vania-janet/multiturn-rag-retrieval-data huggingface dataset:
The control requirements were initially based on [NIST 800-53 Rev 4](https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search!/800-53?version=4.0) and have been enhanced based on feedback from leading industry partners.

See [IBM Cloud Framework for Financial Services - Control Requirements](https://cloud.ibm.com/docs/framework-financial-services-controls) for a complete description of all control requirements. Or, if you prefer, there is a [downloadable spreadsheet](https://cloud.ibm.com/media/docs/downloads/framework-financial-services/IBM_Cloud_Framework_for_Financial_Services_-_Control_Requirements_v1.1.0.xlsx) available as well.





 Framework guidance and reference architectures 



 Interpreting the framework guidance 

We refer to the entity that uses (consumes) an application as the consumer and the entity that develops or deploys (provides) an application as the application provider. The consumer and application provider might be the same when the organization providing the application also consumes it (for example, a financial institution deploys an application for internal use by others in their company). Or, they might be different if a third-party ecosystem partner is providing an application for a financial institution to use.

You should use the information in the framework if you are an application provider (whether from a financial institution or ecosystem partner) who wishes to meet the requirements or leverage the best practices of IBM Cloud for Financial Services. However, the content has a different purpose depending on whether you represent an application provider from an ecosystem partner or an application provider within a financial institution.

Ecosystem partner
: The reference architectures and guidance form a set of requirements if you want to pursue a designation of [IBM Cloud for Financial Services Validated](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-aboutbecoming-fs-validated) from IBM. The Financial Services Validated designation signifies that you have successfully evidenced compliance to the control requirements of the IBM Cloud Framework for Financial Services and may improve your ability to market to financial institutions.
* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-20.1control-requirements)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-20.1nist-supplemental-guidance)



[AC-21 - Information Sharing](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-21ac-21)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-21control-requirements)
* [Additional IBM Cloud for Financial Services specifications](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-21additional-ibm-cloud-for-financial-services-specifications)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-21nist-supplemental-guidance)







 Awareness and Training (AT) 

[AT-1 - Security Awareness and Training Policy and Procedures](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-at-1at-1)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-at-1control-requirements)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-at-1nist-supplemental-guidance)
The control requirements were initially based on [NIST 800-53 Rev 4](https://csrc.nist.gov/Projects/risk-management/sp800-53-controls/release-search!/800-53?version=4.0) and have been enhanced based on feedback from leading industry partners.

See [IBM Cloud Framework for Financial Services - Control Requirements](https://cloud.ibm.com/docs/framework-financial-services-controls) for a complete description of all control requirements. Or, if you prefer, there is a [downloadable spreadsheet](https://cloud.ibm.com/media/docs/downloads/framework-financial-services/IBM_Cloud_Framework_for_Financial_Services_-_Control_Requirements_v1.1.0.xlsx) available as well.





 Framework guidance and reference architectures 



 Interpreting the framework guidance 

We refer to the entity that uses (consumes) an application as the consumer and the entity that develops or deploys (provides) an application as the application provider. The consumer and application provider might be the same when the organization providing the application also consumes it (for example, a financial institution deploys an application for internal use by others in their company). Or, they might be different if a third-party ecosystem partner is providing an application for a financial institution to use.

You should use the information in the framework if you are an application provider (whether from a financial institution or ecosystem partner) who wishes to meet the requirements or leverage the best practices of IBM Cloud for Financial Services. However, the content has a different purpose depending on whether you represent an application provider from an ecosystem partner or an application provider within a financial institution.

Ecosystem partner
: The reference architectures and guidance form a set of requirements if you want to pursue a designation of [IBM Cloud for Financial Services Validated](https://cloud.ibm.com/docs/overview?topic=overview-what-is-fscloudbecoming-fs-validated) from IBM. The Financial Services Validated designation signifies that you have successfully evidenced compliance to the control requirements of the IBM Cloud Framework for Financial Services and may improve your ability to market to financial institutions.
test_wkt = 'POLYGON((-73.76223024988917 41.04173285255264,-73.7749331917837 41.04121496082817,-73.78197130823878 41.02748934524744,-73.76476225519923 41.023733725449326,-73.75218805933741 41.031633228865495,-73.7558787789419 41.03752486433286,-73.76223024988917 41.04173285255264))'
poly = wkt_reader.read(test_wkt)
2. Compute the geohash cover at a fixed bit depth for a given geometry:

cover = stc.geohash.geohash_cover_at_bit_depth(poly, 36)

Zoom

![Shows geohash coverage at a fixed bit depth for a given geometry.](https://cloud.ibm.com/docs-content/v1/content/cd4be197c8921ed12923aa899ac93a8ab643c158/AnalyticsEngine/images/cover.png)

Figure 1. Geohash coverage at a fixed bit depth for a given geometry
3. Compute the buffered geohash cover at a fixed bit depth for a given geometry:

buffered_cover = stc.geohash.geohash_cover_at_bit_depth(poly, 36, distance=50)

