1. Designated Entities Supplemental Validation
5 BAU Control Groups
DE.4DE.2DE.1 DE.3
SCOPE
MANAGEMENT
ORG STRUCTURE
CHD MANAGEMENT
ASSET MGT
CHANGE MGT
SEGMENTATION
DE.5
VALIDATION
MANAGEMENT
POLICY GAP
ANALYSIS
RISK ASSESSMENT
PENTEST
ASV
CONTROL
ASSESSMENTS
INCIDENT REPONSE
MANAGEMENT
INCIDENCE
RESPONSE
LOGGING
MONITORING
IDS/IPS
FIM
ANTI-VIRUS
ACCESS CONTROL
MANAGEMENT
USER ACCOUNT
MGT
CHD ACCESS RBAC
PRIVILEGE
ACCESS REVIEW
DATA
CLASSIFICATION
PROGRAM
MANAGEMENT
EXECUTIVE MGT
CHARTER
ROLES
R.A.C.I.
DOCUMENT
CONBTROLS
DOCUMENT
PROCESSESS
SECURITY TRAINING
AWARENESS