Schritt Select des NIST RMF: die vollständige SP-800-53B-Kontroll-Baseline passend zur Kategorisierung (aus dem offiziellen Katalog SP 800-53 Rev. 5 des NIST), die bereits umgesetzten Kontrollen, die dokumentierten Anpassungsentscheidungen (Tailoring) und die umzusetzenden Kontrollen.
Controls already in place — SP 800-53 identifiers, e.g. “AC-2”, “IA-2”.
Tailoring decisions — One row per entry, e.g. PE-3; not applicable; fully hosted by the cloud provider
Roles and owners — Who is responsible for which area. Owners in the result are taken from here; where no role covers an area, the owner is left for you to fill.
Additional context — Anything the service should take into account.
Title — As it will appear on the result.
Author — Shown as the author of the deliverable; never filled in by the AI.
