SM4.3.1a","AI1.3","-","A.10.1.4","§ 10.1.4","-","-","-","-","-","-","§ 6.3.2","§ 3","-","-","-","-"]
[null,null,"SM3.3.2b","AI1.2","-","-","§ 12.5.1","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI2.1.3","AI3.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.3.1b","AI1.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.3.4","AI5.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB5.3.8","AI7.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI5.4.9","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW4.4.9","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.1.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.4.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.3.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM6.7.7","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI1.3.1c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CCI1.3.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.4.2c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.4.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["2.4. Establish and maintain systems design principles, guidelines, and lifecycle documentation.","01057-01058, 01061, 01066, 01074, 01080-01082, 01614, 01086-01088, 01091, 01111, 01114-01115",{"$f":"COUNTA(C251:C293)-COUNTIF(C251:C293, \"*-*\")","v":43},{"$f":"COUNTA(D251:D293)-COUNTIF(D251:D293, \"*-*\")","v":8},0,2,3,0,0,0,0,0,0,2,0,1,0,0,0]
[null,null,"NW1.3.3b","AI2.1","-","A.12.1.1","§ 10.1.4","-","-","-","-","-","-","§ 6.3.a","-","7.3.3.1","-","-","-"]
[null,null,"CB2.3.4","PO10.8","-","A.12.4.3","§ 4.2","-","-","-","-","-","-","§ 6.3.3","-","-","-","-","-"]
[null,null,"CI1.1.3a","AI2.4","-","-","§ 12.1.1","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD6.1.3a","AI2.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.1.2","AI2.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.3.1","AI2.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB2.2.5a","AI7.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.1.2","AI7.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.4.3a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.2.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.2.7","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.1.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD6.1.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD6.1.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD6.2.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CCI2.1.1b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI2.1.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.4.7a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.5.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.5.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI3.3.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW3.2.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE2.3.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.1.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW1.1.3a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.1.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.4.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.4.3b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.4.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.4.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.2.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.2.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.2.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.4.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.1.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.3.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.3.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD6.2.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.4.10","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.1.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.2.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.3.4b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD6.1.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["2.5. Establish, develop and maintain application and systems software in accordance with design specifications and standards.","01094, 01141, 01096-99",{"$f":"COUNTA(C295:C308)-COUNTIF(C295:C308, \"*-*\")","v":14},{"$f":"COUNTA(D295:D308)-COUNTIF(D295:D308, \"*-*\")","v":4},1,1,2,0,0,0,0,0,0,1,0,0,0,0,0]
[null,null,"SD1.2.3","AI5.5","§ 7.14.4","A.12.5.5","§ 12.5.5","-","-","-","-","-","-","§ 6.5.a","-","-","-","-","-"]
