|
is blocked by
|
Virtual Data Room (VDR) |
|
is blocked by
|
Trustworthy AI & Autonomous Technologies |
|
is blocked by
|
AI & Autonomous Technologies Output Marking |
|
is blocked by
|
AI & Autonomous Technologies Output Filtering |
|
is blocked by
|
AI & Autonomous Technologies Intellectual Property Infringement Protections |
|
is blocked by
|
Digital Content Modification Logging |
|
is blocked by
|
AI & Autonomous Technologies Development Practices |
|
is blocked by
|
AI & Autonomous Technologies Transparency |
|
is blocked by
|
AI & Autonomous Technologies Implementation Documentation |
|
is blocked by
|
AI & Autonomous Technologies Testing Techniques |
|
is blocked by
|
Generative Artificial Intelligence (GAI) Identification |
|
is blocked by
|
AI & Autonomous Technologies Capabilities Testing |
|
is blocked by
|
Real-World Testing |
|
is blocked by
|
Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV) |
|
is blocked by
|
AI TEVV Trustworthiness Assessment |
|
is blocked by
|
AI TEVV Tools |
|
is blocked by
|
AI TEVV Trustworthiness Demonstration |
|
is blocked by
|
AI TEVV Safety Demonstration |
|
is blocked by
|
AI TEVV Security & Resiliency Assessment |
|
is blocked by
|
AI TEVV Transparency & Accountability Assessment |
|
is blocked by
|
AI TEVV Privacy Assessment |
|
is blocked by
|
AI TEVV Fairness & Bias Assessment |
|
is blocked by
|
AI & Autonomous Technologies Model Validation |
|
is blocked by
|
AI TEVV Comparable Deployment Settings |
|
is blocked by
|
AI TEVV Empirically Validated Methods |
|
is blocked by
|
AI TEVV Benchmarking Content Provenance |
|
is blocked by
|
AI TEVV Third-Party Risk Management |
|
is blocked by
|
Updating AI & Autonomous Technologies |
|
is blocked by
|
AI & Autonomous Technologies Deployment |
|
is blocked by
|
AI & Autonomous Technologies Production Monitoring |
|
is blocked by
|
Pre-Trained AI & Autonomous Technologies Models |
|
is blocked by
|
AI & Autonomous Technologies Event Logging |
|
is blocked by
|
Anomaly Detection & Human Oversight |
|
is blocked by
|
Human-in-the-Loop & Escalation |
|
is blocked by
|
Emergent Behavior & Collusion Protections |
|
is blocked by
|
Multi-Agent Trust & Communication Validation |
|
is blocked by
|
AI Model Resilience |
|
is blocked by
|
AI Model Pollution |
|
is blocked by
|
Cascading Hallucination Defense |
|
is blocked by
|
Resource Exhaustion & Denial of Service (DoS) Resilience |
|
is blocked by
|
AI Agent Governance |
|
is blocked by
|
Infrastructure Hardening & Isolation |
|
is blocked by
|
AI Agent Limitations |
|
is blocked by
|
Tool & Application Programming Interface (API) Invocation Controls |
|
is blocked by
|
AI Agent Orchestration Protocol Safeguards |
|
is blocked by
|
AI Agent Data Pipeline & Input Integrity |
|
is blocked by
|
AI Agent Privileged Role & Delegation Boundaries |
|
is blocked by
|
AI Agent Data Access Restrictions |
|
is blocked by
|
AI Agent Data Extraction |
|
is blocked by
|
AI Agent Identity & Impersonation Defense |
|
is blocked by
|
AI Agent Logic Integrity |
|
is blocked by
|
Sandboxing AI Agents |
|
is blocked by
|
AI Agent Prompt Injection Defense |
|
is blocked by
|
AI Agent Kill Switch / User Control |
|
is blocked by
|
AI Agent Logging |
|
is blocked by
|
AI Agent Session Management |
|
is blocked by
|
Robotic Process Automation (RPA) |
|
is blocked by
|
Comprehensive Asset Inventory Management |
|
is blocked by
|
Configuration Management Database (CMDB) |
|
is blocked by
|
Asset Discovery |
|
is blocked by
|
Dynamic Host Configuration Protocol (DHCP) Server Logging |
|
is blocked by
|
Automated Network Asset Discovery |
|
is blocked by
|
Automated Location Tracking |
|
is blocked by
|
Provenance |
|
is blocked by
|
Kiosks & Point of Interaction (PoI) Devices |
|
is blocked by
|
Secure Disposal, Destruction or Re-Use of Equipment |
|
is blocked by
|
Use of Third-Party Devices |
|
is blocked by
|
Usage Parameters |
|
is blocked by
|
Roots of Trust Protection |
|
is blocked by
|
Jump Server |
|
is blocked by
|
Database Management System (DBMS) |
|
is blocked by
|
Technology Lifecycle Management |
|
is blocked by
|
Stable Versions |
|
is blocked by
|
Removal of Previous Versions |
|
is blocked by
|
Alternate Sources for Continued Support |
|
is blocked by
|
Predictable Failure Analysis |
|
is blocked by
|
Operational Resilience Capabilities |
|
is blocked by
|
Recovery Time / Point Objectives (RTO / RPO) |
|
is blocked by
|
Recovery Operations Communications |
|
is blocked by
|
Alternate Communications Channels |
|
is blocked by
|
Resume All Missions & Business Functions |
|
is blocked by
|
Continue Essential Mission & Business Functions |
|
is blocked by
|
