NIST CSF & SP 800-53 Mapping (Informative)¶
Status: Informative
| UHBS area | NIST CSF 2.0 function | Example SP 800-53 controls |
|---|---|---|
| Dual-plane audit (static + dynamic) | Identify / Protect / Detect | CA-2, CA-8, RA-5, SI-2 |
| Module A–B deception realism | Detect / Deceive (org-specific) | SI-4, SC-7 (deception as control) |
| Module C telemetry quality | Detect / Respond | AU-2, AU-3, AU-6, SI-4 |
| Module D Safety Gate | Protect / Respond | SC-7, SC-39, CM-7, SI-3 |
| Module E resilience | Protect / Recover | SC-5, CP-2 |
| Module F white-box / secrets | Identify / Protect | RA-5, SA-11, IA-5, CM-6 |
| TPS + sandbox prerequisites | Protect | CM-2, SC-7, CM-3 |
| Production Baseline (UHQS > 80) | Govern / Protect | CA-6, PM-9 (risk acceptance) |
Organizations MAY cite UHBS Lab results as evidence artifacts under CA-2 / CA-8 assessment procedures without claiming NIST certification.