[null,null,"SD1.4.5","AI2.7","-","-","§ 12.4.3","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI2.1.4b","AI4.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CB2.3.5a","AI4.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD6.1.3d","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.5.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD4.5.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE4.3.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.3.7","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI3.3.5a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW1.4.3c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW3.2.5a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE2.3.6a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD6.1.3e","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["2.6. Perform quality assurance testing on all newly acquired, developed or modified systems and software.","01100-01103, 01106, 01317, 01108",{"$f":"COUNTA(C310:C327)-COUNTIF(C310:C327, \"*-*\")","v":18},{"$f":"COUNTA(D310:D327)-COUNTIF(D310:D327, \"*-*\")","v":3},0,2,3,0,0,0,0,0,0,3,0,0,0,0,0]
[null,null,"SD5.1.2","AI2.8","-","A.12.4.2","§ 12.4.1","-","-","-","-","-","-","§ 6.3.4","-","-","-","-","-"]
[null,null,"CB3.3.2b","AI7.6","-","A.12.5.2","§ 12.1.1","-","-","-","-","-","-","§ 6.3.5","-","-","-","-","-"]
[null,null,"SD4.5.8","AI7.7","-","-","§ 12.4.2","-","-","-","-","-","-","§ 6.3.6","-","-","-","-","-"]
[null,null,"SD5.1.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD1.2.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD5.2.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD5.1.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD5.2.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"CI2.4.2b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD5.1.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD5.1.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD5.1.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.4.9","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD5.2.6","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD5.2.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD5.2.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SD5.2.5","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE3.4.8","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["3.  Human Resources Security"]
["3.1. Establish and maintain the IT staff structure in line with strategic goals.","00764-00765, 00768, 00774-00776, 00778-00779","",null,"",null,"","",null,"","","","","",""]
[null,null,"CB2.1.4e","PO4.2","§ 5.5.5","Annex A.6.1.2","§ 6.1.2","-","§ 2.4","-","§ 5.2.2 ¶ 2","-","-","§ 6.3.3","§ 3","-","-","-","-"]
[null,null,"CB2.1.5b","PO4.3","-","Annex A.8.1.3","§ 6.1.3","-","§ 3.1.1","-","§ 7.8.1","-","-","-","-","-","-","-","-"]
[null,null,"CI1.1.3a","PO4.5","-","Annex A.8.2.1","§ 8.1.1","-","§ 3.5","-","§ 7.8.2","-","-","-","-","-","-","-","-"]
[null,null,"CI4.1.2b","PO4.6","-","Annex A.10.1.3","§ 8.1.3","-","§ 4.1.1.2","-","-","-","-","-","-","-","-","-","-"]
[null,null,"NW1.1.3a","PO4.11","-","-","§ 10.1.3","-","§ 4.2.2.2","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM1.3.1","PO4.12","-","-","-","-","§ 4.2.3.2","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM1.3.2","PO4.14","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM1.3.6","PO4.15","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM2.1.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM2.1.3","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM2.1.4","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM2.2.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM2.2.5a","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM2.2.5b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM2.2.5c","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM2.2.5d","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.2.1","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM4.2.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"SM6.6.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.1.4f","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.1.5b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE1.2.7b","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
[null,null,"UE6.1.2","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-","-"]
["3.2. Establish and maintain IT staff security clearances in accordance with duties and responsibilities.","00780","","","","","","","","","","","","","§ 3",null,null,null,"6.2"]
[null,"00781","","PO7.1","","","","","","","","","","","§ 3"]
[null,"00782","SM2.2.5(a), CI1.1.2(a), NW1.1.2(a)","PO7.2","","","§ 8.1.2","","","","","","","","","7.3.3.5"]
[null,"04580","UE1.1.6, UE1.1.7","","","","","","","","","","","",""]
["3.3. Ensure that security is part of the new personnel orientation process.","01633"]
[{"$nulls":4},"§ 5.6.2",null,"§ 8.2.2",{"$nulls":6},"§ 12.6.1"]
[{"$nulls":4},"§ 5.9.1"]
[{"$nulls":4},"§ 5.9.2"]
["3.4. Ensure personnel are provided with regular security training. ","00785","SM2.4.5(a), SM2.5.1 thru SM2.5.4, SM6.3.1(d), SM6.3.6(b), CB3.4.2(a), CB3.4.2(b), CI5.2.2(a), CI5.2.2(b), NW4.2.2(a), NW4.2.2(b), SD2.2.2(a), SD2.2.2(b), UE1.2.2(a), UE1.2.2(b), UE1.2.5, UE1.2.7(a), UE3.2.1(a), UE3.2.2, UE3.3.1(a), UE3.3.2, UE5.1.2, UE5.2.3, UE5.2.6, UE5.3.3, UE5.3.6, UE5.4.8, UE5.6.4(b), UE5.6.4(c)","PO7.4, DS7.1, DS7.2","§ 5.9.5, § 5.9.6, § 6.3.9(c), § 6.3.9(d), § 6.4.6, § 7.5.8(d), § 7.5.8(e)","§ 5.2.2, Annex A.8.2.2","§ 8.2.2","","§ 4.2.2.2","","","","§ 3.1.2 ¶ 3","","§ 3 Awareness and Training (AT)","7.3.3.5"]