Resume Essential Missions & Business Functions |
|
is blocked by
|
Automated Training Environments |
|
is blocked by
|
Alternate Processing Site |
|
is blocked by
|
Preparation for Use |
|
is blocked by
|
Telecommunications Services Availability |
|
is blocked by
|
Technology Assets, Applications and/or Services (TAAS) Recovery & Reconstitution |
|
is blocked by
|
Restore Within Time Period |
|
is blocked by
|
Reserve Hardware |
|
is blocked by
|
Redundant Secondary System |
|
is blocked by
|
Failover Capability |
|
is blocked by
|
Data Backups |
|
is blocked by
|
Cryptographic Protection |
|
is blocked by
|
Transaction Recovery |
|
is blocked by
|
Data Replication |
|
is blocked by
|
Data Archiving |
|
is blocked by
|
Continuous Data Protection (CDP) |
|
is blocked by
|
Data Backup & Restoration Hardware Protection |
|
is blocked by
|
Restoration Integrity Verification |
|
is blocked by
|
Capacity & Performance Management |
|
is blocked by
|
Capacity Planning |
|
is blocked by
|
Resource Priority |
|
is blocked by
|
Performance Monitoring |
|
is blocked by
|
Elastic Expansion |
|
is blocked by
|
Resiliency Planning For Alternate Sites |
|
is blocked by
|
Role-Based Permissions To Implement Changes |
|
is blocked by
|
Automated Security Response |
|
is blocked by
|
Unauthorized Software Installation Alerts |
|
is blocked by
|
Signed Components |
|
is blocked by
|
Multi-Tenant Environments |
|
is blocked by
|
Data Handling & Portability |
|
is blocked by
|
Standardized Virtualization Formats |
|
is blocked by
|
Cloud Access Security Broker (CASB) |
|
is blocked by
|
Continuous Control Monitoring (CCM) |
|
is blocked by
|
Export-Controlled Access Restrictions |
|
is blocked by
|
Export Activities Documentation |
|
is blocked by
|
Least Functionality |
|
is blocked by
|
Secure Baseline Configurations |
|
is blocked by
|
Account Lockout |
|
is blocked by
|
Concurrent Session Control |
|
is blocked by
|
Session Lock |
|
is blocked by
|
Pattern-Hiding Displays |
|
is blocked by
|
Session Termination |
|
is blocked by
|
User-Initiated Logouts / Message Displays |
|
is blocked by
|
Non-Console Administrative Access |
|
is blocked by
|
Wireless Access Authentication & Encryption |
|
is blocked by
|
Bluetooth & Wireless Devices |
|
is blocked by
|
Infrared Communications |
|
is blocked by
|
Microphones & Web Cameras |
|
is blocked by
|
Multi-Function Devices (MFD) |
|
is blocked by
|
Radio Frequency Identification (RFID) Security |
|
is blocked by
|
Contactless Access Control Systems |
|
is blocked by
|
Thin Nodes |
|
is blocked by
|
Video Teleconference (VTC) Security |
|
is blocked by
|
Voice Over Internet Protocol (VoIP) Security |
|
is blocked by
|
Disable Wireless Networking |
|
is blocked by
|
Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas |
|
is blocked by
|
Physically Disable or Remove Capabilities |
|
is blocked by
|
Automated Baseline Configuration Management & Verification |
|
is blocked by
|
Integrity Assurance & Enforcement (IAE) |
|
is blocked by
|
Retention Of Previous Configurations |
|
is blocked by
|
Network Device Configuration File Synchronization |
|
is blocked by
|
Software Usage Restrictions |
|
is blocked by
|
Restrict Roles Permitted To Install Software |
|
is blocked by
|
Configuration Management Role Assignment |
|
is blocked by
|
Open Source Software |
|
is blocked by
|
Prevent Unauthorized Software Execution |
|
is blocked by
|
Explicitly Allow / Deny Applications |
|
is blocked by
|
Unsupported Internet Browsers & Email Clients |
|
is blocked by
|
Zero-Touch Provisioning (ZTP) |
|
is blocked by
|
Production Software Repository |
|
is blocked by
|
Third-Party Libraries |
|
is blocked by
|
Software Repository Protections |
|
is blocked by
|
Software Development Repository |
|
is blocked by
|
Embedded Sensor Capability |
|
is blocked by
|
Embedded Sensor Data Collection Minimization |
|
is blocked by
|
Embedded Sensor Configuration Verification |
|
is blocked by
|
Refresh from Trusted Sources |
|
is blocked by
|
Hypervisor Access |
|
is blocked by
|
Restrict Access To Security Functions |
|
is blocked by
|
Host-Based Security Function Isolation |
|
is blocked by
|
Control Assurance Automation (CAA) Change Control |
|
is blocked by
|
Control Assurance Automation (CAA) Unauthorized Change Detection |
|
is blocked by
|
Control Assurance Automation (CAA) Separation of Duties |
|
is blocked by
|
Centralized Management of Event Log & Security-Relevant Telemetry Content |
|
is blocked by
|
Centralized Collection of Event Logs & Security-Relevant Telemetry |
|
is blocked by
|
Centralized Event Log & Security-Relevant Telemetry Review & Analysis |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Analysis & Triage |
