Class: CisSafeguard

One Safeguard of a Control: a single action an enterprise takes, named by its Control’s number and its own, such as Safeguard 4.1.

URI: cis_controls:Safeguard

 classDiagram
    class CisSafeguard
    click CisSafeguard href "../CisSafeguard/"
      CisSafeguard : cis_safeguard_id
        
      CisSafeguard : description
        
      CisSafeguard : safeguard_asset_class
        
          
    
        
        
        CisSafeguard --> "1" CisAssetClass : safeguard_asset_class
        click CisAssetClass href "../CisAssetClass/"
    

        
      CisSafeguard : safeguard_implementation_groups
        
          
    
        
        
        CisSafeguard --> "1..*" CisImplementationGroup : safeguard_implementation_groups
        click CisImplementationGroup href "../CisImplementationGroup/"
    

        
      CisSafeguard : safeguard_security_function
        
          
    
        
        
        CisSafeguard --> "1" CisSecurityFunction : safeguard_security_function
        click CisSecurityFunction href "../CisSecurityFunction/"
    

        
      CisSafeguard : title

Class Properties

Property	Value
Class URI	cis_controls:Safeguard

Slots

Name	Cardinality and Range	Description	Inheritance
cis_safeguard_id	1 CisSafeguardIdentifier	The Safeguard’s identifier, its number, such as 4	direct
title	0..1 String	A name for the Control or Safeguard, in words its user has the right to use	direct
description	0..1 String	What the Control or Safeguard means to its user, in words its user has the ri…	direct
safeguard_asset_class	1 CisAssetClass	The class of enterprise asset the Safeguard is about	direct
safeguard_security_function	1 CisSecurityFunction	The security function the Safeguard serves, one of the six functions of the N…	direct
safeguard_implementation_groups	1..* CisImplementationGroup	The Implementation Groups that include the Safeguard	direct

Usages

used by	used in	type	used
CisControl	control_safeguards	range	CisSafeguard

See Also

https://www.cisecurity.org/controls/cis-controls-list

Identifier and Mapping Information

Schema Source

from schema: https://w3id.org/lmodel/cis-controls

Mappings

Mapping Type	Mapped Value
self	cis_controls:Safeguard
native	cis_controls:CisSafeguard
broad	oscal:Control

LinkML Source

Direct

name: CisSafeguard
description: 'One Safeguard of a Control: a single action an enterprise takes, named
  by its Control''s number and its own, such as Safeguard 4.1.'
from_schema: https://w3id.org/lmodel/cis-controls
see_also:
- https://www.cisecurity.org/controls/cis-controls-list
broad_mappings:
- oscal:Control
slots:
- cis_safeguard_id
- title
- description
attributes:
  safeguard_asset_class:
    name: safeguard_asset_class
    description: The class of enterprise asset the Safeguard is about.
    from_schema: https://w3id.org/lmodel/cis-controls
    rank: 1000
    domain_of:
    - CisSafeguard
    range: CisAssetClass
    required: true
  safeguard_security_function:
    name: safeguard_security_function
    description: The security function the Safeguard serves, one of the six functions
      of the NIST Cybersecurity Framework (CSF) 2.0.
    from_schema: https://w3id.org/lmodel/cis-controls
    rank: 1000
    domain_of:
    - CisSafeguard
    range: CisSecurityFunction
    required: true
  safeguard_implementation_groups:
    name: safeguard_implementation_groups
    description: The Implementation Groups that include the Safeguard.
    comments:
    - 'The groups are cumulative: a Safeguard in IG1 is in IG2 and IG3 too, and one
      in IG2 is in IG3. The schema states the part of that rule the validator can
      check, that every Safeguard is in IG3. The JSON Schema that LinkML 1.12.1 generates
      drops the rest, so a list of IG1 and IG3 without IG2 passes the validator. tests/test_data.py
      checks the whole rule over the examples.'
    from_schema: https://w3id.org/lmodel/cis-controls
    rank: 1000
    domain_of:
    - CisSafeguard
    range: CisImplementationGroup
    required: true
    multivalued: true
    minimum_cardinality: 1
    maximum_cardinality: 3
    has_member:
      equals_string: IG3
class_uri: cis_controls:Safeguard

