NIST requirement mapping question
by Joe Nall
Has any work been done to be able to say what checks are mapped to a single NIST control?
IIUC, the current tools generate something more akin to
where AC-3 and CM-6 are in the same nist ref
11 years, 1 month