heimdall2 icon indicating copy to clipboard operation
heimdall2 copied to clipboard

Load NIST SP 800-53 control baseline filter

Open ejaronne opened this issue 2 years ago • 2 comments

Some users are only interested in a large subset of NIST SP 800-53 security controls relevant to their specific organization and low, moderate, high, etc baselines. In Heimdall, to the right of the words "Tree Map" provide a button called "Baseline Filter". When selected, will offer a modal to load a comma-delimited text-file list of security controls. This will automatically show all results with at least one of these controls listed amongst the baseline filter list. It will likewise exclude any results for which all of the related controls are not in the baseline filter list.

(Note: this is an initial iteration only to show proof of value. If it shows value, we can add fancier features like Select from a list, Save to file, Load etc.)

I realize now that this is simply an extension of the existing search capability, whereby one can type/paste in nist:ac-6,cm-6,si-10,sc-12,ia-5... to achieve similar result

ejaronne avatar Apr 15 '22 21:04 ejaronne

In other words, this is support the filtering of nist tags based off of the contents of a csv

I presume you mean from 'select from a list' to be like 'select from ALL/ARS/other subsets'?

Amndeep7 avatar Apr 15 '22 23:04 Amndeep7

from discussion with Aaron: future capabilities include deploytime specification of the nist tag bundles/baselines for lite and ability to save/edit/whatever in server

Amndeep7 avatar Apr 15 '22 23:04 Amndeep7