Safeguard Docs
Frameworks and Connectors

NIST CSF 2.0 and connectors

Which connectors provide evidence for NIST CSF 2.0, for which controls, and how to connect them.

Safeguard's automated tests map to 47 controls of NIST Cybersecurity Framework 2.0. 835 tests apply: 777 read a connected system, and 58 read Safeguard's own records (policies, people, training and devices), so they need no connector. A passing result is evidence toward a control, not proof that the control is met on its own.

In the framework library: NIST CSF 2.0 (Full), with what a scan checks, the controls and the policy templates.

How to connect for this framework

  1. Connect the systems you run from the table below. Each connector links to its setup steps.
  2. Open the framework on Compliance › Frameworks, then its Connectors tab: it lists the connectors that answer this framework's tests, which of them you have connected, and whether each connection is healthy.
  3. Tests run on their schedule, or straight away with Run now on Compliance › Tests. A passing test counts toward its controls once its preview period has ended.

Automated tests are switched on per workspace by the Safeguard team.

Connectors with automated evidence (360)

ConnectorControls it provides evidence forTests
Amazon Web Services (also AWS GovCloud, AWS CodeCommit, AWS Inspector, Amazon CloudWatch, Amazon S3, AWS Security Hub)DE.AE-02, DE.CM-01, DE.CM-09, ID.AM-07, ID.RA-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-02, PR.DS-11, PR.IR-01, PR.IR-03, PR.PS-01, PR.PS-02, PR.PS-04, RS.CO-02, RS.MA-01148
Google Cloud PlatformDE.CM-01, DE.CM-09, ID.AM-02, ID.RA-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-02, PR.DS-11, PR.IR-01, PR.IR-03, PR.PS-01, PR.PS-02, PR.PS-04, RS.CO-02112
Oracle Cloud (also Oracle Cloud Government)DE.AE-02, DE.CM-01, DE.CM-03, DE.CM-09, ID.AM-02, ID.RA-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-02, PR.DS-11, PR.IR-01, PR.IR-03, PR.PS-01, PR.PS-0466
GitHub (also GitHub Enterprise, GitHub Issues)GV.SC-05, ID.AM-02, ID.IM-03, ID.RA-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.PS-01, PR.PS-02, PR.PS-04, PR.PS-06, RS.MA-02, RS.MA-03, RS.MI-0244
Microsoft Azure (also Microsoft Entra ID, Azure Government)DE.CM-01, DE.CM-03, DE.CM-09, ID.RA-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-02, PR.DS-11, PR.IR-01, PR.PS-01, PR.PS-02, PR.PS-04, RS.CO-02139
GitLab (also GitLab Issues, GitLab Self-Managed)ID.AM-02, ID.IM-03, ID.RA-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.PS-01, PR.PS-02, PR.PS-04, PR.PS-06, RS.MA-02, RS.MA-03, RS.MI-0243
Google Workspace (also Google Cloud Identity, Google SSO)DE.CM-03, DE.CM-09, GV.SC-04, GV.SC-05, ID.AM-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-02, PR.IR-01, PR.PS-0224
Azure DevOpsID.AM-02, ID.IM-03, ID.RA-01, PR.AA-01, PR.AA-05, PR.DS-01, PR.PS-01, PR.PS-06, RS.MA-02, RS.MA-03, RS.MI-0225