[null,"00828","SM6.2.2, CB6.3.2, UE1.3.1 thru UE1.3.3","AI4.3, AI4.4","§ 5.9.4","","","","","","","","","§ 12.6.1",""]
[null,"00786","","PO7.5","","","","","","","","","","",""]
[null,"01423","","DS7.3","§ 5.9.2(b), § 5.9.5","§ 5.2.2","","","","","","","","","§ 3"]
["3.5. Ensure that security knowledge is a part of personal performance appraisal "]
["3.6. Establish and maintain a process for managing changes in the employee responsibilities and employment contract "]
[null,"00788","SM1.3.4, UE1.1.10","PO7.8","§ 6.3.4, § 7.5.4","Annex A.8.3.1, Annex A.8.3.3","§ 8.3.1, § 8.3.3","","","","","","","","§ 3",null,null,null,"6.5"]
["3.7. Establish and maintain a process of handling policy violations and frauds "]
[null,"01442","SM1.2.5(b)","","","Annex A.8.2.3","§ 8.2.3","","","","","","","","§ 3"]
["4.  Third Parties Security"]
["4.1. Establish and maintain a policy regarding management of third party services.","00789","CB6.1.3(a), CB6.1.4(c), CB6.1.4(e), CB6.1.4(f), CB6.1.5, SM6.5.6","","","Annex A.6.2","§ 10.2.1","","","","","","","§ 12.8","§ 3",null,null,null,"5.2"]
[null,"00790","CB6.1.1","","§ 5.6.6","","","","","","","","","","§ 3"]
[null,"00791","CB6.1.3(d), CB6.1.4(a)","DS5.3","§ 5.7.4","","","","§ 4.2.3.2","","","","","",""]
[null,"00792","SM4.3.2(d), SM6.7.1, SM6.7.2, CI2.5.3(d)","DS2.1","","Annex A.6.2.2","","","","","","","","§ 12.8.1",""]
[null,"00794","SM6.7.4","DS2.2","§ 5.6.3, § 5.8.2, § 5.8.3, § 5.8.4, § 5.8.5","Annex A.6.2.3","§ 6.2.3","","","","","","","§ 12.8.3",""]
[null,"01364","SM6.5.2, CB6.1.3(e), CB6.1.3(h)","","§ 5.3.1, § 5.3.2, § 5.3.3","Annex A.6.2.1","§ 6.2.1","","","","","","","§ 12.8.2",""]
[null,"04263","","","§ 5.7.1, § 7.5.1 p3, § 7.11.3","","","","","","","","","§ 2.4",""]
[null,"04264","","","§ 5.7.2","","","","","","","","","App A § 1.1, App A § 1.2",""]
[null,"01365","SM6.7.8","","§ 7.1, § 7.15.1, § 7.15.2, § 7.15.3, § 7.15.5.3","","","","","","","","","",""]
[null,"01366","","","§ 7.1","","","","","","","","","§ 12.8.4","","6-7"]
[null,"01367","SM1.3.7, SM6.5.4(e), SM6.7.2(e)","","","","","","","","","","","",""]
[null,"00795","SM6.7.5, CB6.1.3(g), CB6.1.3(i) thru CB6.1.3(k), CB6.1.4(d)","AI5.3","§ 5.6.5, § 7.4, § 7.9","","§ 6.2.2","","","","","","","",""]
[null,"04543","","","","Annex A.10.8.2","§ 10.8.2","","","","","","","",""]
[null,"00796","SM6.7.6","AI5.2","§ 5.6.1, § 5.6.5","","","","","","","","","",""]
[null,"00797","SM6.7.5(c)","DS2.3","§ 5.11, § 7.14.7","","§ 10.2.1","","","","§ 4.5","","","",""]
[null,"00798","SM6.7.7, CB6.1.3(c)","DS2.3","§ 5.6.4","Annex A.10.2.2","§ 10.2.2","","","","","","","",""]
[null,"00799","","DS2.4","","Annex A.10.2.1","§ 10.2.2","","","","","","","",""]
["5. Physical and Environmental Security"]
["5.1. Establish and maintain a process to maintain the facilities.","00710","","DS12.5","§ 6.4.3.3, § 6.14.1, § 6.14.2, § 6.14.3","","","","§ 4.2.3.2","","","","","",""]
[null,"00711","SM4.5.1, SM4.5.3(a), CI2.8.1(a), CI2.8.1(b), CI2.8.7(a), CI4.1.1, NW3.4.1, UE6.4.2(a), UE6.4.3(a)","DS12.1, DS12.2","§ 5.7.3, § 6.3.1, § 6.4.3.1, § 6.4.3.2","Annex A.9.1.1","§ 9.1.1","","§ 4.3.2","","","","","","§ 3",null,null,null,"7.1"]
[null,"01637","NW3.4.2(c)","","§ 6.3.5, § 6.12.1","Annex A.9.1.6","§ 9.1.2","","","","","","","","",null,null,null,"7.2"]
[null,"00748","","","§ 6.4.9","","","","","","","","","",""]
[null,"00749","","","§ 6.12.2","","","","","","","","","",""]
[null,"01436","CI2.8.8, NW3.4.1","","§ 6.3.3, § 6.3.12, § 6.3.13","Annex A.9.1.2","§ 9.1.2","","","","","","","","§ 3"]
[null,"04538","","","§ 6.3.8","Annex A.9.1.5","§ 9.1.5","","","","","","","",""]
[null,"01638","CI2.8.1(d)","","§ 6.3.2, § 6.3.3, § 6.3.6(d), § 6.4.4","Annex A.9.1.3","§ 15.1.5","","","","","","","§ 9.1",""]
[null,"01251","","","§ 6.3.7","","","","","","","","","",""]
[null,"00712","CI2.8.5","DS12.1","§ 6.4.3, § 6.4.12, § 6.12.7, § 6.12.8","","§ 9.1.3","","","","","","","",""]
[null,"02215","","","§ 6.4.8","","","","","","","","","",""]
[null,"01329","CI2.8.3(c), CI2.8.3(d)","","§ 6.3.6(c), § 6.3.6(e)","","","","","","","","","§ 9.1.2, § 9.2","§ 3"]
[null,"00715","CI2.8.3(b)","","§ 6.3.6(h)","","§ 9.1.2","","","","","","","§ 9.4.a","§ 3"]
["5.2. Establish and maintain physical security of IT assets.","00718","SM4.5.4(b), SM4.5.4(c), CI2.8.2(a), UE6.4.5(b)","AI3.2, DS13.4","","Annex A.11.3.3","§ 11.3.3","","","","","","","§ 9.1.3","§ 3"]
[null,"04539","","","§ 6.5.5","Annex A.9.2.5","§ 9.2.5","","","","","","","",""]
[null,"00719, 04723","SM6.4.6, CB3.3.4, CI2.4.4, UE4.1.3, UE6.4.2(c)","","","","§ 11.7.1","","","","","","","§ 9.1.3","§ 3"]
[null,"00723","","","","Annex A.9.2.3","","","","","","","","","§ 3"]
[null,"01437","CI2.8.7(c)","","","Annex A.9.2.1","","","","","","","","","§ 3"]
[null,"01441","CI2.8.7(d)","","§ 6.4.13, § 6.5.3, § 6.5.4","","§ 9.1.6","","","","","","","","§ 3"]
[null,"01873","NW3.4.4(a), NW5.2.4","","","","","","","","","","","§ 9.1.2",""]
[null,"04540","CI2.8.4","","","Annex A.9.2.7","§ 9.2.7","","","","","","","",""]