|
is blocked by
|
Automated Tools for Real-Time Event Log & Security-Relevant Telemetry Analysis |
|
is blocked by
|
Automated Incident Responder Alerting |
|
is blocked by
|
Monitoring Reporting |
|
is blocked by
|
Alert Threshold Tuning |
|
is blocked by
|
Correlate Monitoring Information |
|
is blocked by
|
Integration of Scanning & Other Monitoring Information |
|
is blocked by
|
Correlation with Physical Monitoring |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Backup on Separate Physical Systems / Components |
|
is blocked by
|
Write Once Read Many (WORM) Event Log Generation |
|
is blocked by
|
Individuals Posing Greater Risk |
|
is blocked by
|
Session Audit |
|
is blocked by
|
Real-Time Session Monitoring |
|
is blocked by
|
Monitoring For Information Disclosure |
|
is blocked by
|
Monitoring for Third-Party Information Disclosure |
|
is blocked by
|
Analyze Traffic for Covert Exfiltration |
|
is blocked by
|
Unauthorized Activities |
|
is blocked by
|
Unauthorized Network Services |
|
is blocked by
|
Inbound & Outbound Communications Traffic |
|
is blocked by
|
Proxy Logging |
|
is blocked by
|
Network Intrusion Detection & Prevention Systems (NIDS & NIPS) Monitoring |
|
is blocked by
|
Response To Event Log Processing Failures |
|
is blocked by
|
Real-Time Alerts of Event Logging Failure |
|
is blocked by
|
Non-Repudiation |
|
is blocked by
|
Identity Binding |
|
is blocked by
|
Alternate Event Logging Capability |
|
is blocked by
|
Control Assurance Automation (CAA) Data Feed Identification |
|
is blocked by
|
Use of Cryptographic Controls |
|
is blocked by
|
Cryptographic Management |
|
is blocked by
|
Alternate Physical Protection |
|
is blocked by
|
Pre/Post Transmission Handling |
|
is blocked by
|
Encrypting Data In Transit |
|
is blocked by
|
Integrity of Data In Transit |
|
is blocked by
|
Encrypting Data At Rest |
|
is blocked by
|
Encrypting Storage Media |
|
is blocked by
|
Database Encryption |
|
is blocked by
|
Public Key Infrastructure (PKI) |
|
is blocked by
|
Cryptographic Key Management |
|
is blocked by
|
Symmetric Keys |
|
is blocked by
|
Asymmetric Keys |
|
is blocked by
|
Data Protection |
|
is blocked by
|
Sensitive / Regulated Data Protection |
|
is blocked by
|
Storing Authentication Data |
|
is blocked by
|
Encrypting Data Outside of Controlled Areas |
|
is blocked by
|
Digital & Non-Digital Media Disposal |
|
is blocked by
|
Digital Media Sanitization |
|
is blocked by
|
Sanitization of Sensitive / Regulated Data |
|
is blocked by
|
Digital Media Sanitization Equipment Testing |
|
is blocked by
|
First Time Use Sanitization |
|
is blocked by
|
Digital Media Use Restrictions |
|
is blocked by
|
Removable Media Security |
|
is blocked by
|
Information Search & Retrieval |
|
is blocked by
|
Electronic Discovery (eDiscovery) |
|
is blocked by
|
Automated Tools to Support Logical Data Location |
|
is blocked by
|
Data Quality Automation |
|
is blocked by
|
Automated De-Identification of Sensitive / Regulated Data |
|
is blocked by
|
Removal, Masking, Encryption, Hashing or Replacement of Direct Identifiers |
|
is blocked by
|
Statistical Disclosure Control |
|
is blocked by
|
Differential Privacy |
|
is blocked by
|
Cybersecurity & Data Protection Attributes |
|
is blocked by
|
Dynamic Attribute Association |
|
is blocked by
|
Attribute Value Changes By Authorized Individuals |
|
is blocked by
|
Maintenance of Attribute Associations By System |
|
is blocked by
|
Association of Attributes By Authorized Individuals |
|
is blocked by
|
Attribute Displays for Output Devices |
|
is blocked by
|
Consistent Attribute Interpretation |
|
is blocked by
|
Identity Association Techniques & Technologies |
|
is blocked by
|
Data Rights Management (DRM) |
|
is blocked by
|
Data Loss Prevention (DLP) |
|
is blocked by
|
Separate Operating Environments For Embedded Technologies |
|
is blocked by
|
Embedded Technology Inventory Management |
|
is blocked by
|
Internet of Things (IOT) |
|
is blocked by
|
Operational Technology (OT) |
|
is blocked by
|
Interface Security |
|
is blocked by
|
Embedded Technology Configuration Monitoring |
|
is blocked by
|
Prevent Alterations |
|
is blocked by
|
Embedded Technology Maintenance |
|
is blocked by
|
Resilience To Outages |
|
is blocked by
|
Power Level Monitoring |
|
is blocked by
|
Embedded Technology Reviews |
|
is blocked by
|
Message Queuing Telemetry Transport (MQTT) Security |
|
is blocked by
|
Remote Management of Embedded Technologies |
|
is blocked by
|
Restrict Communications |
|
is blocked by
|
Authorized Communications |
|
is blocked by
|
Operating Environment Certification |
