| 💼 CA-1 SECURITY ASSESSMENT AND AUTHORIZATION POLICY AND PROCEDURES | | | | |
| 💼 CA-2 SECURITY ASSESSMENTS | 3 | | | |
|     💼 CA-2 (1) INDEPENDENT ASSESSORS | | | | |
|     💼 CA-2 (2) SPECIALIZED ASSESSMENTS | | | | |
|     💼 CA-2 (3) EXTERNAL ORGANIZATIONS | | | | |
| 💼 CA-3 SYSTEM INTERCONNECTIONS | 5 | | 2 | |
|     💼 CA-3 (1) UNCLASSIFIED NATIONAL SECURITY SYSTEM CONNECTIONS | | | | |
|     💼 CA-3 (2) CLASSIFIED NATIONAL SECURITY SYSTEM CONNECTIONS | | | | |
|     💼 CA-3 (3) UNCLASSIFIED NON-NATIONAL SECURITY SYSTEM CONNECTIONS | | | | |
|     💼 CA-3 (4) CONNECTIONS TO PUBLIC NETWORKS | | | | |
|     💼 CA-3 (5) RESTRICTIONS ON EXTERNAL SYSTEM CONNECTIONS | | | | |
| 💼 CA-4 SECURITY CERTIFICATION | | | | |
| 💼 CA-5 PLAN OF ACTION AND MILESTONES | 1 | | | |
|     💼 CA-5 (1) AUTOMATION SUPPORT FOR ACCURACY _ CURRENCY | | | | |
| 💼 CA-6 SECURITY AUTHORIZATION | | | | |
| 💼 CA-7 CONTINUOUS MONITORING | 3 | | | |
|     💼 CA-7 (1) INDEPENDENT ASSESSMENT | | | | |
|     💼 CA-7 (2) TYPES OF ASSESSMENTS | | | | |
|     💼 CA-7 (3) TREND ANALYSES | | | | |
| 💼 CA-8 PENETRATION TESTING | 2 | | | |
|     💼 CA-8 (1) INDEPENDENT PENETRATION AGENT OR TEAM | | | | |
|     💼 CA-8 (2) RED TEAM EXERCISES | | | | |
| 💼 CA-9 INTERNAL SYSTEM CONNECTIONS | 1 | | 1 | |
|     💼 CA-9 (1) SECURITY COMPLIANCE CHECKS | | | | |