["5.3. Establish and maintain adequate environmental controls and processes.","00724","CI2.6.2(a), CI2.6.2(c), NW3.4.2(a)","DS12.4","§ 6.4.7(b), § 6.6, § 6.12.2.5","Annex A.9.1.4","§ 9.2.1","","","","","§ 5.1.3","","",""]
[null,"01438","CI2.7.1, NW3.4.3, NW5.2.5","","§ 6.7.4, § 6.9, § 6.12.2.4, § 7.6.8","Annex A.9.2.3","§ 9.2.3","","","","","","","","§ 3"]
[null,"01623","CI2.6.1, CI2.6.4(c), CI2.8.5, CI2.8.7(c)","","","Annex A.9.2.1","§ 9.2.1","","","","","","","",""]
[null,"00725-00726","CB4.2.4, CB4.2.5, CI2.7.2, CI2.7.3, NW3.4.2(b), NW5.2.1(c), NW5.2.2(e), UE6.4.8, UE6.4.9, NW5.2.2©","","§ 6.8.1, § 6.8.2, § 6.8.3, § 6.8.4","Annex A.9.2.2","§ 9.2.2","","","","","","","","§ 3"]
[null,null,"CI2.6.3, CI2.6.2(b), CI2.6.4(a), CI2.6.4(b), UE6.4.7","","§ 6.12.4, § 6.10","","","","","","","","","","§ 3"]
[null,"00727","CI2.6.4(d)","","§ 6.12.3","","§ 9.2.1","","","","","","","","§ 3"]
[null,"01439","CI2.7.2(d)","","§ 6.8.6","","§ 9.2.2","","","","","","","","§ 3"]
[null,"01440","CI2.7.2(c)","","","","§ 9.2.2","","","","","","","","§ 3"]
["6. Information Systems Operations Management"]
["6.1. Establish and maintain operational policies and processes. ","00806","SM1.3.1, SM2.3.2, SM2.4.3, CB2.1.4(a), CB2.1.4(b), UE1.1.4(a), UE1.1.4(b)","","§ 6.3.9, § 7.5.8","§ 5.1, Annex A.6.1.2, Annex A.8.1.1","§ 5.1.1, § 6.1.2, § 8.1.1","","","","","","","§ 12.4","",null,null,null,"8.1"]
[null,"00846","CB2.4.3(a), CI2.4.3(a), NW3.3.3(a), UE6.2.2(a)","","","","","","","","","","","",""]
[null,"00853","","DS10.1","","","","","§ 3.3.3, § 3.3.3.1","","","","","","§ 3"]
[null,"00868","","DS9.2","","","","§ 7.3.10","","","","","","",""]
[null,"01615","","DS3.1","§ 7.7, § 7.14.5","","","","","","","","","",""]
[null,"00885","CI2.5.5(b)","AI3.3, DS13.5","§ 6.14.5, § 7.6.1, § 7.6.2, § 7.6.4, § 7.6.10","Annex A.9.2.4","§ 9.2.4","","","","","","","","§ 3",null,null,null,"7.3"]
["6.2. Establish and maintain operational roles and responsibilities. "]
[null,"01618","","DS3.4","","","","","","","","","","",""]
["6.3. Establish and maintain system classification scheme policy and standards.","00509","","","","Annex A.7.2.1","§ 7.2.1","","","","","","","","§ 3"]
[null,"00007","SM3.1.3(c), CB2.3.5(f), CB5.2.4(b), CI5.3.4(b), NW4.3.4(b)","","","","§ 7.2.1","","","","","","","",""]
["6.4. Establish and maintain a policy for establishing access policies and procedures.","00512","SM4.4.6(b), SM7.1.3(b), CB3.1.5(c), CB4.3.4(c), CB5.4.5(b), CI4.1.3, CI4.1.4(a), CI4.1.4(f), CI5.5.5(b), NW3.1.5, NW4.5.5(b), SD2.3.5(b), UE5.4.2","","§ 7.5.5","Annex A.11.1.1, Annex A.11.6.1","§ 6.2.2, § 11.6.1","","","","","","§ 6.2.2","§ 7","",null,null,null,"9.1"]
[null,"00513","SM4.4.1, SM4.4.2, CB3.1.1, CI4.3.1, UE2.1.1","DS5.3","","Annex A.11.2.1","§ 11.2.4","","§ 4.2.4","","","","","§ 7.2 thru § 7.2.3","§ 3"]
[null,"00004","SM4.4.3, CB2.1.3(a), CB3.2.5, CI4.2.3, CI4.3.2, CI4.3.4, CI4.4.5, UE1.1.3(a), UE2.2.4, UE4.1.2(b), UE4.2.2(b), UE4.3.3(b)","PO2.3","§ 7.5.2","Annex A.11.2.2","§ 11.1.1, § 11.2.2, § 11.4.6, § 11.6.1","","","","","","","§ 7.1, § 8.5.16",""]
[null,"01273","SM4.4.4(a), SM4.4.4(b), CB3.1.1(a), CB3.1.1(b), CI4.1.2(b), CI4.3.3, CI4.5.3(a), UE2.1.1","","","Annex A.11.5.2","§ 11.2.1, § 11.5.2, § 11.5.3","","","","","","","§ 8 thru § 8.2","§ 3"]
[null,"01411","SM6.5.4(d), CB3.1.1(c), CB3.1.5(a), CB6.4.2(c), CB6.4.4, UE2.1.5, UE3.2.6(b), UE3.3.6(b), SD4.6.3(c), SD4.6.5","","§ 7.5.3","","§ 11.2.2","","","","","","","§ 7.1.1, § 7.2.a","§ 3"]
[null,"00538","","","","","","","","","","","","§ 7.1.2, § 7.2.2",""]
[null,"00542","","","","","","","","","","","","§ 7.1.3",""]
[null,"01412","","","","","§ 11.5.1","","","","","","","","§ 3"]
[null,"01417","SM1.2.6(b), SM6.4.4","","","","","","","","","","","","§ 3"]
[null,"01418","SM1.2.6(b), CB3.2.2(d), CB3.3.3(e), CI2.3.1(c), CI2.3.4(c), CI2.4.3(e), CI4.4.2(d), UE2.2.2(c), UE4.1.2(d)","","","Annex A.11.5.5","§ 11.5.5","","","","","","","§ 8.5.15","§ 3"]
[null,"04262","NW3.7.1(b), NW3.7.1(e), NW5.3.1(b)","","","","§ 9.2.4","","","","","","","§ 8.5.6, § 12.3.9",""]
["6.5. Establish a change-management program with all necessary policies and procedures to prevent unauthorized changes.","00886","SM3.2.2(e), SM5.6.3, CB2.3.1, CI2.5.5(g), CI3.3.1, CI3.5.3, CI3.6.3, NW3.2.1, UE2.3.1, UE2.3.2, UE3.4.11","AI2.9, AI6.1","§ 7.6.9, § 7.14.2","Annex A.10.1.2","§ 10.1.2, § 12.5.1","","§ 2.2.3","","","","","§ 6.2.b","",null,null,null,"8.2"]
[null,"00887","CB2.3.3(a), CB2.3.3(b), CI3.3.3(a), CI3.3.3(b), CI3.3.3(d), CI3.3.5(b), NW3.2.3(a), NW3.2.3(b), UE2.3.4(b), UE2.3.6(b), UE2.3.8(a)","","","","","","§ 2.2.3, § 3.3.4","","","","","§ 6.4.a","§ 3"]
[null,"00888","CB2.3.3(c), CI3.3.3(c), NW3.2.3(c), UE2.3.4(d)","AI6.2, DS9.3","","","§ 10.1.2","","","","","","","§ 6.4.1","§ 3"]
[null,"00889","CB2.3.2, CB2.3.5(d), CB2.3.6, CI3.3.2, CI3.3.5(d), NW3.2.2, NW3.2.5(d), NW5.3.2, UE2.3.3, UE2.3.6(d), UE2.3.9(c), UE3.4.11","AI6.4, AI7.11, DS10.4","","Annex A.12.5.1, Annex A.12.5.3","§ 12.5.2, § 12.5.3","","§ 3.3.4","","§ 8.3.5 ¶ 2","","","§ 6.4.2","§ 3"]
[null,"01510","","","","","","","","","","","","§ 6.4.3",""]