|
is blocked by
|
Safety Assessment |
|
is blocked by
|
Certificate-Based Authentication |
|
is blocked by
|
Chip-To-Cloud Security |
|
is blocked by
|
Real-Time Operating System (RTOS) Security |
|
is blocked by
|
Safe Operations |
|
is blocked by
|
Proximity Sensor |
|
is blocked by
|
Safety Instrumented System (SIS) |
|
is blocked by
|
Safety Instrumented Function (SIF) |
|
is blocked by
|
Endpoint Protection Mechanisms |
|
is blocked by
|
Centralized Management of Endpoint Protection Mechanisms |
|
is blocked by
|
Automatic Endpoint Protection Mechanism Updates |
|
is blocked by
|
Binary or Machine-Executable Code |
|
is blocked by
|
Malicious Code Protection (Antimalware) |
|
is blocked by
|
Always On Antimalware Protection |
|
is blocked by
|
Heuristic / Nonsignature-Based Malware Detection |
|
is blocked by
|
Antimalware Protection Mechanism Testing |
|
is blocked by
|
Software Firewall |
|
is blocked by
|
Unified Endpoint Device Management (UEDM) |
|
is blocked by
|
Endpoint Detection & Response (EDR) |
|
is blocked by
|
Extended Detection & Response (XDR) |
|
is blocked by
|
Endpoint File Integrity Monitoring (FIM) |
|
is blocked by
|
Endpoint Integrity Checks |
|
is blocked by
|
Automated Notifications of Integrity Violations |
|
is blocked by
|
Automated Response to Integrity Violations |
|
is blocked by
|
Boot Process Integrity |
|
is blocked by
|
Protection of Boot Firmware |
|
is blocked by
|
Host Intrusion Detection and Prevention Systems (HIDS / HIPS) |
|
is blocked by
|
Mobile Code |
|
is blocked by
|
Explicitly Indicate Current Participants |
|
is blocked by
|
Malicious Link & File Protections |
|
is blocked by
|
Explicit Indication Of Use |
|
is blocked by
|
Automated Employment Status Notifications |
|
is blocked by
|
Identity & Access Management (IAM) |
|
is blocked by
|
Authenticate, Authorize and Audit (AAA) |
|
is blocked by
|
Replay-Resistant Authentication |
|
is blocked by
|
Identity Providers (IdP) & Authorization Servers |
|
is blocked by
|
Role-Based Access Control (RBAC) |
|
is blocked by
|
Biometric Authentication |
|
is blocked by
|
Hardware Token-Based Authentication |
|
is blocked by
|
Reference Monitor |
|
is blocked by
|
Access Enforcement |
|
is blocked by
|
Database Access |
|
is blocked by
|
Dual Authorization for Privileged Commands |
|
is blocked by
|
Least Privilege |
|
is blocked by
|
Acceptance of External Authenticators |
|
is blocked by
|
Identification & Authentication for Devices |
|
is blocked by
|
Access Control For Mobile Devices |
|
is blocked by
|
Multi-Factor Authentication (MFA) |
|
is blocked by
|
Hardware Security Modules (HSM) |
|
is blocked by
|
Continuous Authentication |
|
is blocked by
|
Re-Authentication |
|
is blocked by
|
Mutual Authentication (MA) |
|
is blocked by
|
Federated Credential Management |
|
is blocked by
|
Invalidate Session Identifiers at Logout |
|
is blocked by
|
Automated Employment Status Notifications |
|
is blocked by
|
Identity & Access Management (IAM) |
|
is blocked by
|
Authenticate, Authorize and Audit (AAA) |
|
is blocked by
|
Replay-Resistant Authentication |
|
is blocked by
|
Identity Providers (IdP) & Authorization Servers |
|
is blocked by
|
Role-Based Access Control (RBAC) |
|
is blocked by
|
Unique System-Generated Session Identifiers |
|
is blocked by
|
Software Defined Storage (SDS) Data Access Control |
|
is blocked by
|
Sensitive / Regulated Data Access Enforcement |
|
is blocked by
|
Sensitive / Regulated Data Actions |
|
is blocked by
|
Compliance As Code (CAC) Least Privileges |
|
is blocked by
|
Compliance As Code (CAC) Credential Lifecycle Management |
|
is blocked by
|
Automated Incident Handling Processes |
|
is blocked by
|
Automated Reporting |
|
is blocked by
|
Automated Tracking, Data Collection & Analysis |
|
is blocked by
|
Dynamic Reconfiguration |
|
is blocked by
|
Automated Incident Response Training Environments |
|
is blocked by
|
Automation Support of Availability of Information / Support |
|
is blocked by
|
Detonation Chambers (Sandboxes) |
|
is blocked by
|
Threat Analysis & Flaw Remediation During Development |
|
is blocked by
|
Controlled Maintenance |
|
is blocked by
|
Timely Maintenance |
|
is blocked by
|
Preventative Maintenance |
|
is blocked by
|
Predictive Maintenance |
|
is blocked by
|
Maintenance Validation |
|
is blocked by
|
Maintenance Monitoring |
|
is blocked by
|
Automated Maintenance Activities |
|
is blocked by
|
Automated Support For Predictive Maintenance |
|
is blocked by
|
Maintenance Tools |
|
is blocked by
|
Inspect Tools |
|
is blocked by
|
Inspect Media |
|
is blocked by
|
Restrict Tool Usage |
|
is blocked by
|
Remote Maintenance |
|
