| 💼 SI-1 Policy and Procedures (L)(M)(H) | | | | | no data |
| 💼 SI-2 Flaw Remediation (L)(M)(H) | 2 | 7 | 14 | | no data |
| 　💼 SI-2(2) Automated Flaw Remediation Status (M)(H) | | | 4 | | no data |
| 　💼 SI-2(3) Time to Remediate Flaws and Benchmarks for Corrective Actions (M)(H) | | | | | no data |
| 💼 SI-3 Malicious Code Protection (L)(M)(H) | | 7 | 7 | | no data |
| 💼 SI-4 System Monitoring (L)(M)(H) | 14 | 50 | 56 | | no data |
| 　💼 SI-4(1) System-wide Intrusion Detection System (M)(H) | | 1 | 2 | | no data |
| 　💼 SI-4(2) Automated Tools and Mechanisms for Real-time Analysis (M)(H) | | | 1 | | no data |
| 　💼 SI-4(4) Inbound and Outbound Communications Traffic (M)(H) | | 6 | 8 | | no data |
| 　💼 SI-4(5) System-generated Alerts (M)(H) | | | 2 | | no data |
| 　💼 SI-4(10) Visibility of Encrypted Communications (H) | | | | | no data |
| 　💼 SI-4(11) Analyze Communications Traffic Anomalies (H) | | | | | no data |
| 　💼 SI-4(12) Automated Organization-generated Alerts (H) | | | 1 | | no data |
| 　💼 SI-4(14) Wireless Intrusion Detection (H) | | | | | no data |
| 　💼 SI-4(16) Correlate Monitoring Information (M)(H) | | | | | no data |
| 　💼 SI-4(18) Analyze Traffic and Covert Exfiltration (M)(H) | | | | | no data |
| 　💼 SI-4(19) Risk for Individuals (H) | | | | | no data |
| 　💼 SI-4(20) Privileged Users (H) | | 48 | 51 | | no data |
| 　💼 SI-4(22) Unauthorized Network Services (H) | | | 1 | | no data |
| 　💼 SI-4(23) Host-based Devices (M)(H) | | | | | no data |
| 💼 SI-5 Security Alerts, Advisories, and Directives (L)(M)(H) | 1 | | | | no data |
| 　💼 SI-5(1) Automated Alerts and Advisories (H) | | | | | no data |
| 💼 SI-6 Security and Privacy Function Verification (M)(H) | | | | | no data |
| 💼 SI-7 Software, Firmware, and Information Integrity (M)(H) | 5 | | 2 | | no data |
| 　💼 SI-7(1) Integrity Checks (M)(H) | | | 1 | | no data |
| 　💼 SI-7(2) Automated Notifications of Integrity Violations (H) | | | | | no data |
| 　💼 SI-7(5) Automated Response to Integrity Violations (H) | | | | | no data |
| 　💼 SI-7(7) Integration of Detection and Response (M)(H) | | | 1 | | no data |
| 　💼 SI-7(15) Code Authentication (H) | | | | | no data |
| 💼 SI-8 Spam Protection (M)(H) | 1 | | | | no data |
| 　💼 SI-8(2) Automatic Updates (M)(H) | | | | | no data |
| 💼 SI-10 Information Input Validation (M)(H) | | | | | no data |
| 💼 SI-11 Error Handling (M)(H) | | | | | no data |
| 💼 SI-12 Information Management and Retention (L)(M)(H) | | | 5 | | no data |
| 💼 SI-16 Memory Protection (M)(H) | | | | | no data |