Datadog (also Datadog CSM)DE.AE-02, DE.AE-06, DE.CM-01, DE.CM-09, ID.AM-02, ID.RA-01, PR.AA-01, PR.AA-05, PR.PS-01, PR.PS-0411
HetznerDE.CM-01, ID.RA-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-02, PR.DS-11, PR.IR-01, PR.PS-0415
Kubernetes (also Gatekeeper OPA, Kyverno)DE.CM-09, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-02, PR.IR-01, PR.IR-03, PR.PS-0149
OVHcloudDE.CM-01, ID.RA-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-11, PR.IR-01, PR.PS-0425
Alibaba CloudDE.CM-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-02, PR.DS-11, PR.IR-0120
CrowdStrike FalconDE.AE-02, DE.CM-09, ID.RA-01, PR.AA-01, PR.AA-05, PR.PS-01, PR.PS-02, RS.MI-0215
JiraID.IM-03, ID.IM-04, PR.AA-01, PR.AA-05, RS.AN-03, RS.MA-02, RS.MA-03, RS.MI-029
JumpCloud (also JumpCloud MDM, JumpCloud SSO)DE.CM-09, ID.AM-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.IR-01, PR.PS-0215
LinearID.IM-03, ID.IM-04, PR.AA-01, PR.AA-05, RS.AN-03, RS.MA-02, RS.MA-03, RS.MI-029
Microsoft IntuneDE.CM-09, ID.AM-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.IR-01, PR.PS-01, PR.PS-0210
StackRox (also Red Hat Advanced Cluster Security)DE.AE-02, DE.CM-01, ID.IM-02, ID.RA-01, ID.RA-06, PR.AA-01, PR.AA-05, PR.PS-0110
BitbucketID.AM-02, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.PS-01, PR.PS-0618
CloudflareDE.CM-01, DE.CM-09, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-02, PR.IR-0116
JamfID.AM-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.IR-01, PR.PS-01, PR.PS-029
MongoDB AtlasDE.CM-09, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-11, PR.IR-018
ServiceNowID.IM-03, PR.AA-01, PR.AA-05, PR.PS-01, RS.MA-02, RS.MA-03, RS.MI-029
AsanaID.IM-03, PR.AA-01, PR.AA-05, RS.MA-02, RS.MA-03, RS.MI-028
Cisco Meraki SMID.AM-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.PS-01, PR.PS-028
ClickUpID.IM-03, PR.AA-01, PR.AA-05, RS.MA-02, RS.MA-03, RS.MI-028
FleetID.AM-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.IR-01, PR.PS-028
GoDaddyDE.CM-09, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-02, PR.IR-0311
HerokuPR.AA-01, PR.AA-03, PR.AA-05, PR.DS-02, PR.DS-11, PR.PS-028
IBM CloudDE.CM-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.IR-0117
Ivanti NeuronsID.AM-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.PS-01, PR.PS-028
KandjiID.AM-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.IR-01, PR.PS-028
KolideID.AM-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.IR-01, PR.PS-028
Microsoft Defender for EndpointDE.AE-02, DE.CM-09, ID.RA-01, PR.PS-01, PR.PS-02, RS.MI-0212
MiradoreID.AM-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.PS-01, PR.PS-028
Monday.comID.IM-03, PR.AA-01, PR.AA-05, RS.MA-02, RS.MA-03, RS.MI-028
MosyleID.AM-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.IR-01, PR.PS-029
Redis CloudPR.AA-01, PR.AA-03, PR.AA-05, PR.DS-02, PR.DS-11, PR.IR-018