is blocked by
|
Remote Maintenance Disconnect Verification |
|
is blocked by
|
Remote Maintenance Cryptographic Protection |
|
is blocked by
|
Auditing Remote Maintenance |
|
is blocked by
|
Remote Maintenance Comparable Security & Sanitization |
|
is blocked by
|
Separation of Maintenance Sessions |
|
is blocked by
|
Field Maintenance |
|
is blocked by
|
Centralized Management Of Mobile Devices |
|
is blocked by
|
Restricting Access To Authorized Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Prevent Discovery of Internal Information |
|
is blocked by
|
Direct Internet Access Restrictions |
|
is blocked by
|
Prevent Unauthorized Exfiltration |
|
is blocked by
|
Protocol Compliance Enforcement |
|
is blocked by
|
Domain Name Verification |
|
is blocked by
|
Bandwidth Control |
|
is blocked by
|
Internet Address Denylisting |
|
is blocked by
|
Certificate Denylisting |
|
is blocked by
|
Content Disarm and Reconstruction (CDR) |
|
is blocked by
|
Network Processing Rules For Personal Data (PD) |
|
is blocked by
|
Split Tunneling |
|
is blocked by
|
Data Flow Enforcement – Access Control Lists (ACLs) |
|
is blocked by
|
Deny Traffic by Default & Allow Traffic by Exception |
|
is blocked by
|
External System Connections |
|
is blocked by
|
Network Segmentation (macrosegmentation) |
|
is blocked by
|
Security Management Subnets |
|
is blocked by
|
Separate Subnets To Isolate Functions |
|
is blocked by
|
Sensitive / Regulated Data Enclave (Secure Zone) |
|
is blocked by
|
Segregation From Enterprise Services |
|
is blocked by
|
Network Device Plane Segmentation |
|
is blocked by
|
Unique System-Generated Session Identifiers |
|
is blocked by
|
Software Defined Storage (SDS) Data Access Control |
|
is blocked by
|
Sensitive / Regulated Data Access Enforcement |
|
is blocked by
|
Sensitive / Regulated Data Actions |
|
is blocked by
|
Compliance As Code (CAC) Least Privileges |
|
is blocked by
|
Compliance As Code (CAC) Credential Lifecycle Management |
|
is blocked by
|
Automated Incident Handling Processes |
|
is blocked by
|
Automated Reporting |
|
is blocked by
|
Automated Tracking, Data Collection & Analysis |
|
is blocked by
|
Dynamic Reconfiguration |
|
is blocked by
|
Automated Incident Response Training Environments |
|
is blocked by
|
Automation Support of Availability of Information / Support |
|
is blocked by
|
Detonation Chambers (Sandboxes) |
|
is blocked by
|
Virtual Local Area Network (VLAN) Separation |
|
is blocked by
|
Microsegmentation |
|
is blocked by
|
Software Defined Networking (SDN) |
|
is blocked by
|
Domain Name Service (DNS) Resolution |
|
is blocked by
|
Architecture & Provisioning for Name / Address Resolution Service |
|
is blocked by
|
Secure Name / Address Resolution Service (Recursive or Caching Resolver) |
|
is blocked by
|
Zero Trust Architecture (ZTA) |
|
is blocked by
|
Policy Decision Point (PDP) |
|
is blocked by
|
Network Access Control (NAC) |
|
is blocked by
|
DNS & Content Filtering |
|
is blocked by
|
Authenticated Proxy |
|
is blocked by
|
Route Internal Traffic to Proxy Servers |
|
is blocked by
|
Route Privileged Network Access |
|
is blocked by
|
Application Proxy |
|
is blocked by
|
Visibility of Encrypted Communications |
|
is blocked by
|
Content Check for Encrypted Data |
|
is blocked by
|
Denial of Service (DoS) Protection |
|
is blocked by
|
Guest Networks |
|
is blocked by
|
Intranets |
|
is blocked by
|
Wireless Networking |
|
is blocked by
|
Wireless Networking Authentication & Encryption |
|
is blocked by
|
Wireless Boundaries |
|
is blocked by
|
Rogue Wireless Detection |
|
is blocked by
|
Remote Access |
|
is blocked by
|
Remote Access Pathways |
|
is blocked by
|
Expeditious Remote Access Disconnect / Disable Capability |
|
is blocked by
|
Remote Access Endpoint Security Validation |
|
is blocked by
|
Remote Access Monitoring & Control |
|
is blocked by
|
Remote Access Cryptographic Protections |
|
is blocked by
|
Network Connection Termination |
|
is blocked by
|
Session Integrity |
|
is blocked by
|
Network Intrusion Detection / Prevention Systems (NIDS / NIPS) |
|
is blocked by
|
Wireless Intrusion Detection / Prevention Systems (WIDS / WIPS) Deployment |
|
is blocked by
|
Demilitarized Zones (DMZ) |
|
is blocked by
|
Web Application Firewall (WAF) |
|
is blocked by
|
Application Programming Interface (API) Security |
|
is blocked by
|
API Gateway |
|
is blocked by
|
Safeguarding Data Over Open Networks |
|
is blocked by
|
Wireless Link Protection |
|
is blocked by
|
End-User Messaging Technologies |
|
is blocked by
|
Electronic Messaging |
|
is blocked by
|
Phishing & Spam Protection |
|
is blocked by
|
Email Content Protections |
