返回 Skill 列表
extension
分类: 开发与工程无需 API Key

control-mapping

将NIST控制措施映射到FedRAMP要求并进行文档记录。在帮助实施控制、合规性映射、安全基线对齐或理解控制要求时使用。

person作者: jakexiaohubgithub

When mapping controls:

  1. Cross-reference NIST SP 800-53 control definitions with FedRAMP MAS/ADS/VDR documents
  2. Identify baseline control families (AC, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PM, PS, RA, SA, SC, SI, SR)
  3. Show control-to-document guidance relationships
  4. Flag any control gaps or special FedRAMP-specific considerations
  5. Provide implementation examples from FedRAMP guidance
  6. Include control enhancements where applicable

Use the fedramp-docs MCP server tools:

  • list_controls to get control mappings filtered by family or control ID
  • grep_controls_in_markdown to find control references in guidance docs
  • search_markdown to find implementation guidance
  • get_significant_change_guidance for change-related controls