vania-janet/multiturn-rag-retrieval-data huggingface dataset:
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-6nist-supplemental-guidance)



[AU-6 (1) - Process Integration](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-6.1au-6.1)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-6.1control-requirements)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-6.1implementation-guidance)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-6.1nist-supplemental-guidance)



[AU-7 - Audit Reduction and Report Generation](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-7au-7)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-7control-requirements)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-7implementation-guidance)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-7nist-supplemental-guidance)



[AU-8 - Time Stamps](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-8au-8)
Access Control (AC) [AC-2 Account Management](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2) <br>[AC-2 (1) Account Management | Automated System Account Management](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2.1) <br>[AC-2 (4) Account Management | Automated Audit Actions](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2.4) <br>[AC-2 (7) Account Management | Privileged User Accounts](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2.7) 
 Audit and Accountability (AU) [AU-3 Content of Audit Records](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-3) <br>[AU-4 Audit Log Storage Capacity](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-4) <br>[AU-5 Response to Audit Processing Failures](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-5) <br>[AU-6 Audit Record Review, Analysis. and Reporting](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-au-6) <br>[AU-6 (1) Audit Record Review, Analysis.
MA-1 - System Maintenance Policy and Procedures 



  Control requirements 

The organization:

MA-1 (a)
:   Develops, documents, and disseminates to [Assignment: organization-defined personnel or roles]:



1.  A system maintenance policy that addresses purpose, scope, roles, responsibilities, management commitment, coordination among organizational entities, and compliance; and
2.  Procedures to facilitate the implementation of the system maintenance policy and associated system maintenance controls; and



MA-1 (b)
:   Reviews and updates the current:



1.  System maintenance policy [IBM Assignment: at least annually]; and
2.  System maintenance procedures [IBM Assignment: at least annually].







  NIST supplemental guidance 

This control addresses the establishment of policy and procedures for the effective implementation of selected security controls and control enhancements in the MA family. Policy and procedures reflect applicable federal laws, Executive Orders, directives, regulations, policies, standards, and guidance. Security program policies and procedures at the organization level may make the need for system-specific policies and procedures unnecessary. The policy can be included as part of the general information security policy for organizations or conversely, can be represented by multiple policies reflecting the complex nature of certain organizations. The procedures can be established for the security program in general and for particular information systems, if needed. The organizational risk management strategy is a key factor in establishing policy and procedures.
* [Example access group structure](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-account-access-managementexample-structure)



* [Invite users to your account](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-account-access-managementinvite-users)
* [Access groups with dynamic rules](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-account-access-managementdynamic-rules)
* [Considerations for enterprises](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-account-access-managemententerprise)
* [Required permissions for services in reference architecture](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-account-access-managementrequired-permissions)
* [Related controls in IBM Cloud Framework for Financial Services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-account-access-managementrelated-controls)
* [Next steps](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-account-access-managementnext-steps)



[Handling and securing secrets](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-secretsshared-secrets)



* [Related controls in IBM Cloud Framework for Financial Services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-secretsrelated-controls)
* [Next steps](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-secretsnext-steps)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2implementation-guidance)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2scc-fs-cloud-profile)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2nist-supplemental-guidance)



[AC-2 (1) - Automated System Account Management](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2.1ac-2.1)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2.1control-requirements)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2.1implementation-guidance)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2.1nist-supplemental-guidance)



[AC-2 (2) - Removal of Temporary / Emergency Accounts](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2.2ac-2.2)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ac-2.2control-requirements)
MA-2 - Controlled Maintenance 



  Control requirements 

The organization:

MA-2 (a)
:   Schedules, performs, documents, and reviews records of maintenance and repairs on information system components in accordance with manufacturer or vendor specifications and/or organizational requirements;

MA-2 (b)
:   Approves and monitors all maintenance activities, whether performed on site or remotely and whether the equipment is serviced on site or removed to another location;

MA-2 (c)
:   Requires that [Assignment: organization-defined personnel or roles] explicitly approve the removal of the information system or system components from organizational facilities for off-site maintenance or repairs;

MA-2 (d)
:   Sanitizes equipment to remove all information from associated media prior to removal from organizational facilities for off-site maintenance or repairs;

MA-2 (e)
:   Checks all potentially impacted security controls to verify that the controls are still functioning properly following maintenance or repair actions; and

MA-2 (f)
:   Includes [Assignment: organization-defined maintenance-related information] in organizational maintenance records.