|
is blocked by
|
Adaptive Email Protections |
|
is blocked by
|
Email Labeling |
|
is blocked by
|
User Digital Signatures for Outgoing Email |
|
is blocked by
|
Encryption for Outgoing Email |
|
is blocked by
|
User Threat Reporting |
|
is blocked by
|
Cross Domain Solution (CDS) |
|
is blocked by
|
Separate Subnet for Connecting to Different Security Domains |
|
is blocked by
|
Cross Domain Authentication |
|
is blocked by
|
Data Type Identifiers |
|
is blocked by
|
Decomposition Into Policy-Related Subcomponents |
|
is blocked by
|
Detection of Unsanctioned Information |
|
is blocked by
|
Cross Domain Content Transfer |
|
is blocked by
|
Isolation of System Components |
|
is blocked by
|
Dynamic Isolation & Segregation (Sandboxing) |
|
is blocked by
|
Host Containment |
|
is blocked by
|
Resource Containment |
|
is blocked by
|
Conceal / Randomize Communications |
|
is blocked by
|
Object Security Attributes |
|
is blocked by
|
Embedded Data Types |
|
is blocked by
|
Metadata |
|
is blocked by
|
Metadata Validation |
|
is blocked by
|
Side Channel Attack Prevention |
|
is blocked by
|
Physical & Environmental Protections |
|
is blocked by
|
Zone-Based Physical Security |
|
is blocked by
|
Dual Authorization for Physical Access |
|
is blocked by
|
Physical Access Control |
|
is blocked by
|
Controlled Ingress & Egress Points |
|
is blocked by
|
Physical Access Logs |
|
is blocked by
|
Working in Secure Areas |
|
is blocked by
|
Access To Critical Systems |
|
is blocked by
|
Lockable Physical Casings |
|
is blocked by
|
Monitoring Physical Access |
|
is blocked by
|
Intrusion Alarms / Surveillance Equipment |
|
is blocked by
|
Monitoring Physical Access To Critical Systems |
|
is blocked by
|
Distinguish Visitors from On-Site Personnel |
|
is blocked by
|
Identification Requirement |
|
is blocked by
|
Restrict Unescorted Access |
|
is blocked by
|
Automated Records Management & Review |
|
is blocked by
|
Visitor Access Revocation |
|
is blocked by
|
Delivery & Removal |
|
is blocked by
|
Temporary Storage |
|
is blocked by
|
Equipment Siting & Protection |
|
is blocked by
|
Transmission Medium Security |
|
is blocked by
|
Access Control for Output Devices |
|
is blocked by
|
Component Marking |
|
is blocked by
|
Asset Monitoring and Tracking |
|
is blocked by
|
Supporting Utilities |
|
is blocked by
|
Automatic Voltage Controls |
|
is blocked by
|
Emergency Shutoff |
|
is blocked by
|
Emergency Power |
|
is blocked by
|
Emergency Lighting |
|
is blocked by
|
Water Damage Protection |
|
is blocked by
|
Automation Support for Water Damage Protection |
|
is blocked by
|
Redundant Cabling |
|
is blocked by
|
Fire Protection |
|
is blocked by
|
Fire Detection Devices |
|
is blocked by
|
Virtual Local Area Network (VLAN) Separation |
|
is blocked by
|
Microsegmentation |
|
is blocked by
|
Software Defined Networking (SDN) |
|
is blocked by
|
Domain Name Service (DNS) Resolution |
|
is blocked by
|
Architecture & Provisioning for Name / Address Resolution Service |
|
is blocked by
|
Secure Name / Address Resolution Service (Recursive or Caching Resolver) |
|
is blocked by
|
Zero Trust Architecture (ZTA) |
|
is blocked by
|
Policy Decision Point (PDP) |
|
is blocked by
|
Network Access Control (NAC) |
|
is blocked by
|
DNS & Content Filtering |
|
is blocked by
|
Authenticated Proxy |
|
is blocked by
|
Route Internal Traffic to Proxy Servers |
|
is blocked by
|
Route Privileged Network Access |
|
is blocked by
|
Application Proxy |
|
is blocked by
|
Visibility of Encrypted Communications |
|
is blocked by
|
Content Check for Encrypted Data |
|
is blocked by
|
Denial of Service (DoS) Protection |
|
is blocked by
|
Guest Networks |
|
is blocked by
|
Intranets |
|
is blocked by
|
Wireless Networking |
|
is blocked by
|
Wireless Networking Authentication & Encryption |
|
is blocked by
|
Wireless Boundaries |
|
is blocked by
|
Rogue Wireless Detection |
|
is blocked by
|
Remote Access |
|
is blocked by
|
Remote Access Pathways |
|
is blocked by
|
Expeditious Remote Access Disconnect / Disable Capability |
|
is blocked by
|
Remote Access Endpoint Security Validation |
|
is blocked by
|
Remote Access Monitoring & Control |
|
is blocked by
|
Remote Access Cryptographic Protections |
|
is blocked by
|
Network Connection Termination |
|
is blocked by
|
Session Integrity |
|
is blocked by
|
Network Intrusion Detection / Prevention Systems (NIDS / NIPS) |
|
is blocked by
|
Wireless Intrusion Detection / Prevention Systems (WIDS / WIPS) Deployment |
|
is blocked by
|
Demilitarized Zones (DMZ) |
|
is blocked by
|
Web Application Firewall (WAF) |
|
is blocked by
|
Application Programming Interface (API) Security |