[null,"00890","CI3.5.1, CI3.5.2(a), CI3.5.3, CI3.5.5(c), CI3.5.5(d), UE2.3.7, UE2.3.9(d)","AI6.3","","","","","","","","","","",""]
[null,"00891","SM5.6.5, CB2.3.5(b), CB2.3.5(e), CI3.3.5(e), CI3.5.5(b), CI3.6.5, NW3.2.5(b), NW3.2.5(e), UE2.3.6(e), UE2.3.8(b), UE2.3.9(b)","AI6.5","","§ 4.3.2","§ 10.1.2, § 12.5.1","","§ 3.3.4","","","","","",""]
[null,"00893","CB2.3.3(e), CB2.3.3(f), CI3.3.3(f), CI3.3.3(g), CI3.3.5(c), NW3.2.3(e), NW3.2.3(f), UE2.3.6(c)","AI7.9","","","","","","","","","","",""]
[null,"00896","SM5.6.1, SM5.6.4, CI2.3.6(a), CI2.3.6(b), CI3.6.1, CI3.6.4","","","","§ 12.6.1","","","","","","§ 3.1.2 ¶ 3","§ 6","§ 3"]
[null,"00897","SM5.6.3, CB4.2.1, CI2.5.5(g), CI3.6.3, NW1.3.3(c), UE3.2.5(d), UE3.3.6(d), UE5.4.4(a)","","","","","","","","","","","§ 6.1.a",""]
[null,"01696","CI2.3.1(d)","","","","","","","","","","","§ 6.1.b",""]
[null,"04541","","","§ 7.14.3(b), § 7.14.3(c)","Annex A.10.3.2","§ 10.3.2","","","","","","","",""]
[null,"04498","","","","","","","","","","","","§ 6.2.b",""]
["7. Information System Security"]
["7.1. Establish and maintain configuration control and status accounting for each system.","00863","6.3.1(a), 6.3.2","DS9.3","","","","§ 7.3.3, § 7.3.4","","","","","","",""]
[null,"02133","","","","","§ 7.1.1","§ 7.3.2","","","","","","",""]
["7.2. Establish and maintain a systems hardening standard and procedures.","00876","SM6.2.3(b), CB6.3.3(b)","AI2.5","","","","§ 7.3.5","","","","","§ 3.1.2 ¶ 3","§ 2.2","§ 3"]
[null,"00877","CB2.2.6(c), CB3.1.8, CI2.3.4(b), NW2.1.2(g), NW5.3.1(a)","","","","§ 11.2.3","","","","","","","§ 2, § 2.1, § 2.1.1",""]
[null,"00869","SM4.1.7(a)","","","Annex A.12.4.1","§ 12.4.1","","","","","","","",""]
[null,"00879","CI2.1.4(a)","","","","","","","","","","","§ 2.2.1",""]
[null,"00880","SM6.8.2(a), CB2.2.6(a), CB6.4.2(f), CI1.4.5(b), CI2.3.1(a), CI2.3.1(b), CI2.3.2, NW2.1.2(j), NW3.1.3(b), SD4.6.3(f)","","","","§ 11.5.4","","","","","","","§ 2.2.2",""]
[null,"00882","CB2.2.6(a), CB6.4.2(f), CI2.3.1(a), CI2.3.1(b), CI2.3.2, SD4.6.3(f)","","","","§ 11.5.4","","","","","","","§ 2.2.4",""]
[null,"01702, 01704-01708","SM6.4.4, CI4.5.2, CI4.5.3(c), CI4.5.3(d), UE3.3.6€, CI4.5.3(f), CI4.5.3(f), CI4.5.3(h), CB3.2.4, CI4.4.4","","","Annex A.11.3.1, Annex A.11.5.3","§ 11.2.3, § 11.3.1, § 11.3.1, § 11.5.3, § 11.3.1, § 11.5.3, § 11.3.1, § 11.5.3, § 11.5.1, § 11.5.3",null,"","","","","","§ 8.5.3, § 8.5.9, § 8.5.10, § 8.5.11, § 8.5.12, § 8.4",""]
[null,"00881","","","","","","","","","","","","§ 2.2.3",""]
[null,"01538","CI4.1.4(e)","","","","","","","","","","","",""]
[null,"01539","CB2.2.6(b)","","","","","","","","","","","§ 2.1",""]
[null,"00883","","","","","","","","","","","","§ 2.3",""]
[null,"01583","SM6.1.1(b)","","","","","","","","","","","",""]
[null,"02185","CB2.2.6(b), CI2.3.4(a)","","","","","","","","","","","",""]
[null,"04457","","","","","","","","","","","","§ 8.4",""]
[null,"04283","CB4.3.5(a), CB6.4.3(b), SD4.6.3(d), SD4.6.4(b)","","","","","","","","","","","",""]
[null,"00865","","DS9.3","","","","","","","","","","",""]
[null,"02130","","","","","","§ 7.3.6","","","","","","","","7.3.2.4"]
[null,"02132","","","","","","§ 7.3.7","","","","","","","","7.3.2.4"]
["7.3. Safeguard master copies of digital configuration items using secure physical or electronic means.","02131","","","","","","§ 7.3.8, § 7.3.9","","","","","","",""]
[null,"00528","CB3.1.5(e), UE2.1.4","DS5.3","","","","","§ 4.2","","","","","",""]
[null,"00525","SM4.4.5(d), CI4.2.4","DS5.4","","Annex A.11.2.4","","","§ 4.3","","","","","","§ 3"]
[null,"00526","SM4.4.5, CI4.5.3(e)","DS5.4, DS5.5","","","","","§ 4.2","","","","","",""]
["7.4. Identify and control all network elements.","00529","SM6.5.4(a), CB6.4.2(d), NW1.2.2(f), NW2.4.3, NW2.4.5, NW2.4.6, NW3.4.4(b), SD4.6.3(d)","AI3.2","","Annex A.11.4.6","§ 11.4.3","","§ 4.2.4.2","","","","","","",null,null,null,"8.3"]
[null,"00530","SM6.5.3(a), NW1.2.2, NW1.3.3(d), NW2.1.2(e), NW2.1.2(f), NW2.1.5, NW2.3.1(b)","","","Annex A.10.9.1","§ 10.9.1","","§ 4.2.4.2","","","","§ 3.1.2 ¶ 3, § 4.2.2","§ 2.2.b",""]
[null,"00531","NW1.4.2(a), NW1.4.2(c), NW1.4.3","","","","","","","","","","","§ 1.1.2.a, § 1.1.2.b, § 1.1.3",""]
[null,"00532","CB6.4.2(a), SD4.6.3(a)","","","","","","","","","","","§ 1.3.4 Testing Procedures",""]
[null,"00536","CI1.4.5(c), CI1.4.5(d), NW1.2.2(k), NW2.3.5(b), NW2.4.2(d), NW3.1.3(c ), NW3.1.3(d)","","","","","","","","","","","","§ 3"]
[null,"00537","NW3.7.2","","","","§ 11.4.4","","","","","","§ 4.2.2","§ 1.1.5, § 2.2.2",""]
[null,"00544","NW2.2.1, NW2.2.3, NW2.2.5, UE5.4.4(c)","DS5.10","","","","","§ 4.2.4","","","","","§ 1, § 1.1.6, § 1.1.3",""]
[null,"00541","NW2.1.4","","","","","","","","","","","",""]
[null,"01646","NW2.4.2, NW2.4.7, UE5.6.3","","","","","","","","","","","§ 4.1.1",""]
["7.5. Secure access to the operating systems of all system components.","00551","","AI3.2","","","","","","","","","","",""]
[null,"00558","","AI3.2","","","","","§ 4.2.4.2","","","","","","§ 3"]
[null,"00552","","","","Annex A.11.4.5","","","","","","","","§ 3.4.1.a",""]
