# PR — Protect

- **Function ID:** PR

## Subcategories

- [PR.AA-01](/md/csf/PR.AA-01.md) — Identities and credentials for authorized users, services, and hardware are managed by the organization
- [PR.AA-02](/md/csf/PR.AA-02.md) — Identities are proofed and bound to credentials based on the context of interactions
- [PR.AA-03](/md/csf/PR.AA-03.md) — Users, services, and hardware are authenticated
- [PR.AA-04](/md/csf/PR.AA-04.md) — Identity assertions are protected, conveyed, and verified
- [PR.AA-05](/md/csf/PR.AA-05.md) — Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties
- [PR.AA-06](/md/csf/PR.AA-06.md) — Physical access to assets is managed, monitored, and enforced commensurate with risk
- [PR.AT-01](/md/csf/PR.AT-01.md) — Personnel are provided with awareness and training so that they possess the knowledge and skills to perform general tasks with cybersecurity risks in mind
- [PR.AT-02](/md/csf/PR.AT-02.md) — Individuals in specialized roles are provided with awareness and training so that they possess the knowledge and skills to perform relevant tasks with cybersecurity risks in mind
- [PR.DS-01](/md/csf/PR.DS-01.md) — The confidentiality, integrity, and availability of data-at-rest are protected
- [PR.DS-02](/md/csf/PR.DS-02.md) — The confidentiality, integrity, and availability of data-in-transit are protected
- [PR.DS-10](/md/csf/PR.DS-10.md) — PR.DS-10
- [PR.DS-11](/md/csf/PR.DS-11.md) — Backups of data are created, protected, maintained, and tested
- [PR.IR-01](/md/csf/PR.IR-01.md) — PR.IR-01
- [PR.IR-02](/md/csf/PR.IR-02.md) — PR.IR-02
- [PR.IR-03](/md/csf/PR.IR-03.md) — PR.IR-03
- [PR.IR-04](/md/csf/PR.IR-04.md) — PR.IR-04
- [PR.PS-01](/md/csf/PR.PS-01.md) — PR.PS-01
- [PR.PS-02](/md/csf/PR.PS-02.md) — PR.PS-02
- [PR.PS-03](/md/csf/PR.PS-03.md) — PR.PS-03
- [PR.PS-04](/md/csf/PR.PS-04.md) — PR.PS-04
- [PR.PS-05](/md/csf/PR.PS-05.md) — Installation and execution of unauthorized software are prevented
- [PR.PS-06](/md/csf/PR.PS-06.md) — PR.PS-06

---

Derived from official NIST publications (NIST SP 800-53 Rev 5 and NIST CSF 2.0). nistcontrols.com is not affiliated with NIST.