SCF - CFG-02.9 - Baseline Tailoring
Mechanisms exist to allow baseline controls to be specialized or customized by applying a defined set of tailoring actions that are specific to:
- Mission / business functions;
- Operational environment;
- Specific threats or vulnerabilities; or
- Other conditions or situations that could affect mission / business success.
Mapped framework controls
NIST 800-53
- PL-11
Control questions
Does the organization allow baseline controls to be specialized or customized by applying a defined set of tailoring actions that are specific to:
- Mission / business functions;
- Operational environment;
- Specific threats or vulnerabilities; or
- Other conditions or situations that could affect mission / business success?