Zoom

![Shows buffered geohash coverage at a fixed bit depth for a given geometry.](https://cloud.ibm.com/docs-content/v1/content/cd4be197c8921ed12923aa899ac93a8ab643c158/AnalyticsEngine/images/buffered_cover.png)

Figure 2.
EC private keys, EC public keys, RSA private keys, RSA public keys, DH private keys, DH public keys, DSA private keys, DSA public keys 
 CKA_SUBPRIME DSA Domain parameter and used for C_CreateObject. Subprime q (160 bits for p <= 1024 bits, 224 bits, or 256 bits for p > 1024 bits). DSA private keys, DSA public keys 
 CKA_TOKEN CK_TRUE if object is a token object; CK_FALSE if object is a session object. EC private keys, EC public keys, RSA private keys, RSA public keys, DH private keys, DH public keys, DSA private keys, DSA public keys, AES keys, DES keys, Generic keys 
 CKA_TRUSTED The certificate or key can be trusted for the application that it was created. EC public keys, RSA public keys, DH public keys, DSA public keys, AES keys, DES keys, Generic keys 
 CKA_UNWRAP CK_TRUE if key supports unwrapping (can be used to unwrap other keys). EC private keys, RSA private keys, DH private keys, DSA private keys, AES keys, DES keys, Generic keys 
 CKA_URL The URL where the complete certificate can be obtained. Default is empty. Not applicable 
 CKA_VALUE Encoded certificate bytes or key bytes when using C_CreateObject. EC private keys, EC public keys, RSA private keys, RSA public keys, DSA private keys, DSA public keys 
 CKA_VALUE_LEN Length in bytes of key value. AES keys 
 CKA_VERIFY CK_TRUE if key supports verification where the signature is an appendix to the data. EC public keys, RSA public keys, DH public keys, DSA public keys, AES keys, DES keys, Generic keys 
 CKA_WRAP CK_TRUE if key supports wrapping (can be used to wrap other keys). EC public keys, RSA public keys, DH public keys, DSA public keys, AES keys, DES keys, Generic keys
Identification and Authentication (IA) [IA-2 User Identification and Authentication](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-2) <br>[IA-5 Authenticator Management](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-5) 







 Next steps 



* [Consumer accounts for application provider workloads](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-account-consumer)
Family and Relationships Parenting Adoption and Fostering 
 Family and Relationships Parenting Daycare and Pre-School 
 Family and Relationships Parenting Internet Safety 
 Family and Relationships Parenting Parenting Babies and Toddlers 
 Family and Relationships Parenting Parenting Children Aged 4-11 
 Family and Relationships Parenting Parenting Teens 
 Family and Relationships Parenting Special Needs Kids 
 Family and Relationships Single Life 
 Fine Art 
 Fine Art Costume 
 Fine Art Dance 
 Fine Art Design 
 Fine Art Digital Arts 
 Fine Art Fine Art Photography 
 Fine Art Modern Art 
 Fine Art Opera 
 Fine Art Theater 
 Food & Drink 
 Food & Drink Alcoholic Beverages 
 Food & Drink Vegan Diets 
 Food & Drink Vegetarian Diets 
 Food & Drink World Cuisines 
 Food & Drink Barbecues and Grilling 
 Food & Drink Cooking 
 Food & Drink Desserts and Baking 
 Food & Drink Dining Out 
 Food & Drink Food Allergies 
 Food & Drink Food Movements 
 Food & Drink Healthy Cooking and Eating 
 Food & Drink Non-Alcoholic Beverages 
 Healthy Living 
 Healthy Living Children's Health 
 Healthy Living Fitness and Exercise 
 Healthy Living Fitness and Exercise Participant Sports 
 Healthy Living Fitness and Exercise Running and Jogging 
 Healthy Living Men's Health 
 Healthy Living Nutrition 
 Healthy Living Senior Health 
 Healthy Living Weight Loss 
 Healthy Living Wellness 
 Healthy Living Wellness Alternative Medicine 
 Healthy Living Wellness Alternative Medicine Herbs and Supplements 
 Healthy Living Wellness Alternative Medicine Holistic Health 
 Healthy Living Wellness Physical Therapy 
 Healthy Living Wellness Smoking Cessation 
 Healthy Living Women's Health 
 Hobbies & Interests 
 Hobbies & Interests Antiquing and Antiques 
 Hobbies & Interests Magic and Illusion 
 Hobbies & Interests Model Toys 
 Hobbies & Interests Musical Instruments 
 Hobbies & Interests Paranormal Phenomena 
 Hobbies & Interests Radio Control 
 Hobbies & Interests Sci-fi and Fantasy 
 Hobbies & Interests Workshops and Classes 
 Hobbies & Interests Arts and Crafts 
 Hobbies & Interests Arts and Crafts Beadwork 
 Hobbies & Interests Arts and Crafts Candle and Soap Making 
 Hobbies & Interests Arts and Crafts Drawing and Sketching 
 Hobbies & Interests Arts and Crafts Jewelry Making 
 Hobbies & Interests Arts and Crafts Needlework 
 Hobbies & Interests Arts and Crafts Painting
[AC-4 (4) - Content Check Encrypted Information](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.4ac-4.4)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.4control-requirements)
* [Additional IBM Cloud for Financial Services specifications](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.4additional-ibm-cloud-for-financial-services-specifications)



