vania-janet/multiturn-rag-retrieval-data huggingface dataset:
>>> white_plains_WKT = 'POLYGON((-73.792 41.024,-73.794 41.031,-73.779 41.046,-73.78 41.049,-73.779 41.052,-73.776 41.054,-73.775 41.057,-73.767 41.058,-73.769 41.062,-73.768 41.067,-73.762 41.073,-73.759 41.074,-73.748 41.069,-73.746 41.056,-73.742 41.056,-73.74 41.053,-73.74 41.049,-73.749 41.04,-73.748 41.035,-73.739 41.034,-73.729 41.029,-73.725 41.025,-73.72 41.016,-73.717 41.015,-73.716 41.006,-73.718 41.002,-73.732 40.988,-73.732 40.985,-73.739 40.979,-73.745 40.978,-73.749 40.981,-73.749 40.986,-73.751 40.986,-73.756 40.991,-73.759 40.991,-73.76 40.993,-73.765 40.994,-73.769 40.997,-73.774 41.002,-73.775 41.006,-73.788 41.018,-73.792 41.024))'
>>> wkt_reader = stc.wkt_reader()
>>> white_plains = wkt_reader.read(white_plains_WKT)
>>> si.containing(white_plains)
['Westchester']
* Which county is the city of White Plains located in?
* prohibiting the use of Social Security Numbers (SSN) or customer-specific identifiers in the organization's internal environment







 IBM Cloud for Financial Services profile 

The rules related to this control that follow are part of the IBM Cloud for Financial Services v1.2.0 profile in [IBM Cloud® Security and Compliance Center](https://cloud.ibm.com/docs/security-compliance?topic=security-compliance-getting-started).



Rules for IA-4 in IBM Cloud for Financial Services v1.2.0 profile

 Requirement ID Rules 

 IA-4 (b) <br><br> * IBM Cloud assigns identifiers that identify individuals, groups, roles, and devices<br> * Check whether Virtual Servers for VPC instances are identifable by the workload they are running based on the Auto Scale for VPC instance group definition<br> * Check whether Application Load Balancer for VPC has application port of the workload that is identifiable by the Auto Scale for VPC instance group definition<br> * IBMid selects and assigns identifiers that identify individuals<br> * Check whether Application Load Balancer for VPC has subnet identifiers of the workload that are identifiable by the Auto Scale for VPC instance group definition<br><br><br> 
 IA-4 (c) <br><br> * IBM Cloud assigns identifiers that identify individuals, groups, roles, and devices<br> * Check whether Virtual Servers for VPC instances are identifable by the workload they are running based on the Auto Scale for VPC instance group definition<br> * Check whether Application Load Balancer for VPC has application port of the workload that is identifiable by the Auto Scale for VPC instance group definition<br> * IBMid selects and assigns identifiers that identify individuals<br> * Check whether Application Load Balancer for VPC has subnet identifiers of the workload that are identifiable by the Auto Scale for VPC instance group definition<br><br><br> 
 IA-4 (d) <br><br> * IBM Cloud prevents reuse of identifiers<br><br><br> 