SentinelOneDE.AE-02, DE.CM-09, PR.AA-01, PR.AA-05, PR.PS-01, RS.MI-028
ShortcutID.IM-03, PR.AA-01, PR.AA-05, RS.MA-02, RS.MA-03, RS.MI-028
SolarWinds Service DeskID.IM-03, PR.AA-01, PR.AA-05, RS.MA-02, RS.MA-03, RS.MI-028
Sophos Intercept XDE.AE-02, DE.CM-09, PR.AA-01, PR.AA-05, PR.PS-01, RS.MI-029
SpaceshipDE.CM-09, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-02, PR.IR-0311
SupabasePR.AA-01, PR.AA-03, PR.AA-05, PR.DS-02, PR.DS-11, PR.IR-017
YouTrackID.IM-03, PR.AA-01, PR.AA-05, RS.MA-02, RS.MA-03, RS.MI-028
AkamaiPR.AA-01, PR.AA-03, PR.AA-05, PR.DS-02, PR.IR-016
Auth0 (also Auth0 SSO)DE.CM-03, PR.AA-01, PR.AA-03, PR.AA-05, PR.PS-0412
ChatGPTDE.CM-09, GV.OC-03, PR.AA-01, PR.AA-03, PR.AA-056
Cisco Secure EndpointDE.AE-02, DE.CM-09, ID.RA-01, PR.PS-02, RS.MI-026
Claude (Anthropic)DE.CM-09, GV.OC-03, PR.AA-01, PR.AA-03, PR.AA-0510
CodebergPR.AA-01, PR.AA-05, PR.DS-01, PR.PS-01, PR.PS-066
DigitalOceanDE.CM-09, PR.DS-02, PR.DS-11, PR.IR-01, PR.PS-0210
Elastic ObservabilityDE.CM-01, PR.AA-01, PR.AA-05, PR.DS-11, PR.PS-046
ElevenLabsDE.CM-09, GV.OC-03, PR.AA-01, PR.AA-03, PR.AA-057
Fireworks AIDE.CM-09, GV.OC-03, PR.AA-01, PR.AA-03, PR.AA-0510
GiteaPR.AA-01, PR.AA-05, PR.DS-01, PR.PS-01, PR.PS-066
LinodePR.AA-01, PR.AA-03, PR.AA-05, PR.DS-11, PR.IR-016
Mistral AIDE.CM-09, GV.OC-03, PR.AA-01, PR.AA-03, PR.AA-059
Okta (also Okta SSO)DE.CM-03, PR.AA-01, PR.AA-03, PR.AA-05, PR.PS-0414
OpenAI API PlatformDE.CM-09, GV.OC-03, PR.AA-01, PR.AA-03, PR.AA-0512
PlanetScalePR.AA-01, PR.AA-03, PR.AA-05, PR.DS-11, PR.PS-016
RedmineID.IM-03, PR.AA-05, RS.MA-02, RS.MA-03, RS.MI-025
SentryDE.CM-09, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-016
SimpleMDMID.AM-01, PR.AA-03, PR.DS-01, PR.IR-01, PR.PS-025
Sumo LogicDE.CM-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.PS-046
VMware Workspace ONEID.AM-01, PR.AA-03, PR.DS-01, PR.PS-01, PR.PS-027
xAIDE.CM-09, GV.OC-03, PR.AA-01, PR.AA-03, PR.AA-055
Bitdefender GravityZoneDE.AE-02, DE.CM-09, PR.PS-01, RS.MI-025
Check Point CloudGuardDE.CM-09, ID.AM-02, ID.RA-01, PR.PS-013
ClickHousePR.AA-01, PR.AA-05, PR.DS-11, PR.IR-015
Cortex XDRDE.AE-02, DE.CM-09, PR.PS-01, RS.MI-025
CrowdStrike Falcon CloudDE.CM-09, ID.AM-02, ID.RA-01, PR.PS-013
CybereasonDE.AE-02, DE.CM-09, PR.PS-01, RS.MI-025
Elastic SecurityDE.AE-02, DE.CM-09, PR.PS-01, RS.MI-025
FastlyPR.AA-01, PR.AA-03, PR.AA-05, PR.DS-025
Fortinet FortiEDRDE.AE-02, DE.CM-09, PR.PS-01, RS.MI-025
FreshservicePR.AA-05, RS.MA-02, RS.MA-03, RS.MI-024
GerritPR.AA-01, PR.AA-05, PR.PS-01, PR.PS-065
Hugging FaceGV.OC-03, PR.AA-01, PR.AA-03, PR.AA-058
HuntressDE.AE-02, DE.CM-09, PR.PS-01, RS.MI-026
InfisicalDE.CM-09, PR.AA-01, PR.AA-03, PR.AA-058
Kaspersky EndpointDE.AE-02, DE.CM-09, PR.PS-01, RS.MI-025
KeycloakPR.AA-01, PR.AA-03, PR.AA-05, PR.PS-047
LogicMonitorDE.CM-01, PR.AA-01, PR.AA-05, RS.MA-015
Logz.ioDE.CM-01, PR.AA-01, PR.AA-05, PR.PS-045
ManageEngineID.AM-01, PR.AA-05, PR.DS-01, PR.PS-026