[null,"00553","SM4.4.4(c), SM6.5.4(b), CB3.2.1, CB4.3.3, CI4.4.1, CI4.5.1, CI4.5.5, UE2.2.1","","","Annex A.11.5.1","","","","","","","","",""]
["7.6. Enforce information flow policies within the system and between interconnected systems.","01410","SM4.1.7(g)","","","Annex A.11.4.7","","","","","","","","","§ 3 Access Control (AC), § 3 Certification, Accreditation, and Security Assessments (CA)"]
[null,"04542","UE5.2.2(b), UE5.3.2(b), UE5.4.3(b), UE5.5.2(b), UE5.5.3(c), UE5.6.2(b), UE5.6.4(a)","","","Annex A.10.8.1","§ 10.8.1","","","","","","","",""]
[null,"01429","SM6.1.1(c), CB4.3.3","","","","","","","","","","","","§ 3"]
["7.7. Establish and maintain process for remote access and teleworking. ","00559","SM6.4.1, SM6.4.3, SM6.4.5, SM6.4.7(e), CB3.3.5(e), CI2.4.5(e), NW2.3.1, NW2.3.8, UE5.4.8(b)","","§ 7.5.7","Annex A.11.4.2","","","","","","","","","§ 3"]
[null,"04545","","","§ 7.6.6","Annex A.11.7.2","§ 11.7.2","","","","","","","",""]
[null,"01421","NW3.7.1(c)","","","","§ 11.4.2","","","","","","","","§ 3"]
[null,"00561","","","","","","","","","","","","§ 8.3","",null,null,null,"9.2"]
[null,"00562","","","","","","","","","","","","","§ 3"]
[null,"00563","NW2.3.7, NW3.7.1(d)","","","","","","","","","","","§ 12.3.10","§ 3"]
[null,"00570","SM2.2.3(f), SM4.1.7(d), SM6.1.1, SM6.1.2, CB3.3.3(d), CI2.4.3(d), UE4.1.2(e), UE4.2.2(d), UE4.3.2(d), UE4.3.3(c )","","","Annex A.15.1.6","§ 15.1.6","","","","","","","§ 2.1.1, § 4.1.1","§ 3"]
["7.8. Establish and maintain a process for preventing attacks against information systems. ","00574","SM5.1.1 thru SM5.1.4","DS5.9","","Annex A.10.4.1","§ 10.4.1","","§ 4.2.4","","","","§ 3.1.2 ¶ 3, § 5.2.2","§ 5","§ 3","7.3.1.3-4",null,null,"10.1"]
["8. Incident Management"]
["8.1. Establish and maintain an incident management capability ","00579","SM4.6.1, CB2.1.3(f), CB2.4.1, CI3.4.1, NW3.3.1, UE1.1.3(h)","","§ 5.7.5, § 7.5.10","§ 8.3, Annex A.13.1.1","§ 13.2.1","","","","§ 8.4","","§ 2.1 ¶ 2, § 2.3.1, App A","§ 12.9.1","§ 3","3-7"]
[null,"00584, 00590","SM4.6.4(a), CI3.4.2(a), SM1.2.3(f), SM5.4.2, CB2.4.3(a), CI2.4.3(a), NW3.3.3(a), UE4.1.2(a), UE6.2.2(a)","DS5.6","","Annex A.13.2.1","§ 13.1.1","","§ 3.3.2","","","","§ 2.4","","§ 3","6-7"]
[null,"01628","CB2.1.3(e), CB2.1.4(c), CI1.1.2(b), NW1.1.2(b), NW2.1.2(b), UE1.1.3(g), UE1.1.4(d)","","","","","","","","","","","","","5-7"]
[null,"01219","SM4.6.4(d), CB2.4.2(d), CI3.4.2(d), NW3.3.2(d), UE6.2.1(d)","","","§ 4.2.3(a)","","","","","","","","","","6"]
[null,"01758","SM4.6.4(c), SM5.4.5, CB2.4.2(c), CB2.4.6, CI3.4.2(c), CI3.4.6, NW3.3.2(c), NW3.3.6, UE6.2.1(c), UE6.2.5","","","","","","","","","","§ 3.3.4, § 7.4","","","7.3.3.2"]
[null,"00591","CB2.4.7, CI3.4.7, NW3.3.7, UE6.2.6","DS5.5","","§ 4.2.3(a)","§ 6.1.2","","","","","","","","§ 3","6-7"]
[null,"01755","","","","","","","","","","","§ 3.2.5, App C","","","5.3.3"]
[null,"01235","SM5.5.3","","","Annex A.13.2.3","§ 13.2.3","","","","","","§ 3.4.3","","","7"]
[null,"00592","","DS5.1","","","","","","","","","","","","5-7"]
["8.2. Establish and maintain an incident detection capability .","00580","SM5.3.1","","§ 5.7.1","§ 4.2.3(a)","","","","","","","§ 5.3","§ 11.1, § 11.4, § 12.9.5","§ 3","6-7"]
[null,"00585","SM4.6.2(b), SM4.6.6, SM5.3.2(a), CB2.4.2(a), CI1.4.6(d), CI3.4.2(a), NW3.1.4(c), NW3.3.2(a), UE6.2.1(a), SM5.3.3(b), SM5.3.3(d)","ME2.2","","§ 4.2.3(a)","§ 15.1.5","","§ 4.5.2","","","","§ 7.3","","§ 3","6-7"]
[null,"04653","","","","","","","","","","","§ 2.3.2 ¶ 3","","","6-7"]
[null,"01211","SM2.4.3(c)","","","Annex A.10.4.1, Annex A.13.1.2","§ 8.2.2, § 13.1.2","","","","","","","§ 12.9.4","§ 3","7.3.3.4-5",null,null,"11.1"]
["8.3. Establish and maintain incident handling system.","00852","","","","","","","§ 3.3.2.2","","","","§ 4.2.1, § 4.5, § 5.2.1, § 5.5, § 6.2.1, § 6.5, § 7.2.1, § 7.5, § 8.4","","","5-7"]
[null,"01226, 01650","SM2.2.2(f), SM5.3.2(b), SM5.3.8, CB2.4.4, CB2.4.5(a), CB2.4.5(c), CI3.4.4, CI3.4.5(a), CI3.4.5(c), NW3.3.4, NW3.3.5(a), NW3.3.5(c), UE6.2.3, UE6.2.4(a), UE6.2.4©, SM5.3.9, CB2.4.3(c), CI3.4.3(c), NW3.3.3(c), UE6.2.2©","","§ 5.7.5.2","","","","","","","","§ 3.2.4 ¶ 5","","","7.3.1.2"]
[null,"01227","CB2.4.5(d), CI3.4.5(d), NW3.3.5(d), UE6.2.4(d)","","","","","","","","","","§ 3.3.1, § 4.4.1, § 5.4.1, § 6.4.1, § 7.4","","","7"]
["8.4. Establish and maintain a process for incident response and escalation ","01206","SM4.6.4(b), SM5.4.3(d), SM5.4.3(e), CB2.4.2(b), CI1.4.6(d), CI3.4.2(b), NW3.1.4(c), NW3.3.2(b), UE6.2.1(b)","","§ 6.3.11","§ 4.2.4(c)","","","","","","","§ 3.2.7, App J","","","6-7",null,null,"11.2"]
[null,"01237, 01652","SM5.4.3(f), SM4.6.5, SM5.4.3(b), SM5.4.3©","","","§ 4.2.3(a)","","","","","§ 8.2.1, § 8.2.2, § 8.2.3, § 8.2.4, § 8.3.3, § 8.5.4","","§ 2.4.1, § 2.4.2, § 2.5, § 2.4.3, § 2.4.4","§ 12.9.1, § 12.9.3","","6-7",null,null,"11.2"]
[null,"01760","SM4.6.2(c), SM4.6.7","","","§ 4.2.3(a)","","","","","§ 8.5.7","","§ 3.1.1, App G","§ 12.9.5","","6-7"]
[null,"01218","SM4.6.3, CB2.4.3(b), CI3.4.3(b), NW3.3.3(b), UE6.2.2(b)","","","","","","","","§ 8.3.1, § 8.3.2, § 8.5.2, § 8.3.1, § 8.3.2, § 8.5.8 ¶ 3","","§ 2.3.2","","","5-7"]