  Implementation guidance 

See the resources that follow to learn more about how to implement this control.



*  [Compliance monitoring](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-monitoring-compliance)







  NIST supplemental guidance 

This control addresses the information security aspects of the information system maintenance program and applies to all types of maintenance to any system component (including applications) conducted by any local or nonlocal entity (e.g., in-contract, warranty, in-house, software maintenance agreement). System maintenance also includes those components not directly associated with information processing and/or data/information retention such as scanners, copiers, and printers. Information necessary for creating effective maintenance records includes, for example: (i) date and time of maintenance; (ii) name of individuals or group performing the maintenance; (iii) name of escort, if necessary; (iv) a description of the maintenance performed; and (v) information system components/equipment removed or replaced (including identification numbers, if applicable). The level of detail included in maintenance records can be informed by the security categories of organizational information systems. Organizations consider supply chain issues associated with replacement components for information systems.
* [Related controls in IBM Cloud Framework for Financial Services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-storagerelated-controls)
* [Next steps](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-storagenext-steps)







 Logging and monitoring 

[Audit logging of IBM Cloud events](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-auditshared-logging-audit)



* [Setup Activity Tracker Event Routing](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-auditactivity-tracking-setup)
* [Related controls in IBM Cloud Framework for Financial Services](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-auditrelated-controls)
* [Next steps](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-auditnext-steps)



[Audit logging of application provider events and SIEM](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-audit-providershared-logging-audit-provider)



* [Auditable events](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-audit-providerevents)
* [Storing events in a SIEM](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-audit-providersiem)
* [Related IBM Cloud for Financial Services controls](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-shared-logging-audit-providerrelated-controls)
[PS-4 - Personnel Termination](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ps-4ps-4)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ps-4control-requirements)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ps-4nist-supplemental-guidance)



[PS-5 - Personnel Transfer](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ps-5ps-5)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ps-5control-requirements)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ps-5nist-supplemental-guidance)



[PS-6 - Access Agreements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ps-6ps-6)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ps-6control-requirements)
* [Additional IBM Cloud for Financial Services specifications](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ps-6additional-ibm-cloud-for-financial-services-specifications)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ps-6nist-supplemental-guidance)
* [Next steps](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-connectivity-overviewnext-steps)



[Ensuring isolation between Satellite management functions and workload functions](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-connectivity-management-isolationsatellite-architecture-connectivity-management-isolation)



* [Before you begin](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-connectivity-management-isolationbefore-you-begin)
* [Identify network areas for control plane hosts and workload hosts](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-connectivity-management-isolationmanagement-workload)
* [Design an addressing plan for control and workload segments](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-connectivity-management-isolationaddressing-plan)
* [Configure network flow rules to restrict network traffic for control plane](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-connectivity-management-isolationsecurity-groups-control)
* [Configure network flow rules for workload hosts](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-connectivity-management-isolationsecurity-groups-workload)
* [(Optional) Configure virtual network flow rules within Red Hat OpenShift on IBM Cloud](https://cloud.ibm.com/docs/framework-financial-services?topic=framework-financial-services-satellite-architecture-connectivity-management-isolationsecurity-groups-workload)
PM-5 - Information System Inventory 



  Control requirements 

PM-5 - 0
:   The organization develops and maintains an inventory of its information systems.
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-2.1implementation-guidance)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-2.1scc-fs-cloud-profile)



[IA-2 (2) - Network Access to Non-privileged Accounts](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-2.2ia-2.2)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-2.2control-requirements)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-2.2scc-fs-cloud-profile)



[IA-2 (11) - Remote Access - Separate Device](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-2.11ia-2.11)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-2.11control-requirements)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-2.11implementation-guidance)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-ia-2.11nist-supplemental-guidance)
CP-7 (3) - Priority of Service 



  Control requirements 

CP-7 (3) - 0
:   The organization develops alternate processing site agreements that contain priority-of-service provisions in accordance with organizational availability requirements (including recovery time objectives).