 NIST supplemental guidance
News and Politics Law 
 News and Politics Local News 
 News and Politics National News 
 News and Politics Politics 
 News and Politics Politics Elections 
 News and Politics Politics Political Issues 
 News and Politics Politics War and Conflicts 
 News and Politics Weather 
 Personal Finance 
 Personal Finance Consumer Banking 
 Personal Finance Financial Assistance 
 Personal Finance Financial Assistance Government Support and Welfare 
 Personal Finance Financial Assistance Student Financial Aid 
 Personal Finance Financial Planning 
 Personal Finance Frugal Living 
 Personal Finance Insurance 
 Personal Finance Insurance Health Insurance 
 Personal Finance Insurance Home Insurance 
 Personal Finance Insurance Life Insurance 
 Personal Finance Insurance Motor Insurance 
 Personal Finance Insurance Pet Insurance 
 Personal Finance Insurance Travel Insurance 
 Personal Finance Personal Debt 
 Personal Finance Personal Debt Credit Cards 
 Personal Finance Personal Debt Home Financing 
 Personal Finance Personal Debt Personal Loans 
 Personal Finance Personal Debt Student Loans 
 Personal Finance Personal Investing 
 Personal Finance Personal Investing Hedge Funds 
 Personal Finance Personal Investing Mutual Funds 
 Personal Finance Personal Investing Options 
 Personal Finance Personal Investing Stocks and Bonds 
 Personal Finance Personal Taxes 
 Personal Finance Retirement Planning 
 Personal Finance Home Utilities 
 Personal Finance Home Utilities Gas and Electric 
 Personal Finance Home Utilities Internet Service Providers 
 Personal Finance Home Utilities Phone Services 
 Personal Finance Home Utilities Water Services 
 Pets 
 Pets Birds 
 Pets Cats 
 Pets Dogs 
 Pets Fish and Aquariums 
 Pets Large Animals 
 Pets Pet Adoptions 
 Pets Reptiles 
 Pets Veterinary Medicine 
 Pets Pet Supplies 
 Pop Culture 
 Pop Culture Celebrity Deaths 
 Pop Culture Celebrity Families 
 Pop Culture Celebrity Homes 
 Pop Culture Celebrity Pregnancy 
 Pop Culture Celebrity Relationships 
 Pop Culture Celebrity Scandal 
 Pop Culture Celebrity Style 
 Pop Culture Humor and Satire 
 Real Estate 
 Real Estate Apartments 
 Real Estate Retail Property 
 Real Estate Vacation Properties 
 Real Estate Developmental Sites 
 Real Estate Hotel Properties 
 Real Estate Houses 
 Real Estate Industrial Property 
 Real Estate Land and Farms 
 Real Estate Office Property 
 Real Estate Real Estate Buying and Selling 
 Real Estate Real Estate Renting and Leasing 
 Religion & Spirituality 
 Religion & Spirituality Agnosticism 
 Religion & Spirituality Spirituality 
 Religion & Spirituality Astrology 
 Religion & Spirituality Atheism 
 Religion & Spirituality Buddhism 
 Religion & Spirituality Christianity 
 Religion & Spirituality Hinduism
Books and Literature Art and Photography Books 
 Books and Literature Biographies 
 Books and Literature Children's Literature 
 Books and Literature Comics and Graphic Novels 
 Books and Literature Cookbooks 
 Books and Literature Fiction 
 Books and Literature Poetry 
 Books and Literature Travel Books 
 Books and Literature Young Adult Literature 
 Business and Finance 
 Business and Finance Business 
 Business and Finance Business Business Accounting & Finance 
 Business and Finance Business Human Resources 
 Business and Finance Business Large Business 
 Business and Finance Business Logistics 
 Business and Finance Business Marketing and Advertising 
 Business and Finance Business Sales 
 Business and Finance Business Small and Medium-sized Business 
 Business and Finance Business Startups 
 Business and Finance Business Business Administration 
 Business and Finance Business Business Banking & Finance 
 Business and Finance Business Business Banking & Finance Angel Investment 
 Business and Finance Business Business Banking & Finance Bankruptcy 
 Business and Finance Business Business Banking & Finance Business Loans 
 Business and Finance Business Business Banking & Finance Debt Factoring & Invoice Discounting 
 Business and Finance Business Business Banking & Finance Mergers and Acquisitions 
 Business and Finance Business Business Banking & Finance Private Equity 
 Business and Finance Business Business Banking & Finance Sale & Lease Back 
 Business and Finance Business Business Banking & Finance Venture Capital 
 Business and Finance Business Business I.T. 
 Business and Finance Business Business Operations 
 Business and Finance Business Consumer Issues 
 Business and Finance Business Consumer Issues Recalls 
 Business and Finance Business Executive Leadership & Management 
 Business and Finance Business Government Business 
 Business and Finance Business Green Solutions 
 Business and Finance Business Business Utilities 
 Business and Finance Economy 
 Business and Finance Economy Commodities 
 Business and Finance Economy Currencies 
 Business and Finance Economy Financial Crisis 
 Business and Finance Economy Financial Reform 
 Business and Finance Economy Financial Regulation 
 Business and Finance Economy Basoline Prices 
 Business and Finance Economy Housing Market 
 Business and Finance Economy Interest Rates 
 Business and Finance Economy Job Market 
 Business and Finance Industries 
 Business and Finance Industries Advertising Industry 
 Business and Finance Industries Education industry 
 Business and Finance Industries Entertainment Industry 
 Business and Finance Industries Environmental Services Industry 
 Business and Finance Industries Financial Industry 
 Business and Finance Industries Food Industry 
 Business and Finance Industries Healthcare Industry 
 Business and Finance Industries Hospitality Industry 
 Business and Finance Industries Information Services Industry 
 Business and Finance Industries Legal Services Industry
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-2.2scc-fs-cloud-profile)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-2.2nist-supplemental-guidance)