New RelicDE.CM-01, PR.AA-01, PR.AA-05, PR.PS-044
NextcloudPR.AA-01, PR.AA-03, PR.AA-05, PR.DS-015
NinjaOneID.AM-01, PR.AA-05, PR.DS-01, PR.PS-026
OpenRouterGV.OC-03, PR.AA-01, PR.AA-03, PR.AA-058
OpenStackPR.AA-05, PR.DS-01, PR.DS-11, PR.IR-014
Opsgenie AlertsGV.RR-02, PR.AA-01, PR.AA-05, RS.MA-015
PagerDutyGV.RR-02, PR.AA-01, PR.AA-05, RS.MA-016
Red Hat OpenShiftDE.CM-09, PR.AA-03, PR.AA-05, PR.PS-015
RenderPR.AA-01, PR.AA-03, PR.AA-05, PR.DS-115
ScalewayPR.AA-01, PR.AA-03, PR.AA-05, PR.IR-015
SigNozDE.CM-01, PR.AA-01, PR.AA-05, PR.PS-047
SnowflakePR.AA-01, PR.AA-03, PR.AA-05, PR.IR-015
SplunkDE.AE-06, PR.AA-01, PR.AA-05, PR.PS-045
Symantec EndpointDE.AE-02, DE.CM-09, PR.PS-01, RS.MI-025
Terraform CloudPR.AA-01, PR.AA-03, PR.AA-05, PR.PS-015
UpCloudPR.AA-01, PR.AA-05, PR.DS-11, PR.IR-014
VercelPR.AA-01, PR.AA-03, PR.AA-05, PR.PS-016
VMwareDE.CM-09, PR.AA-01, PR.DS-11, PR.PS-016
VMware Carbon BlackDE.AE-02, DE.CM-09, PR.PS-01, RS.MI-025
VultrPR.AA-01, PR.AA-05, PR.DS-11, PR.IR-015
WithSecureDE.AE-02, DE.CM-09, PR.PS-01, RS.MI-025
AirtablePR.AA-01, PR.AA-03, PR.AA-054
AuthentikPR.AA-01, PR.AA-03, PR.AA-055
AutomoxID.AM-01, ID.RA-01, PR.PS-024
BackblazePR.DS-01, PR.DS-11, PR.IR-013
Better StackDE.CM-01, PR.PS-04, RS.MA-013
Citrix Endpoint ManagementID.AM-01, PR.PS-01, PR.PS-025
Cloudflare AccessPR.AA-01, PR.AA-03, PR.AA-053
CobaltID.IM-02, ID.RA-01, ID.RA-063
CoralogixDE.CM-01, PR.AA-01, PR.AA-053
Deep InstinctDE.AE-02, DE.CM-09, RS.MI-024
DockerPR.AA-01, PR.AA-05, PR.DS-014
Duo SecurityPR.AA-01, PR.AA-03, PR.AA-056
DynatraceDE.CM-01, PR.AA-01, PR.AA-053
env0PR.AA-01, PR.AA-05, PR.PS-014
ESET ProtectDE.AE-02, DE.CM-09, RS.MI-024
Fly.ioPR.AA-01, PR.AA-03, PR.AA-054
FusionAuthPR.AA-01, PR.AA-03, PR.AA-054
GrafanaDE.CM-01, PR.AA-01, PR.AA-055
GustoGV.RR-04, PR.AA-01, PR.AA-052
HashiCorp ConsulPR.AA-05, PR.DS-02, PR.PS-012
HashiCorp NomadPR.AA-05, PR.DS-02, PR.PS-012
HexnodeID.AM-01, PR.AA-05, PR.PS-025
IBM VerifyPR.AA-01, PR.AA-03, PR.AA-054
InstanaDE.CM-01, PR.AA-01, PR.AA-053
Jamf ProtectDE.AE-02, DE.CM-09, RS.MI-024
Jira Service ManagementID.IM-03, PR.PS-01, RS.MA-033
LogtoPR.AA-01, PR.AA-03, PR.AA-054
LookerPR.AA-01, PR.AA-03, PR.AA-054
MailgunPR.AA-01, PR.AA-03, PR.AA-054
MakePR.AA-01, PR.AA-03, PR.AA-054
MattermostPR.AA-01, PR.AA-03, PR.AA-054
MinIOPR.DS-01, PR.DS-11, PR.IR-013
OneLogin (also OneLogin SSO)PR.AA-01, PR.AA-03, PR.AA-057
Oracle IdentityPR.AA-01, PR.AA-03, PR.AA-055
ownCloudPR.AA-01, PR.AA-03, PR.AA-054
PingOne (also Ping Identity)PR.AA-01, PR.AA-03, PR.AA-056
Platform.shPR.AA-01, PR.AA-03, PR.AA-054
ProxmoxPR.AA-03, PR.AA-05, PR.DS-113
Pulumi (also Pulumi Cloud)PR.AA-01, PR.AA-05, PR.PS-014
Qualys EDRDE.AE-02, DE.CM-09, RS.MI-023
RailwayPR.AA-01, PR.AA-03, PR.AA-054
Red CanaryDE.AE-02, DE.CM-09, RS.MI-024
RollbarDE.CM-01, PR.AA-01, PR.AA-054
SalesforcePR.AA-01, PR.AA-03, PR.AA-054
Site24x7DE.CM-01, PR.AA-01, PR.AA-054
SlackPR.AA-01, PR.AA-03, PR.AA-054