[null,"01216","SM5.3.7","","","","","","","","§ 8.3.5, § 9.3.4","","§ 3.4.1 ¶ 4, App B","§ 12.9.2","§ 3","5-7"]
[null,"00588","SM5.3.2(c), SM5.4.1, SM5.5.1","","§ 6.3.11","§ 4.2.2(h), Annex A.13.2.1","","","","","","","§ 2.2, § 2.3.3","","§ 3","5-7"]
[null,"01207","SM5.3.10","","","","§ 13.1.1","","","","§ 8.3.4","","§ 3.2.6 ¶ 10","","","7",null,null,"11.1"]
[null,"01751","SM1.2.7(l), SM5.5.2, CB2.4.5(b), CB3.4.4(k), CI3.4.5(b), CI5.2.4(k), CI5.2.5(b), NW3.3.5(b), NW4.2.4(k), SD2.2.4(j), SD2.2.5(b), UE1.2.6(k), UE6.2.4(b)","","","","","","","","§ 8.5.8 ¶ 2","","§ 3.3.2.1, § 3.3.2.2","App A § 1.4","","7.3.1.2"]
[null,"01757","CB2.4.5(d), CI3.4.5(d), NW3.3.5(d), UE6.2.4(d)","","","","","","","","","","§ 3.3.4, § 5.4.3, § 6.4.3, § 7.4","","","7"]
["8.5. Establish and maintain a process for communicating the events to external parties. ","01210, 01212","SM4.6.2(a), SM5.4.3(g)","","","","","","","","§ 8.5.4, § 8.3.6, § 8.5.3, § 8.5.6","App D (Communication Planning)","§ 2.3.4.2, § 2.3.4.3, § 2.3.4.4","§ 12.9.1","","6-7",null,null,"11.1"]
[null,"01214","SM6.7.4(b), SM6.7.5(i), CB6.1.2, CB6.1.3(b)","AI5.2","§ 5.7.5","","§ 6.2.1, § 13.1.1","","","","","","","","","5.3.3"]
["9. Business Continuity Management"]
["9.1. Identify the critical activities and their continuity requirements. "]
[null,"00736","SM4.7.5, CI6.1.3","","","","§ 14.1.1","","","","§ 7.6","§ 3.2.1","","",""]
[null,"00739-00740","SM4.7.7, CB2.5.4, CI6.1.2, UE6.5.4, SM4.7.2(b)","DS4.3","§ 7.2 ¶ 5, § 7.2 ¶ 6(b), § 7.15.4","","§ 14.1.1, § 14.1.4, § 14.1.2","","","","§ 7.3, § 8.3.3, § 8.7.3(a), § 8.7.4, § 6.4, § 7.5.2, § 8.7.3","§ 3.2.2","","","§ 3"]
["9.2. Establish and maintain a business continuity strategy. ","00735","CB2.5.6, UE6.5.7","","","Annex A.14.1.3","§ 14.1.2","","","","§ 5.4.2, § 7.5.3","§ 3.4, § 5.1, § 5.5","","","",null,null,null,"12.1"]
[null,"732,00734, 01243","SM4.7.1(b), UE6.5.2, NW3.6.3(b), NW3.6.3©, CB2.5.2, CI6.1.7","DS4.1, DS4.2","","Annex A.14.1.4","§ 14.1.4, § 14.1.1","","","","§ 8.3.1, § 8.7.1, § 4.3 ¶ 5","§ 2.2, § 3.1","","","§ 3","7.3.3.2"]
[null,"00733","SM4.7.2(e), CB2.5.1, CB2.5.3(b), CI6.1.2, CI6.1.4(d), CI6.1.5(a), UE6.5.1, UE6.5.3(b)","","","","","","","","§ 4.3 ¶ 2, § 5.2.1, § 7.8.3, § 8.7.4","§ 3.4.6","","",""]
["9.3. Establish and maintain systems continuity plans.","00752","SM4.7.2, CB2.5.2, CI6.1.1, CI6.1.4, NW3.6.3(a)","DS4.2","§ 5.12","","§ 14.1.3","","","","§ 5.5, § 8.3.1, § 8.7.1","§ 3.1, § 4.5, App A","","","§ 3"]
[null,"01372","","","","","","","","","§ 8.7.2, § 8.7.5 ¶ 2","§ 4.1 ¶ 3","","",""]
[null,"01167","","","","","","","","","§ 8.3.6","§ 4.2.2","","",""]
[null,"01169","","","","","§ 14.1.4","","","","§ 6.4, § 7.2.1","§ 4.3","","",""]
[null,"00742","SM4.7.3, CI6.2.1","DS4.8","§ 5.2, § 6.2.2, § 6.2.3, § 6.2.4, § 6.2.7, § 6.2.8, § 6.2.9, § 6.2.10, § 8.2, § 8.3, § 8.4, § 8.5","","","","","","§ 7.4","§ 3.4.3, § 5.1.5 ¶ 2 thru 3","","","§ 3"]
[null,"01250","CI3.2.2, CI3.2.3, CI6.1.6(a)","DS4.9","","","","","","","§ 7.6 ¶ 3","§ 5.1.2 ¶ 1","","",""]
[null,"00750","","PO4.13","§ 6.11","","","","","","","","","",""]
["9.4. Exercise the systems continuity plan. ","00755","CB2.5.3(d), CB2.5.7(c), CI6.3, NW3.6.3(e), UE6.5.3(d)","DS4.5","§ 5.10, § 7.15.6.2, § 7.15.6.3","Annex A.14.1.5","§ 14.1.5","","","","§ 5.4.1, § 9.2","§ 3.5.1, § 3.5.4","","",""]
[null,"04896","","","","","","","","","","","","",""]
[null,"00759","SM4.7.7, CI6.1.2","DS4.6","§ 5.9.1, § 5.9.2, § 5.9.3","","","","","","§ 5.3.1, § 10.3","§ 3.5.2","","","§ 3"]
["9.5. Maintain and review the systems continuity plan. ","00754","","DS4.4","","Annex A.14.1.5","§ 14.1.5","","","","§ 9.4","","","",""]
[null,"00758","SM4.7.1(d), CI6.3.3, CI6.3.4, NW3.6.3(d), NW3.6.3(f)","","§ 5.12, § 7.15.5.1","Annex A.14.1.5","§ 14.1.5","","","","§ 4.3 ¶ 4, § 5.4.1, § 8.3.5","§ 3.6","","","§ 3"]
[null,"00760","CI6.1.2","DS4.7","§ 5.3.4, § 5.8.1","","","","","","§ 8.3.5 ¶ 2","§ 3.6 ¶ 3","","",""]
["9.6. Establish and maintain a disaster recovery capability. "]
[null,"01401","CI3.2.5(d)","","","Annex A.10.5.1","§ 10.5.1","","","","","§ 5.1.5 ¶ 1","","","§ 3"]
[null,"01920","CB4.4.2(d), CI3.2.5(h), NW3.5.2(d)","","","","§ 10.5.1","","","","","","","",""]
[null,"01258","CB4.4.1, CI2.5.5(h), CI3.2.1, CI3.2.5(a), NW2.1.2(d), NW3.5.1, UE6.3.1, UE6.3.2, CB4.4.2(d), CB4.4.3, CI3.2.5(a), NW3.5.2(d), NW3.5.3, UE6.3.2, UE6.3.4","DS11.5","","Annex A.10.5.1","§ 10.5.1","","","","","§ 3.4.2","","","§ 3"]
[null,"00957","CB4.4.4, CI3.2.6, NW3.5.4, UE6.3.5","DS11.3","","","","","","","","","","",""]
[null,"00573","","","","","","","","","","","","§ 9.5.b",""]
[null,"01332","CB 4.4.4(b), CI 3.2.6(b), NW 3.5.4(b), UE 6.3.5(b)","DS4.9","§ 6.4.7(c)","","§ 9.1.4, § 10.5.1","","","","","§ 3.4.2, § 5.1.3 ¶ 4, § 5.1.5 ¶ 1","","§ 9.5.a","§ 3"]
[null,"00744","CI6.2.1","DS4.8","§ 7.10","","","","","","","","","","§ 3"]
[null,"01394","","","§ 5.4","","","","","","","","","","§ 3"]
[null,"01395","SM4.7.4, CI6.2.2","","§ 7.7","","","","","","","","","","§ 3"]
["10. Monitoring and Security Testing"]