[AC-4 (5) - Embedded Data Types](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.5ac-4.5)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.5control-requirements)
* [Additional IBM Cloud for Financial Services specifications](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.5additional-ibm-cloud-for-financial-services-specifications)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.5nist-supplemental-guidance)



[AC-4 (6) - Metadata](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.6ac-4.6)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-4.6control-requirements)
IR-4 - Incident Handling 



  Control requirements 

The organization:

IR-4 (a)
:   Implements an incident handling capability for security incidents that includes preparation, detection and analysis, containment, eradication, and recovery;

IR-4 (b)
:   Coordinates incident handling activities with contingency planning activities; and

IR-4 (c)
:   Incorporates lessons learned from ongoing incident handling activities into incident response procedures, training, and testing, and implements the resulting changes accordingly.





  Additional IBM Cloud for Financial Services specifications 



*  The organization must develop, document, and implement a forensics evidence process for the gathering, protection, preservation, and retention (including controlled access and evidence chain) of forensic evidence and investigation activities in accordance with customer requirements.







  NIST supplemental guidance 

Organizations recognize that incident response capability is dependent on the capabilities of organizational information systems and the mission/business processes being supported by those systems. Therefore, organizations consider incident response as part of the definition, design, and development of mission/business processes and information systems. Incident-related information can be obtained from a variety of sources including, for example, audit monitoring, network monitoring, physical access monitoring, user/administrator reports, and reported supply chain events. Effective incident handling capability includes coordination among many organizational entities including, for example, mission/business owners, information system owners, authorizing officials, human resources offices, physical and personnel security offices, legal departments, operations personnel, procurement offices, and the risk executive (function).
[AC-16 - Security Attributes](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-16ac-16)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-16control-requirements)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-16implementation-guidance)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-16scc-fs-cloud-profile)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-16nist-supplemental-guidance)



[AC-17 - Remote Access](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-17ac-17)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-17control-requirements)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-17implementation-guidance)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-17nist-supplemental-guidance)



[AC-17 (9) - Disconnect / Disable Access](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-17.9ac-17.9)
Select the Manage Access tab.

![MAS-MS-CCC-Access-3](https://cloud.ibm.com/docs-content/v1/content/bd177462727ef0a849ddcf8c842a6203b41f0625/mas-ms/images/MAS-MS-CCC-Access-3.png)
5. Add an asset to the Assets table by selecting the “New Row” button.

![MAS-MS-CCC-Access-4](https://cloud.ibm.com/docs-content/v1/content/bd177462727ef0a849ddcf8c842a6203b41f0625/mas-ms/images/MAS-MS-CCC-Access-4.png)
6. Select the search icon to bring up a list of assets you have access to.

If the asset you want to submit an access request for is not viewable in the asset list, you do not have access to the asset’s organization. To obtain access, contact the access manager for the organization. If you do not know who the access manager is, you may submit a support case [here](https://www.ibm.com/mysupport) to request this information.

![MAS-MS-CCC-Access-5](https://cloud.ibm.com/docs-content/v1/content/bd177462727ef0a849ddcf8c842a6203b41f0625/mas-ms/images/MAS-MS-CCC-Access-5.png)
7. Select an asset from the list for the organization you want to request Client Communications Center access to. Obtaining Client Communications Center access to one asset will grant you communications access to all assets for that organization.

!
* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ir-3control-requirements)
* [Additional IBM Cloud for Financial Services specifications](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ir-3additional-ibm-cloud-for-financial-services-specifications)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ir-3nist-supplemental-guidance)



[IR-3 (2) - Coordination with Related Plans](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ir-3.2ir-3.2)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ir-3.2control-requirements)
* [Additional IBM Cloud for Financial Services specifications](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ir-3.2additional-ibm-cloud-for-financial-services-specifications)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ir-3.2nist-supplemental-guidance)



[IR-4 - Incident Handling](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ir-4ir-4)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ir-4control-requirements)
Site map 

Find what you are looking for in the topics that are available for IBM Cloud Framework for Financial Services™.



 Overview 

[Overview](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-overviewoverview)





 Access Control (AC) 

[AC-1 - Access Control Policy and Procedures](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-1ac-1)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-1control-requirements)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-1nist-supplemental-guidance)



[AC-2 - Account Management](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2ac-2)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2control-requirements)
* [Additional IBM Cloud for Financial Services specifications](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2additional-ibm-cloud-for-financial-services-specifications)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2implementation-guidance)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2scc-fs-cloud-profile)
* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-6control-requirements)
* [Additional IBM Cloud for Financial Services specifications](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-6additional-ibm-cloud-for-financial-services-specifications)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-6implementation-guidance)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-6scc-fs-cloud-profile)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-6nist-supplemental-guidance)



[CM-6 (1) - Automated Central Management / Application / Verification](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-6.1cm-6.1)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-6.1control-requirements)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-6.1implementation-guidance)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-6.1scc-fs-cloud-profile)