SpaceliftPR.AA-01, PR.AA-05, PR.PS-013
TaniumDE.AE-02, DE.CM-09, RS.MI-024
TrellixDE.AE-02, DE.CM-09, RS.MI-024
Trend Micro Apex OneDE.AE-02, DE.CM-09, RS.MI-025
ZabbixDE.CM-01, PR.AA-01, PR.AA-054
ZendeskPR.AA-01, PR.AA-03, PR.AA-054
ZitadelPR.AA-01, PR.AA-03, PR.AA-054
ZoomPR.AA-01, PR.AA-03, PR.AA-054
15FivePR.AA-01, PR.AA-052
1PasswordPR.AA-01, PR.AA-052
Action1ID.AM-01, PR.PS-022
ActiveCampaignPR.AA-01, PR.AA-053
Adobe Acrobat SignPR.AA-01, PR.AA-053
Aha!PR.AA-01, PR.AA-053
Aikido SecurityID.RA-01, ID.RA-064
AirbytePR.AA-01, PR.AA-053
AircallPR.AA-01, PR.AA-052
AmplitudePR.AA-01, PR.AA-052
AnchoreID.RA-01, ID.RA-064
AnsiblePR.AA-01, PR.AA-053
Apollo IOPR.AA-01, PR.AA-052
AptiblePR.AA-01, PR.AA-053
AshbyPR.AA-01, PR.AA-053
AssemblaPR.AA-01, PR.AA-053
AttioPR.AA-01, PR.AA-053
BambooHRGV.RR-04, PR.AA-011
BaramundiID.AM-01, PR.PS-024
BasecampPR.AA-01, PR.AA-053
BeanstalkPR.AA-01, PR.AA-053
Beyond IdentityPR.AA-01, PR.AA-052
BitSightID.RA-01, ID.RA-062
BoldSignPR.AA-01, PR.AA-053
BoxPR.AA-01, PR.AA-053
BrexPR.AA-01, PR.AA-052
Bright SecurityID.RA-01, ID.RA-064
BugcrowdID.RA-01, ID.RA-062
Burp SuiteID.RA-01, ID.RA-063
CanvaPR.AA-01, PR.AA-052
CapsulePR.AA-01, PR.AA-052
CensusPR.AA-01, PR.AA-053
Ceridian DayforceGV.RR-04, PR.AA-011
CheckmarxID.RA-01, ID.RA-064
Citrix ShareFilePR.AA-01, PR.AA-053
ClosePR.AA-01, PR.AA-053
ConfluencePR.AA-01, PR.AA-052
Contrast SecurityID.RA-01, ID.RA-064
CopperPR.AA-01, PR.AA-052
Cortex XSOARRS.MA-03, RS.MI-022
CoupaPR.AA-01, PR.AA-053
Culture AmpPR.AA-01, PR.AA-052
D3 SecurityRS.MA-03, RS.MI-022
DatabricksPR.AA-01, PR.AA-053
dbt CloudPR.AA-01, PR.AA-052
DeelGV.RR-04, PR.AA-011
Dependency-TrackID.RA-01, ID.RA-064
DetectifyID.RA-01, ID.RA-063
DialpadPR.AA-01, PR.AA-053
DocuSignPR.AA-01, PR.AA-053
DropboxPR.AA-01, PR.AA-053
Dropbox SignPR.AA-01, PR.AA-053
EgnytePR.AA-01, PR.AA-053
Employment HeroGV.RR-04, PR.AA-011
Endor LabsID.RA-01, ID.RA-064
EscapeID.RA-01, ID.RA-064
EsperID.AM-01, PR.PS-022
FactorialGV.RR-04, PR.AA-011
FigmaPR.AA-01, PR.AA-053
FivetranPR.AA-01, PR.AA-053
folkPR.AA-01, PR.AA-052
ForgeRockPR.AA-01, PR.AA-052
FreshdeskPR.AA-01, PR.AA-053
FrontPR.AA-01, PR.AA-053
GitGuardianID.RA-01, ID.RA-063
GoHighLevelPR.AA-01, PR.AA-053
Google Chronicle SOARRS.MA-03, RS.MI-022
GoTo ConnectPR.AA-01, PR.AA-053
GreenhousePR.AA-01, PR.AA-053
HackerOneID.RA-01, ID.RA-062
HashiCorp VaultDE.CM-01, PR.AA-032
Hevo DataPR.AA-01, PR.AA-053
HiBob (also Bob)GV.RR-04, PR.AA-011
HightouchPR.AA-01, PR.AA-052
HivePR.AA-01, PR.AA-052
HubSpotPR.AA-01, PR.AA-053
HumaansGV.RR-04, PR.AA-011
IBM QRadar SOARRS.MA-03, RS.MI-022
InsightlyPR.AA-01, PR.AA-053
IntercomPR.AA-01, PR.AA-052
IntruderID.RA-01, ID.RA-064
InvictiID.RA-01, ID.RA-064
IroncladPR.AA-01, PR.AA-052
JFrog XrayID.RA-01, ID.RA-063
KeapPR.AA-01, PR.AA-053
LaceworkID.RA-01, ID.RA-063
LatticePR.AA-01, PR.AA-052
LaunchpadPR.AA-01, PR.AA-052
LeverPR.AA-01, PR.AA-053