[CA-3 - System Interconnections](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-3ca-3)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-3control-requirements)
* [Additional IBM Cloud for Financial Services specifications](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-3additional-ibm-cloud-for-financial-services-specifications)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-3implementation-guidance)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-3scc-fs-cloud-profile)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-3nist-supplemental-guidance)



[CA-5 - Plan of Action and Milestones](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-5ca-5)
"href": "https://uko.us-south.hs-crypto.cloud.ibm.com:9549/api/v4/managed_key/5295ad47-2ce9-43c3-b9e7-e5a9482c362b/associated_resources?limit=20&offset=0"
},
"previous": {
"href": "https://uko.us-south.hs-crypto.cloud.ibm.com:9549/api/v4/managed_keys?offset=80"
},
"next": {
"href": "https://uko.us-south.hs-crypto.cloud.ibm.com:9549/api/v4/managed_keys?offset=120"
},
"associated_resources": [
{
"vault": {
"id": "5295ad47-2ce9-43c3-b9e7-e5a9482c362b",
"name": "Test Vault Name",
"href": "https://uko.us-south.hs-crypto.cloud.ibm.com:9549/api/v4/vaults/5295ad47-2ce9-43c3-b9e7-e5a9482c362b"
},
"managed_key": {
"id": "93777bca-baef-4070-b9b5-a2e6079df1b4",
"name": "My Managed Key",
"href": "https://uko.us-south.hs-crypto.cloud.ibm.com:9549/api/v4/managed_keys/5295ad47-2ce9-43c3-b9e7-e5a9482c362b"
},
"referenced_keystore": {
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cp-4nist-supplemental-guidance)



[CP-4 (1) - Coordinate with Related Plans](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cp-4.1cp-4.1)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cp-4.1control-requirements)
* [Additional IBM Cloud for Financial Services specifications](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cp-4.1additional-ibm-cloud-for-financial-services-specifications)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cp-4.1nist-supplemental-guidance)



[CP-6 - Alternate Storage Site](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cp-6cp-6)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cp-6control-requirements)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cp-6implementation-guidance)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cp-6scc-fs-cloud-profile)
AircraftDesigner 
 AircraftManufacturer 
 Airline 
 AirlinerAccident 
 Airport 
 AirportOperator 
 AmericanIndianGroup 
 AminoAcid 
 Animal 
 AnimalBreed 
 API 
 Appellation 
 AppointedRole 
 Appointer 
 Architect 
 ArchitecturalContractor 
 ArchitectureFirm 
 ArmedForce 
 Artery 
 ArtSeries 
 Artwork 
 Asteroid 
 Astronaut 
 AstronomicalDiscovery 
 AstronomicalObservatory 
 Athlete 
 AutomobileCompany 
 AutomobileGeneration 
 AutomobileModel 
 Award 
 AwardCeremony 
 AwardDiscipline 
 AwardJudge 
 AwardNominee 
 AwardPresentingOrganization 
 AwardWinner 
 BasketballConference 
 BasketballDivision 
 BasketballPlayer 
 BasketballTeam 
 Bassist 
 Beer 
 Belief 
 Beverage 
 BicycleManufacturer 
 BipropellantRocketEngine 
 Blog 
 Blogger 
 BoardMember 
 BoardMemberTitle 
 BodyOfWater 
 Bone 
 Book 
 BookEdition 
 BoxingWeightDivision 
 Brand 
 Bridge 
 BritishRoyalty 
 Broadcast 
 BroadcastArtist 
 BroadcastContent 
 BroadcastDistributor 
 Building 
 BuildingComplex 
 BuildingFunction 
 CameraFormat 
 CanadianAboriginalGroup 
 CandyBar 
 CandyBarManufacturer 
 Cardinal 
 CauseOfDeath 
 Cave 
 Celebrity 
 CelestialObject 
 Chancellor 
 CharacterOccupation 
 CharacterRank 
 CharacterSpecies 
 Cheese 
 Chef 
 ChemicalCompound 
 ChemicalElement 
 ChineseEthnicGroup 
 ChristianBishop 
 CityTown 
 Club 
 Collector 
 College 
 CollegeCoach 
 CollegeUniversity 
 Comedian 
 ComicBookCreator 
 ComicBookIssue 
 ComicBookPublisher 
 ComicBookSeries 
 ComicBookStory 
 ComicBookStoryArc 
 ComicStripArtist 
 ComicStripSyndicate 
 Company 
 CompanyFounder 
 CompanyShareholder 
 Competition 
 CompetitiveSpace 
 Composer 
 Composition 
 CompositionalForm 
 ComputerPeripheral
: Reviews accounts for compliance with account management requirements [IBM Assignment: quarterly for privileged access; quarterly for any access to regulated systems, as specified by FS-ready public cloud customer vendor managers; annually for all other access]; and