|
is blocked by
|
API Gateway |
|
is blocked by
|
Safeguarding Data Over Open Networks |
|
is blocked by
|
Wireless Link Protection |
|
is blocked by
|
End-User Messaging Technologies |
|
is blocked by
|
Electronic Messaging |
|
is blocked by
|
Fire Suppression Devices |
|
is blocked by
|
Automatic Fire Suppression |
|
is blocked by
|
Temperature & Humidity Controls Monitoring |
|
is blocked by
|
Temperature & Humidity Controls Alerting |
|
is blocked by
|
Information Leakage Due To Electromagnetic Signals Emanations |
|
is blocked by
|
Electromagnetic Pulse (EMP) Protection |
|
is blocked by
|
Personal Data (PD) Inventory Automation Support |
|
is blocked by
|
Updating & Correcting Personal Data (PD) |
|
is blocked by
|
Real-Time or Layered Notice |
|
is blocked by
|
Choice Architecture |
|
is blocked by
|
Symmetry In Choice |
|
is blocked by
|
Data Subject Consent |
|
is blocked by
|
Active Participation For Consent By Data Subjects |
|
is blocked by
|
Tailored Consent |
|
is blocked by
|
Revoke Consent |
|
is blocked by
|
Just-In-Time Notice & Updated Consent |
|
is blocked by
|
Prohibition of Selling, Processing and/or Sharing Personal Data (PD) |
|
is blocked by
|
Cookie Management |
|
is blocked by
|
Global Privacy Control (GPC) |
|
is blocked by
|
Secure Development Life Cycle (SDLC) Management |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Transition Planning & Hybrid Mode Support |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Supply Chain Visibility |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Supply Chain Flow-Down Requirements |
|
is blocked by
|
Crypto-Agility Architecture |
|
is blocked by
|
Entropy Source & Random Bit Generation |
|
is blocked by
|
Stateful Hash-Based Signatures for Firmware & Code Signing |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Validation Requirements |
|
is blocked by
|
Fire Suppression Devices |
|
is blocked by
|
Automatic Fire Suppression |
|
is blocked by
|
Temperature & Humidity Controls Monitoring |
|
is blocked by
|
Temperature & Humidity Controls Alerting |
|
is blocked by
|
Information Leakage Due To Electromagnetic Signals Emanations |
|
is blocked by
|
Electromagnetic Pulse (EMP) Protection |
|
is blocked by
|
Personal Data (PD) Inventory Automation Support |
|
is blocked by
|
Updating & Correcting Personal Data (PD) |
|
is blocked by
|
Real-Time or Layered Notice |
|
is blocked by
|
Choice Architecture |
|
is blocked by
|
Symmetry In Choice |
|
is blocked by
|
Data Subject Consent |
|
is blocked by
|
Active Participation For Consent By Data Subjects |
|
is blocked by
|
Tailored Consent |
|
is blocked by
|
Revoke Consent |
|
is blocked by
|
Just-In-Time Notice & Updated Consent |
|
is blocked by
|
Hybrid / Composite Cryptography |
|
is blocked by
|
Cryptographic Application Programming Interface (API) Abstraction |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Implementation Validation & Interoperability Testing |
|
is blocked by
|
Flexible Technology Stack |
|
is blocked by
|
Defense-In-Depth (DiD) Architecture |
|
is blocked by
|
System Partitioning |
|
is blocked by
|
Application Partitioning |
|
is blocked by
|
Process Isolation |
|
is blocked by
|
Security Function Isolation |
|
is blocked by
|
Hardware Separation |
|
is blocked by
|
Thread Separation |
|
is blocked by
|
System Privileges Isolation |
|
is blocked by
|
Information In Shared Resources |
|
is blocked by
|
Fail Secure |
|
is blocked by
|
Fail Safe |
|
is blocked by
|
Non-Persistence |
|
is blocked by
|
Non-Persistent Information |
|
is blocked by
|
Information Output Filtering |
|
is blocked by
|
Memory Protection |
|
is blocked by
|
Honeypots |
|
is blocked by
|
Honeyclients |
|
is blocked by
|
Heterogeneity |
|
is blocked by
|
Virtualization Techniques |
|
is blocked by
|
Virtual Machine Images |
|
is blocked by
|
Randomness |
|
is blocked by
|
Non-Modifiable Executable Programs |
|
is blocked by
|
Clock Synchronization |
|
is blocked by
|
Application Container |
|
is blocked by
|
Privileged Environments |
|
is blocked by
|
Secure Practices Guidelines |
|
is blocked by
|
Security Operations Center (SOC) |
|
is blocked by
|
Security Orchestration, Automation, and Response (SOAR) |
|
is blocked by
|
Shadow Information Technology Detection |
|
is blocked by
|
Anti-Counterfeit Training |
|
is blocked by
|
Development Methods, Techniques & Processes |
|
is blocked by
|
Secure Settings By Default |
|
is blocked by
|
Developer Architecture & Design |
|
is blocked by
|
Secure Software Development Practices (SSDP) |
|
is blocked by
|
Supporting Toolchain |
|
is blocked by
|
Ongoing Product Security Support |
|
is blocked by
|