Induced

name: CisSafeguard
description: 'One Safeguard of a Control: a single action an enterprise takes, named
  by its Control''s number and its own, such as Safeguard 4.1.'
from_schema: https://w3id.org/lmodel/cis-controls
see_also:
- https://www.cisecurity.org/controls/cis-controls-list
broad_mappings:
- oscal:Control
attributes:
  safeguard_asset_class:
    name: safeguard_asset_class
    description: The class of enterprise asset the Safeguard is about.
    from_schema: https://w3id.org/lmodel/cis-controls
    rank: 1000
    owner: CisSafeguard
    domain_of:
    - CisSafeguard
    range: CisAssetClass
    required: true
  safeguard_security_function:
    name: safeguard_security_function
    description: The security function the Safeguard serves, one of the six functions
      of the NIST Cybersecurity Framework (CSF) 2.0.
    from_schema: https://w3id.org/lmodel/cis-controls
    rank: 1000
    owner: CisSafeguard
    domain_of:
    - CisSafeguard
    range: CisSecurityFunction
    required: true
  safeguard_implementation_groups:
    name: safeguard_implementation_groups
    description: The Implementation Groups that include the Safeguard.
    comments:
    - 'The groups are cumulative: a Safeguard in IG1 is in IG2 and IG3 too, and one
      in IG2 is in IG3. The schema states the part of that rule the validator can
      check, that every Safeguard is in IG3. The JSON Schema that LinkML 1.12.1 generates
      drops the rest, so a list of IG1 and IG3 without IG2 passes the validator. tests/test_data.py
      checks the whole rule over the examples.'
    from_schema: https://w3id.org/lmodel/cis-controls
    rank: 1000
    owner: CisSafeguard
    domain_of:
    - CisSafeguard
    range: CisImplementationGroup
    required: true
    multivalued: true
    minimum_cardinality: 1
    maximum_cardinality: 3
    has_member:
      equals_string: IG3
  cis_safeguard_id:
    name: cis_safeguard_id
    description: The Safeguard's identifier, its number, such as 4.1.
    comments:
    - It starts with the number of the Control that holds the Safeguard. The validator
      cannot check that against the Control a Safeguard is listed under; tests/test_data.py
      checks it over the examples.
    from_schema: https://w3id.org/lmodel/cis-controls
    rank: 1000
    owner: CisSafeguard
    domain_of:
    - CisSafeguard
    range: cis_safeguard_identifier
    required: true
  title:
    name: title
    description: A name for the Control or Safeguard, in words its user has the right
      to use.
    comments:
    - It means what LOKF's title means and carries the same IRI, so lokf adapt folds
      it into LOKF's slot and a knowledge bundle reads one title key.
    - CIS's own names for the Controls and Safeguards are CIS's text under CC BY-NC-ND
      4.0, so the schema's examples leave them out, and the edition file names each
      element in this project's words.
    from_schema: https://w3id.org/lmodel/cis-controls
    rank: 1000
    slot_uri: schema:name
    owner: CisSafeguard
    domain_of:
    - CisControl
    - CisSafeguard
    range: string
  description:
    name: description
    description: What the Control or Safeguard means to its user, in words its user
      has the right to use.
    comments:
    - It means what LOKF's description means and carries the same IRI, so lokf adapt
      folds it into LOKF's slot and a knowledge bundle reads one description key.
    from_schema: https://w3id.org/lmodel/cis-controls
    rank: 1000
    slot_uri: schema:description
    owner: CisSafeguard
    domain_of:
    - CisControl
    - CisSafeguard
    range: string
class_uri: cis_controls:Safeguard