AC-2 (k)
: Establishes a process for reissuing shared/group account credentials (if deployed) when individuals are removed from the group.





 Additional IBM Cloud for Financial Services specifications 



* Prior to production access, users must be onboarded and registered in the customer's access management system.
* The organization must be able to export all current customer end users and permissions within the organization’s application/system.
* Access activity/logs should be reported to the customer daily, as required.
* Access activity/logs should contain the following content: user ID, associated roles and permissions, business/job function, last logon date.
* Account managers must include the individual's or system's manager and account owner.







 Implementation guidance 

See the resources that follow to learn more about how to implement this control.



* [Audit logging of application provider events and SIEM](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-audit-provider)
* [Audit logging of IBM Cloud events](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-audit)
* [Consumer accounts for application provider workloads](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-account-consumer)
* [Handling and securing secrets](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-secrets)
* [IBM Cloud account setup](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-account-setup)







 IBM Cloud for Financial Services profile
home and garden home improvement and repair house painting and finishing 
 home and garden home improvement and repair locks and locksmiths 
 home and garden home improvement and repair plumbing 
 home and garden home improvement and repair power tools 
 home and garden home improvement and repair roofing 
 home and garden home improvement and repair 
 home and garden interior decorating 
 home and garden laundry 
 home and garden luxury homes 
 home and garden nursery and playroom 
 home and garden pest control 
 home and garden remodeling and construction 
 home and garden 
 law, govt and politics armed forces air force 
 law, govt and politics armed forces army 
 law, govt and politics armed forces marines 
 law, govt and politics armed forces navy 
 law, govt and politics armed forces veterans 
 law, govt and politics commentary 
 law, govt and politics espionage and intelligence secret service 
 law, govt and politics espionage and intelligence surveillance 
 law, govt and politics espionage and intelligence terrorism 
 law, govt and politics espionage and intelligence 
 law, govt and politics government courts and judiciary 
 law, govt and politics government embassies and consulates 
 law, govt and politics government executive branch 
 law, govt and politics government government agencies 
 law, govt and politics government government contracting and procurement 
 law, govt and politics government heads of state 
 law, govt and politics government legislative 
 law, govt and politics government parliament 
 law, govt and politics government state and local government 
 law, govt and politics government 
 law, govt and politics immigration 
 law, govt and politics law enforcement coast guard 
 law, govt and politics law enforcement fire department 
 law, govt and politics law enforcement highway patrol 
 law, govt and politics law enforcement police 
 law, govt and politics law enforcement 
 law, govt and politics legal issues civil law copyright 
 law, govt and politics legal issues civil law 
 law, govt and politics legal issues civil rights 
 law, govt and politics legal issues civil rights privacy 
 law, govt and politics legal issues criminal law 
 law, govt and politics legal issues death penalty 
 law, govt and politics legal issues human rights 
 law, govt and politics legal issues international law 
 law, govt and politics legal issues legislation building laws 
 law, govt and politics legal issues legislation education laws
Use [IBM Cloud Secrets Manager](https://cloud.ibm.com/docs/secrets-manager?topic=secrets-manager-getting-started). 
 You need to create and manage encryption keys. Use [Hyper Protect Crypto Services](https://cloud.ibm.com/docs/hs-crypto?topic=hs-crypto-overview) to manage encryption keys in a single-tenant service with dedicated hardware. 
 You need secrets in your Red Hat OpenShift on IBM Cloud environment for microservices to connect to system resources. Use [Kubernetes secrets](https://kubernetes.io/docs/concepts/configuration/secret/) encrypted using [Hyper Protect Crypto Services](https://cloud.ibm.com/docs/openshift?topic=openshift-encryptionkeyprotect) as your Key Management Service (KMS) provider. 





