NIST 800-171 GAP Analysis

Access Control (AC) [Details]

Do you have Access Control measures (AC-3) in place?

Yes No

Is Security Awareness Training (AT-2) conducted regularly?

Yes No

Do you have Audit and Accountability measures (AU-2) in place?

Yes No

Is there a Configuration Management process (CM-2) in place?

Yes No

Are Identification and Authentication controls (IA-2) implemented?

Yes No

Is an Incident Response Plan (IR-4) implemented?

Yes No

Are there regular Maintenance activities (MA-2) in place?

Yes No

Do you have Media Protection controls (MP-4) in place?

Yes No

Are there Personnel Security controls (PS-3) in place?

Yes No

Are Physical Protection measures (PE-2) in place?

Yes No

Is Risk Assessment (RA-3) regularly performed?

Yes No

Is a Security Assessment (CA-2) conducted regularly?

Yes No

Are System and Communications Protection measures (SC-7) implemented?

Yes No

Are System and Information Integrity (SI-2) measures in place?

Yes No