Appendix_A_Acronyms.md

List of Acronyms

Below is list of acronyms used in either the control header or the naming convention for controls

NIST Security Functions

• IY - Identify
• PT - Protect
• DT - Detect
• RD - Respond
• RR - Recover

NIST Category

├── Identify
   ├── AM - Asset Management
   ├── BE - Business Environment
   ├── GV - Governance
   └── RA - Risk Assessment


├── Protect
   ├── AC - Identity Management, Authentication and Access Control
   ├── AT - Awareness and Training
   ├── DS - Data Security
   ├── IP - Information Protection Processes and Procedures
   ├── MA - Maintenance
   └── PT - Protective Technology


├── Detect
   ├── AE - Anomalies and Events
   ├── CM - Security Continuous Monitoring
   └── DP - Detection Processes


├── Respond
   ├── RP - Response Planning
   ├── CO - Communications
   ├── AN - Analysis
   ├── MI - Mitigation
   └── IM - Improvements


├── Recover
   ├── RP - Recovery Planning
   └── IM - Improvements

IPAC model

• I - Integration
• P - Platform
• A - Access
• C - Customization