LoopioPR.AA-01, PR.AA-053
MalwarebytesDE.CM-09, PR.PS-013
MendID.RA-01, ID.RA-063
Microsoft Dynamics 365PR.AA-01, PR.AA-053
MiroPR.AA-01, PR.AA-052
MixpanelPR.AA-01, PR.AA-052
n8nPR.AA-01, PR.AA-053
NetlifyPR.AA-01, PR.AA-053
NorthflankPR.AA-01, PR.AA-052
NotionPR.AA-01, PR.AA-052
Nucleus SecurityID.RA-01, ID.RA-064
NutanixPR.AA-05, PR.DS-112
NutshellPR.AA-01, PR.AA-053
OneflowPR.AA-01, PR.AA-052
OneSpan SignPR.AA-01, PR.AA-052
OneTrust VendorpediaPR.AA-01, PR.AA-052
OpenPhonePR.AA-01, PR.AA-053
Ox SecurityID.RA-01, ID.RA-064
PandaDocPR.AA-01, PR.AA-053
PaychexGV.RR-04, PR.AA-011
PingdomPR.AA-01, PR.AA-052
PipedrivePR.AA-01, PR.AA-053
PortainerPR.AA-01, PR.AA-052
PreyID.AM-01, PR.PS-022
Prisma CloudID.RA-01, ID.RA-063
ProbelyID.RA-01, ID.RA-064
ProductboardPR.AA-01, PR.AA-053
ProwlerID.RA-01, PR.PS-012
QoveryPR.AA-01, PR.AA-053
QualysID.RA-01, ID.RA-064
RampPR.AA-01, PR.AA-053
RancherPR.AA-01, PR.AA-053
Rapid7 InsightIDRDE.AE-02, RS.MI-022
Rapid7 InsightVMID.RA-01, ID.RA-064
RingCentralPR.AA-01, PR.AA-053
RipplingGV.RR-04, PR.AA-011
Rocket.ChatPR.AA-01, PR.AA-053
Sage HRGV.RR-04, PR.AA-011
SailPointPR.AA-01, PR.AA-053
SalesflarePR.AA-01, PR.AA-052
SAP SuccessFactorsGV.RR-04, PR.AA-011
SaplingGV.RR-04, PR.AA-011
SecurityScorecard AtlasID.RA-01, ID.RA-061
SegmentPR.AA-01, PR.AA-053
SemgrepID.RA-01, ID.RA-064
SendGridPR.AA-01, PR.AA-053
SetylID.AM-01, PR.AA-052
SharePointPR.AA-05, PR.DS-014
SignNowPR.AA-01, PR.AA-052
SignRequestPR.AA-01, PR.AA-053
SmartsheetPR.AA-01, PR.AA-053
SnykID.RA-01, ID.RA-064
SocketID.RA-01, ID.RA-063
SonarQubeID.RA-01, ID.RA-064
Splunk SOARRS.MA-03, RS.MI-022
StackHawkID.RA-01, ID.RA-063
StreakPR.AA-01, PR.AA-052
SugarCRMPR.AA-01, PR.AA-053
TeamworkPR.AA-01, PR.AA-053
TelnyxPR.AA-01, PR.AA-052
TenableID.RA-01, ID.RA-064
TinesPR.AA-01, PR.AA-053
TorqRS.MA-03, RS.MI-022
Tray.ioPR.AA-01, PR.AA-052
TrelloPR.AA-01, PR.AA-053
Trend Micro Cloud OneID.RA-01, PR.PS-013
UKGGV.RR-04, PR.AA-011
UpGuard Vendor RiskID.RA-01, ID.RA-062
VeracodeID.RA-01, ID.RA-064
VtigerPR.AA-01, PR.AA-053
WasabiPR.DS-11, PR.IR-013
WebexPR.AA-01, PR.AA-053
WizID.RA-01, ID.RA-063
WorkablePR.AA-01, PR.AA-053
WorkatoPR.AA-01, PR.AA-053
WorkdayGV.RR-04, PR.AA-011
WrikePR.AA-01, PR.AA-053
YousignPR.AA-01, PR.AA-053
Zendesk SellPR.AA-01, PR.AA-053
ZenefitsGV.RR-04, PR.AA-011
Zoho CRMPR.AA-01, PR.AA-053
Zoho DeskPR.AA-01, PR.AA-053
360LearningPR.AT-011
42GearsID.AM-011
AppDynamicsDE.CM-011
Check Point HarmonyDE.CM-092
ChronosphereDE.CM-011
CivoPR.IR-012
CronitorDE.CM-011
DoceboPR.AT-011
FirebasePR.AA-051
Google DrivePR.DS-011
Immersive LabsPR.AT-021
LessonlyPR.AT-011
OpalPR.AA-052
PrometheusDE.CM-011
Proofpoint Security AwarenessPR.AT-012
RiotPR.AT-012
ShufflePR.AA-012
TalentLMSPR.AT-011
ThreatConnectPR.AA-012
ToriiPR.AA-052
TurbotPR.PS-011
Udemy BusinessPR.AT-011
Uptime RobotDE.CM-011
VezaPR.AA-051
VictoriaMetricsDE.CM-011
WebrootDE.CM-092
YardstikGV.RR-041

