OSCAL source · IRPROC
{
"artifactId": "IRPROC",
"iso": [
"A.5.24",
"A.5.25",
"A.5.26",
"A.5.27",
"A.5.28"
],
"catalog": [
{
"iso": "A.5.24",
"oscalId": "iso27001-a.5.24",
"title": "Information security incident management planning and preparation",
"className": "iso27001-annex-a",
"group": "Organizational controls (Annex A.5)"
},
{
"iso": "A.5.25",
"oscalId": "iso27001-a.5.25",
"title": "Assessment and decision on information security events",
"className": "iso27001-annex-a",
"group": "Organizational controls (Annex A.5)"
},
{
"iso": "A.5.26",
"oscalId": "iso27001-a.5.26",
"title": "Response to information security incidents",
"className": "iso27001-annex-a",
"group": "Organizational controls (Annex A.5)"
},
{
"iso": "A.5.27",
"oscalId": "iso27001-a.5.27",
"title": "Learning from information security incidents",
"className": "iso27001-annex-a",
"group": "Organizational controls (Annex A.5)"
},
{
"iso": "A.5.28",
"oscalId": "iso27001-a.5.28",
"title": "Collection of evidence",
"className": "iso27001-annex-a",
"group": "Organizational controls (Annex A.5)"
}
],
"profileAlters": [
{
"control-id": "iso27001-a.5.24",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "Required for incident readiness."
},
{
"name": "implementation-status",
"value": "Implemented"
}
]
}
]
},
{
"control-id": "iso27001-a.5.25",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "Required for event triage."
},
{
"name": "implementation-status",
"value": "Implemented"
}
]
}
]
},
{
"control-id": "iso27001-a.5.26",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "Required for incident handling."
},
{
"name": "implementation-status",
"value": "Implemented"
}
]
}
]
},
{
"control-id": "iso27001-a.5.27",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "Required for improvement after incidents."
},
{
"name": "implementation-status",
"value": "Planned"
}
]
}
]
},
{
"control-id": "iso27001-a.5.28",
"adds": [
{
"props": [
{
"name": "applicability",
"value": "applicable"
},
{
"name": "applicability-justification",
"value": "Required for audit and incident evidence."
},
{
"name": "implementation-status",
"value": "Implemented"
}
]
}
]
}
],
"components": [],
"sspImplementedRequirements": []
}
Close
