Pick all that apply. Shared requirements are cross-mapped, so evidence is collected once.
110 NIST SP 800-171 r2 requirements, 320 assessment objectives, SPRS scoring and POA&M.
ISMS clauses 4–10 plus 93 Annex A controls with a generated Statement of Applicability.
Quality management: context, risk-based thinking, supplier control, nonconformity and CAPA.
Govern, Identify, Protect, Detect, Respond, Recover. Current and target profiles by tier.
IT service management system: service catalog, incident, change and supplier management.