Control Family
PM — Program Management
32 controls · 5 enhancements
PM-1
Information Security Program Plan
LOW MODERATE HIGH PM-2
Information Security Program Leadership Role
LOW MODERATE HIGH PM-3
Information Security and Privacy Resources
LOW MODERATE HIGH PM-4
Plan of Action and Milestones Process
LOW MODERATE HIGH PM-5
System Inventory
LOW MODERATE HIGH PM-6
Measures of Performance
LOW MODERATE HIGH PM-7
Enterprise Architecture
LOW MODERATE HIGH PM-8
Critical Infrastructure Plan
LOW MODERATE HIGH PM-9
Risk Management Strategy
LOW MODERATE HIGH PM-10
Authorization Process
LOW MODERATE HIGH PM-11
Mission and Business Process Definition
LOW MODERATE HIGH PM-12
Insider Threat Program
LOW MODERATE HIGH PM-13
Security and Privacy Workforce
LOW MODERATE HIGH PM-14
Testing, Training, and Monitoring
LOW MODERATE HIGH PM-15
Security and Privacy Groups and Associations
LOW MODERATE HIGH PM-16
Threat Awareness Program
LOW MODERATE HIGH PM-17
Protecting Controlled Unclassified Information on External Systems
LOW MODERATE HIGH PM-18
Privacy Program Plan
LOW MODERATE HIGH PM-19
Privacy Program Leadership Role
LOW MODERATE HIGH PM-20
Dissemination of Privacy Program Information
LOW MODERATE HIGH PM-21
Accounting of Disclosures
LOW MODERATE HIGH PM-22
Personally Identifiable Information Quality Management
LOW MODERATE HIGH PM-23
Data Governance Body
LOW MODERATE HIGH PM-24
Data Integrity Board
LOW MODERATE HIGH PM-25
Minimization of Personally Identifiable Information Used in Testing, Training, and Research
LOW MODERATE HIGH PM-26
Complaint Management
LOW MODERATE HIGH PM-27
Privacy Reporting
LOW MODERATE HIGH PM-28
Risk Framing
LOW MODERATE HIGH PM-29
Risk Management Program Leadership Roles
LOW MODERATE HIGH PM-30
Supply Chain Risk Management Strategy
LOW MODERATE HIGH PM-31
Continuous Monitoring Strategy
LOW MODERATE HIGH PM-32