["10.1. Define the roles and responsibilities, in a clear manner, of all personnel involved in the monitoring and security testing process. ","00678","SM3.2.2(f), CB5.3.2, CI5.4.3, NW4.4.3","","","","","","","","","","","",""]
[null,"00679","","PO3.5","","","","","","","","","","",""]
[null,"01204","","ME4.7","","","","","","","","","","",""]
[null,"00681","","","","§ 6","§ 6.1.8","","","","","","","",""]
[null,"01200","","ME2.6","","","","","","","","","","",""]
["10.2. Establish and maintain monitoring and logging policies. "]
["10.3. Establish monitoring and logging operations for all key systems according to the defined policies. ","00637-00638","SM6.5.3(c), SM7.1.3(c), CB2.1.3(c), CB5.4.5(c), CI2.2.1, CI5.5.5(c), NW1.1.5, NW4.5.5(c), SD2.3.5(c), UE1.1.3©, SM6.8.2(d), CB6.4.2(g), CI2.2.5, SD4.6.3(g), NW2.1.2, CI2.2.2","ME1.1","§ 6.14.10, § 7.5.6","Annex A.10.10.2","§ 10.6.1, § 10.10.1, § 10.10.2","","","","","","","","§ 3","5-7","6.1",null,"8.4, 8.5"]
[null,"00594","CI2.2.5(d)","","","Annex A.10.10.6","§ 10.10.1, § 10.10.6","","","","","","","§ 10.3.3, § 10.4","§ 3"]
[null,"01335","CB2.2.6(d), CI2.2.2(c)","","","","§ 10.10.1","","","","","","","§ 10.3.2",""]
[null,"01338","","","","","","","","","","","","§ 10.3.5","",null,null,"10.3.2"]
[null,"01339","","","","","","","","","","","","§ 10.3.6","",null,null,"10.3.2"]
[null,"00648","","","","","","","","","","","","§ 10.2.5","",null,null,"10.3.2"]
[{"$nulls":17},"10.1.1, 10.1.3, 10.2.1,10.3.2","8.5"]
[null,"00646","","","","","","","","","","","","§ 10.2.3","§ 3"]
[null,"00642","SM7.2.1, CI5.5.4(d), SD2.3.4(d)","","§ 6.14.10, § 7.5.6, § 7.6.7","","","","","","","","","§ 10.6",""]
[null,"00643","CI1.4.1(d), NW3.1.1(d)","DS13.1, ME1.2","§ 7.5.8(a)","","","","§ 4.2.4.2","","","","","§ 10.7",""]
[null,"01425","CI2.2.7","","","","","","","","","","","","§ 3"]
[null,"00595","","","","","§ 10.10.1","","","","","","","",""]
[null,"01426","","","","","§ 10.10.3","","","","","","","","§ 3"]
[null,"01427","","","","","","","","","","","","","§ 3"]
[null,"00651","","ME1.4","§ 9.3","","","","","","","","","",""]
[null,"04544","","","","Annex A.10.10.5","§ 10.10.5","","","","","","","","","6"]
[null,"00653","SM7.1.4, CB5.4.6, CI1.4.8, CI5.5.6, NW3.1.7, NW4.5.6, SD2.3.6","ME1.5","","","","","","","","","","",""]
["10.4. Establish and maintain a security testing and assessment policy.","00654","","","§ 6.3.10, § 7.5.9, § 7.16.2","","","","","","","","","§ 11","§ 3","7.3.2.3"]
[null,"00655-00656, 01277","SM7.1.3(a), CB5.4.5(a), CI5.5.5(a), NW4.5.5(a), SD2.3.5(a), CI1.4.5(a), NW3.1.3(a)","","","","§ 15.2.2","","","","","","","§ 11.2, ","","7.3.2.3",null,null,"10.1"]
[null,"00370","","","","","","","","","","","","§ 11.1","","7.3.2.3"]
[null,"01105","","","","","","","","","","","","","§ 3","7.3.2.3"]
[null,"00658","SM7.2.3","PO9.6, ME2.1","§ 6.15, § 7.14.3(a), § 7.14.3(c), § 7.16.4","","","","","","§ 9.5.4 ¶ 2, § 9.5.6","","","","","7.3.3.1"]
[null,"00660","SM6.6.6","","","","","","","","","","","",""]
[null,"01922","","","","Annex A.15.2.1, Annex A.15.2.2","§ 5.1.1","","","","","","","",""]
[null,"00664","SD5.1.7","","","","","","","","","","","",""]
[null,"00666","CI1.4.7, NW3.1.6, SD5.1.8","","","","","","","","","","","",""]
["10.5. Establish and maintain a compliance monitoring and audit policy.","00671","","ME2.4, ME3.3, ME3.4","","","","","","","","","","","","7.3.2.3",null,null,"13.1"]
[null,"02157","SM7.2.2","","","","","","","","","","","",""]
[null,"00673","","","","","","","","","","","","§ 10.5.a",""]
[null,"01342","","","","","","","","","","","","§ 10.5.1",""]
[null,"01344","CI2.2.9(b)","","","","","","","","","","","§ 10.5.3",""]
[null,"01346","","","","","","","","","","","","§ 10.5.4",""]
[null,"01345","CB3.1.7(c), CI2.2.9(c), CI2.2.6","","","Annex A.10.10.3","§ 10.10.3","","","","","","","§ 10.5.2, § 10.5.5",""]
[null,"00674","CB3.1.7(b), CI1.4.2, CI2.2.2(g), CI2.2.9(a)","","","","","","","","","","","","§ 3"]
[null,"00684","SM7.1.1, SM7.1.2, CB5.4.1, CB5.4.4, CI5.5.1, CI5.5.4, NW4.5.1, NW4.5.4, SD2.3.1, SD2.3.4","","§ 6.14.6.1","§ 4.2.3(e), § 5.1, § 6","","","","","§ 5.2.2 ¶ 3","","","","§ 3"]
["10.6. Establish and maintain a plan of action for correcting deficiencies that were found in audits. ","00675","","PO9.6, ME1.6, ME2.7","","","","","","","","","","","§ 3"]
[null,"00676","SM7.2.4, SM7.2.5, SM7.2.7","ME3.5, ME4.6","","","","","","","","","","",""]
[null,"04547","SM7.1.3(e), CB5.4.5(e), CI5.5.5(d), NW4.5.5(e), SD2.3.5(e)","","","Annex A.15.3.2","§ 15.3.2","","","","","","","",""]
[null,"01145","","","§ 6.14.6.2","","","","","","","","","",""]
[null,"01149","","ME3.2","","","","","","","","","","",""]
[null,"01177","","ME2.3","","§ 8.2","","","","","","","","",""]
["10.7. Report to management the periodic reviews of compliance checklists, audit reports, sign-off sheets, and others.","01159","","","§ 6.14.6.3","§ 6","","","","","","","","",""]
[null,"01150","SM7.1.2(b), CB5.4.4(c), CI5.5.4(c), NW4.5.4(c), SD2.3.4(c)","","","","","","","","","","","",""]
[null,"01156","","","§ 6.14.6.4","","","","","","","","","",""]