Evidence by attestation (95)

These systems publish no API for what the tests check. Connect them to record the connection, then attest the result; an accepted attestation counts toward the control.

ConnectorControls
8x8PR.AA-05
AcunetixID.RA-01
AddigyID.AM-01, PR.PS-02
AffinityPR.AA-05
AirbasePR.AA-05
ApiiroID.RA-01
Aqua SecurityID.RA-01
Arctic WolfDE.CM-09
ArnicaID.RA-01
Blackpoint CyberDE.CM-09
BugsnagPR.AA-05
CartaPR.AA-05
CheckmkDE.AE-06, PR.AA-05
CloudanixID.RA-01
CohereGV.OC-03, PR.AA-05
ConcordPR.AA-05
ContractbookPR.AA-05
ContractSafePR.AA-05
CoreStackID.RA-01
CyberArkPR.AA-03, PR.AA-05
CynetDE.CM-09
CyscaleID.RA-01
CywareRS.MA-01
DeepSeekGV.OC-03, PR.AA-05
DocumensoPR.AA-05
EdgescanID.RA-01
EversignPR.AA-05
EvisortPR.AA-05
Foxit eSignPR.AA-05
FreshsalesPR.AA-05
GatekeeperPR.AA-05
GetAcceptPR.AA-05
GitKrakenPR.AA-05
GroqGV.OC-03, PR.AA-05
HoneycombDE.AE-06
IBM MaaS360ID.AM-01, PR.PS-02
IDrivePR.DS-11
JuroPR.AA-05
KionID.RA-01
LastPass SSOPR.AA-03, PR.AA-05
Legit SecurityID.RA-01
LexionPR.AA-05
LinkSquaresPR.AA-05
LookoutDE.CM-09
MatillionPR.AA-05
MessageBirdPR.AA-05
Microsoft 365 CopilotGV.OC-03, PR.AA-05
NagiosDE.AE-06
NessusID.RA-01
NetdataPR.AA-05
NextivaPR.AA-05
OpenVASID.RA-01
Orca SecurityID.RA-01
pCloudPR.AA-05
PerplexityGV.OC-03, PR.AA-05
PhylumID.RA-01
PipedreamPR.AA-05
PlivoPR.AA-05
PostmarkPR.AA-05
PrecoroPR.AA-05
Rapid7 InsightCloudSecID.RA-01
Rapid7 InsightConnectRS.MA-01
RaygunPR.AA-05
ReplicateGV.OC-03, PR.AA-05
ResponsivePR.AA-05
RightSignaturePR.AA-05
Rippling MDMID.AM-01, PR.PS-02
RiskReconID.RA-01
RudderStackPR.AA-05
SAP AribaPR.AA-05
ScalefusionID.AM-01, PR.PS-02
SignablePR.AA-05
SigneasyPR.AA-05
SignWellPR.AA-05
SkribblePR.AA-05
Sonrai SecurityID.RA-01
SOTI MobiControlID.AM-01, PR.PS-02
SpotDraftPR.AA-05
StitchPR.AA-05
StorjPR.DS-01
Stream SecurityID.RA-01
Sweet SecurityID.RA-01
SwimlaneRS.MA-01
SysdigID.RA-01
Tenable Cloud SecurityID.RA-01
Together AIGV.OC-03, PR.AA-05
TwilioPR.AA-05
UptycsID.RA-01
VonagePR.AA-05
WallarmID.RA-01
YottaDE.CM-01, ID.RA-01, PR.AA-01, PR.AA-03, PR.AA-05, PR.DS-01, PR.DS-11, PR.IR-01, PR.PS-04
Z.ai (Zhipu GLM)GV.OC-03, PR.AA-05
ZipPR.AA-05
Zoho SignPR.AA-05
Zscaler Posture ControlID.RA-01