  NIST supplemental guidance 

Priority-of-service agreements refer to negotiated agreements with service providers that ensure that organizations receive priority treatment consistent with their availability requirements and the availability of information resources at the alternate processing site.
* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-2.1control-requirements)



[CM-2 (2) - Automation Support for Accuracy / Currency](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-2.2cm-2.2)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-2.2control-requirements)
* [Implementation guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-2.2implementation-guidance)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-2.2scc-fs-cloud-profile)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-2.2nist-supplemental-guidance)



[CM-2 (3) - Retention of Previous Configurations](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-2.3cm-2.3)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-2.3control-requirements)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-cm-2.3scc-fs-cloud-profile)
They also ensured that existing v1 consumers were aware that they had a certain timeline to move to v2. As this deadline approaches, ACME wants to see how quickly consumers are moving off v1, so they can offer assistance to valued partners.

Using a visualization similar to the one we just built, ACME has this information available at a glance.

In this tutorial, we walked through a number of activities to help you create useful combinations of API and consumer data. Using visualizations and dashboards, we quickly created tools that can provide data to help make sure that we are offering the right mix of APIs.

--------------------





 Next step 

Learn [how to manage your APIs and versioning](https://cloud.ibm.com/docs/apiconnect/tutorials?topic=apiconnect-tut_manage_version_landing).

Create > Manage > Secure > Socialize > Analyze
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-si-3scc-fs-cloud-profile)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-si-3nist-supplemental-guidance)



[SI-3 (2) - Automatic Updates](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-si-3.2si-3.2)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-si-3.2control-requirements)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-si-3.2nist-supplemental-guidance)



[SI-4 - Information System Monitoring](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-si-4si-4)



* [Control requirements](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-si-4control-requirements)
* [IBM Cloud for Financial Services profile](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-si-4scc-fs-cloud-profile)
* [NIST supplemental guidance](https://cloud.ibm.com/docs/framework-financial-services-controls?topic=framework-financial-services-controls-si-4nist-supplemental-guidance)
It is available as a containerised application and within a Kubernetes cluster, it is even available as something known as the MQ appliance which is dedicated hardware for running MQ. It is also available on the IBM z/OS mainframe.

The managed service, which is available in both IBM Cloud and Amazon Web Services (AWS) removes much of the responsibility of running and maintaining an MQ environment. These responsibilities include:



* Operating System Patching
* IBM MQ patching
* IBM MQ upgrades
* Availability
* Failover



![Image showing IBM Cloud Logo](https://cloud.ibm.com/docs-content/v1/content/3a120b16db5fdc3e70d071af8a63ce5515c1b096/mqcloud/images/ibmcloudlogo.png)![Image showing powered by AWS Logo](https://cloud.ibm.com/docs-content/v1/content/3a120b16db5fdc3e70d071af8a63ce5515c1b096/mqcloud/images/PB_AWS_logo_RGB.jpg)



 Why would I use MQ 

When someone builds a network to process thousands of transactions every minute, one needs to ensure that not even a single transaction is lost. If the servers are unable to process the number of transactions fast enough it is highly likely that transactions may be lost. MQ works by storing the transactions to be processed on a message queue and then processing them one at a time. This allows transactions to be processed at a flat rate meaning that extra CPU during high demand times is not required. It also means that if the system were to suddenly break down, the messages that are being processed are safely stored on the message queue and will not be lost.

IBM MQ integrates with many different operating systems and languages such as Java, Node.js and Golang, and includes REST API capabilities that can be called from any programming or scripting language. MQ carries out all necessary data transformations for you.