nist-800-82-control-mappinglisted

## When to Use - Building the control coverage matrix for a plant or fleet. - Pre-assessment review before a NIST-based audit. - Comparing coverage across sites on one worksheet. - Feeding the remediation backlog a family-level view. ## Prerequisites - Evidence pack: policies, standards, device hardening guides, backup records, training logs, incident reports. - Interview time with the site control owner. Two hours per site typical. - Credentials: none. - Authorization: site manager sign-off. - Upstream skills: `iec-62443-gap-assessment` when the 62443 register feeds the matrix. ### Safety This skill is passive by default. Active steps are gated in the Workflow section. - Passive. Document and questionnaire review. Sends no packets. Safe to run during normal operations. ## Workflow 1. Load the evidence pack. Confirm one control owner per site. 2. Open `references/questionnaire.md`. Complete one block per control family: AC, AU, CA, CM, CP, IA, IR, MA, MP, PE, PL, PS, RA, SA, SC, SI. 3. Record per family: rating (Implemented, Partial, Absent), evidence pointer, family lead. 4. Decision point: a family rated Implemented with no evidence pointer is downgraded to Partial. Evidence is the rating, not the interview answer. 5. Where a specific 800-82 control applies, for example AC-2 account management, note the control ID in the family row. Family-wide coverage stays at family level. 6. Produce `control-coverage-matrix.md` with one row per family: family, rating, evidence,