 Related controls in IBM Cloud Framework for Financial Services 

The following [IBM Cloud Framework for Financial Services controls](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-aboutframework-control-requirements) are most related to this guidance. However, in addition to following the guidance here, do your own due diligence to ensure you meet the requirements.



Table 1. Related controls in IBM Cloud Framework for Financial Services

 Family Control 

 Access Control (AC) [AC-2 Account Management](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2) 
 Identification and Authentication (IA) [IA-2 User Identification and Authentication](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-2) <br>[IA-5 Authenticator Management](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-5) 







 Next steps
[MAS-MS-CCC-Access-3](https://cloud.ibm.com/docs-content/v1/content/bd177462727ef0a849ddcf8c842a6203b41f0625/mas-ms/images/MAS-MS-CCC-Access-3.png)
5. Add an asset to the Assets table by selecting the “New Row” button.

![MAS-MS-CCC-Access-4](https://cloud.ibm.com/docs-content/v1/content/bd177462727ef0a849ddcf8c842a6203b41f0625/mas-ms/images/MAS-MS-CCC-Access-4.png)
6. Select the search icon to bring up a list of assets you have access to.

If the asset you want to submit an access request for is not viewable in the asset list, you do not have access to the asset’s organization. To obtain access, contact the access manager for the organization. If you do not know who the access manager is, you may submit a support case [here](https://www.ibm.com/mysupport) to request this information.

![MAS-MS-CCC-Access-5](https://cloud.ibm.com/docs-content/v1/content/bd177462727ef0a849ddcf8c842a6203b41f0625/mas-ms/images/MAS-MS-CCC-Access-5.png)
7. Select an asset from the list for the organization you want to request Client Communications Center access to. Obtaining Client Communications Center access to one asset will grant you communications access to all assets for that organization.

!
"type": "ibm_cloud_kms",
"created_at": "2022-03-09T11:00:11Z",
"updated_at": "2022-03-09T11:00:11Z",
"created_by": "IBMid-1308197YB4",
"updated_by": "IBMid-1308197YB4",
"href": "https://uko.us-south.hs-crypto.cloud.ibm.com:9549/api/v4/keystores/f6a5ccc1-7fc3-435e-9637-482e470ba8e8",
"ibm_api_endpoint": "https://us-south.kms.cloud.ibm.com",
"ibm_iam_endpoint": "https://iam.bluemix.net/identity/token",
"ibm_api_key": "",
"ibm_instance_id": "d139ea58-a073-441b-ba4e-dcc8bae58be4",
"ibm_variant": "hpcs",
"ibm_key_ring": "IBM-Cloud-KMS-Internal"
}







 hpcs uko associated-resources-for-target-keystore 

Obtain a list of resources associated with all keys that are activated in this keystore.

If the --all-pages option is not set, the command only retrieves a single page of the collection.

ibmcloud hpcs uko associated-resources-for-target-keystore --id ID --uko-vault UKO-VAULT [--limit LIMIT] [--offset OFFSET] [--sort SORT]



* Command options

--id (string)
: Required. The UUID of the keystore. You can use the ibmcloud hpcs uko keystores command to retrieve the UUID.

--uko-vault (string)
: Required.
* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-7control-requirements)
* [Additional IBM Cloud for Financial Services specifications](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-7additional-ibm-cloud-for-financial-services-specifications)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-7implementation-guidance)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-7scc-fs-cloud-profile)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-7nist-supplemental-guidance)



[CA-7 (1) - Independent Assessment](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-7.1ca-7.1)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-7.1control-requirements)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-7.1nist-supplemental-guidance)



[CA-8 - Penetration Testing](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ca-8ca-8)