Controls (47)

ControlTitleAutomated testsConnectors
DE.AE-02Potentially adverse events are analyzed to better understand associated activities837
DE.AE-06Information on adverse events is provided to authorized staff and tools36
DE.CM-01Networks and network services are monitored to find potentially adverse events3644
DE.CM-03Personnel activity and technology usage are monitored to find potentially adverse events412
DE.CM-09Computing hardware and software, runtime environments, and their data are monitored to find potentially adverse events6473
GV.OC-02Internal and external stakeholders are understood, and their needs and expectations regarding cybersecurity risk management are understood and considered10
GV.OC-03Legal, regulatory, and contractual requirements regarding cybersecurity, including privacy and civil liberties obligations, are understood and managed317
GV.OV-01Cybersecurity risk management strategy outcomes are reviewed to inform and adjust strategy and direction10
GV.PO-01Policy for managing cybersecurity risks is established based on organizational context, cybersecurity strategy, and priorities and is communicated and enforced20
GV.PO-02Policy for managing cybersecurity risks is reviewed, updated, communicated, and enforced to reflect changes in requirements, threats, technology, and organizational mission10
GV.RR-02Roles, responsibilities, and authorities related to cybersecurity risk management are established, communicated, understood, and enforced32
GV.RR-04Cybersecurity is included in human resources practices718
GV.SC-04Suppliers are known and prioritized by criticality33
GV.SC-05Requirements to address cybersecurity risks in supply chains are established, prioritized, and integrated into contracts and other types of agreements with suppliers and other relevant third parties66
GV.SC-07The risks posed by a supplier, their products and services, and other third parties are understood, recorded, prioritized, assessed, responded to, and monitored over the course of the relationship30
ID.AM-01Inventories of hardware managed by the organization are maintained433
ID.AM-02Inventories of software, services, and systems managed by the organization are maintained615
ID.AM-05Assets are prioritized based on classification, criticality, resources, and impact on the mission10
ID.AM-07Inventories of data and corresponding metadata for designated data types are maintained17
ID.IM-02Improvements are identified from security tests and exercises, including those done in coordination with suppliers and relevant third parties53
ID.IM-03Improvements are identified from execution of operational processes, procedures, and activities118
ID.IM-04Incident response plans and other cybersecurity plans that affect operations are established, communicated, maintained, and improved12
ID.RA-01Vulnerabilities in assets are identified, validated, and recorded4395
ID.RA-05Threats, vulnerabilities, likelihoods, and impacts are used to understand inherent risk and inform risk response prioritization20
ID.RA-06Risk responses are chosen, prioritized, planned, tracked, and communicated1238
ID.RA-07Changes and exceptions are managed, assessed for risk impact, recorded, and tracked10
ID.RA-09The authenticity and integrity of hardware and software are assessed prior to acquisition and use10
PR.AA-01Identities and credentials for authorized users, services, and hardware are managed by the organization67256
PR.AA-03Users, services, and hardware are authenticated43110
PR.AA-05Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties115320
PR.AT-01Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind47
PR.AT-02Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks with cybersecurity risks in mind21
PR.DS-01The confidentiality, integrity, and availability of data-at-rest are protected7962
PR.DS-02The confidentiality, integrity, and availability of data-in-transit are protected4932
PR.DS-11Backups of data are created, protected, maintained, and tested5037
PR.IR-01Networks and environments are protected from unauthorized logical access and usage6551
PR.IR-03Mechanisms are implemented to achieve resilience requirements in normal and adverse situations715
PR.PS-01Configuration management practices are established and applied6271
PR.PS-02Software is maintained, replaced, and removed commensurate with risk2253
PR.PS-04Log records are generated and made available for continuous monitoring4836
PR.PS-06Secure software development practices are integrated, and their performance is monitored throughout the software development life cycle1211
RS.AN-03Analysis is performed to establish what has taken place during an incident and the root cause of the incident12
RS.CO-02Internal and external stakeholders are notified of incidents411
RS.MA-01The incident response plan is executed in coordination with relevant third parties once an incident is declared614
RS.MA-02Incident reports are triaged and validated118
RS.MA-03Incidents are categorized and prioritized525
RS.MI-02Incidents are eradicated548

PCI DSS and connectors

Which connectors provide evidence for PCI DSS, for which controls, and how to connect them.

CIS Oracle Cloud Infrastructure Foundations Benchmark and connectors

Which connectors provide evidence for CIS Oracle Cloud Infrastructure Foundations Benchmark, for which controls, and how to connect them.

On this page

How to connect for this frameworkConnectors with automated evidence (360)Evidence by attestation (95)Controls (47)