Integrity Mechanisms for Software / Firmware Updates |
|
is blocked by
|
Information Assurance Enabled Products |
|
is blocked by
|
Product Tampering and Counterfeiting (PTC) |
|
is blocked by
|
Customized Development of Critical Components |
|
is blocked by
|
Commercial Off-The-Shelf (COTS) Security Solutions |
|
is blocked by
|
Logging Syntax |
|
is blocked by
|
Physical Diagnostic & Test Interfaces |
|
is blocked by
|
Diagnostic & Test Interface Monitoring |
|
is blocked by
|
Input Data Validation |
|
is blocked by
|
Error Handling |
|
is blocked by
|
Minimizing Attack Surfaces |
|
is blocked by
|
Hybrid / Composite Cryptography |
|
is blocked by
|
Cryptographic Application Programming Interface (API) Abstraction |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Implementation Validation & Interoperability Testing |
|
is blocked by
|
Flexible Technology Stack |
|
is blocked by
|
Defense-In-Depth (DiD) Architecture |
|
is blocked by
|
System Partitioning |
|
is blocked by
|
Application Partitioning |
|
is blocked by
|
Process Isolation |
|
is blocked by
|
Security Function Isolation |
|
is blocked by
|
Hardware Separation |
|
is blocked by
|
Thread Separation |
|
is blocked by
|
System Privileges Isolation |
|
is blocked by
|
Information In Shared Resources |
|
is blocked by
|
Fail Secure |
|
is blocked by
|
Fail Safe |
|
is blocked by
|
Non-Persistence |
|
is blocked by
|
Non-Persistent Information |
|
is blocked by
|
Information Output Filtering |
|
is blocked by
|
Memory Protection |
|
is blocked by
|
Honeypots |
|
is blocked by
|
Pre-Established Secure Configurations |
|
is blocked by
|
Malware Testing Prior to Release |
|
is blocked by
|
Product Testing & Reviews |
|
is blocked by
|
Secure Development Environments |
|
is blocked by
|
Separation of Development, Testing and Operational Environments |
|
is blocked by
|
Library Privileges |
|
is blocked by
|
Access to Program Source Code |
|
is blocked by
|
Approved Code |
|
is blocked by
|
Archiving Software Releases |
|
is blocked by
|
Static Code Analysis |
|
is blocked by
|
Dynamic Code Analysis |
|
is blocked by
|
Malformed Input Testing |
|
is blocked by
|
Developer Configuration Management |
|
is blocked by
|
Software / Firmware Integrity Verification |
|
is blocked by
|
Hardware Integrity Verification |
|
is blocked by
|
Bills of Material (BOMs) |
|
is blocked by
|
Cryptographic Bill of Materials (CBOM) |
|
is blocked by
|
Hardware Bill of Materials (HBOM) |
|
is blocked by
|
Indentured Bill of Materials (IBOM) |
|
is blocked by
|
Software Bill of Materials (SBOM) |
|
is blocked by
|
Acquisition Strategies, Tools & Methods |
|
is blocked by
|
Supply Chain Risk Management (SCRM) |
|
is blocked by
|
Processes To Address Weaknesses or Deficiencies |
|
is blocked by
|
Limit Potential Harm |
|
is blocked by
|
Supplier Diversity |
|
is blocked by
|
Adequate Supply |
|
is blocked by
|
Third-Party Authentication Practices |
|
is blocked by
|
External Connectivity Requirements - Identification of Ports, Protocols & Services |
|
is blocked by
|
Managing Changes To Third-Party Services |
|
is blocked by
|
Technology Assets, Applications, Services and Data (TAASD) Disposition |
|
is blocked by
|
Software & Firmware Patching |
|
is blocked by
|
Automated Software & Firmware Updates |
|
is blocked by
|
Software Patch Integrity |
|
is blocked by
|
Automated Remediation Status |
|
is blocked by
|
Pre-Deployment Patch Testing |
|
is blocked by
|
Out-of-Cycle Patching |
|
is blocked by
|
Vulnerability Scanning |
|
is blocked by
|
Update Vulnerability Scanning Tools |
|
is blocked by
|
External Vulnerability Assessment |
|
is blocked by
|
Internal Vulnerability Assessment |
|
is blocked by
|
Correlate Scanning Information |
|
is blocked by
|
Penetration Testing |
|
is blocked by
|
Independent Penetration Agent or Team |
|
is blocked by
|
Red Team Exercises |
|
is blocked by
|
Web Application Framework |
|
is blocked by
|
Pre-Established Secure Configurations |
|
is blocked by
|
Malware Testing Prior to Release |
|
is blocked by
|
Product Testing & Reviews |
|
is blocked by
|
Secure Development Environments |
|
is blocked by
|
Separation of Development, Testing and Operational Environments |
|
is blocked by
|
Library Privileges |
|
is blocked by
|
Access to Program Source Code |
|
is blocked by
|
Approved Code |
|
is blocked by
|
Archiving Software Releases |
|
is blocked by
|
Static Code Analysis |
|
is blocked by
|
Dynamic Code Analysis |
|
is blocked by
|
Malformed Input Testing |
|
is blocked by
|
Developer Configuration Management |
|
is blocked by
|
Software / Firmware Integrity Verification |
|
is blocked by
|
Hardware Integrity Verification |
|
is blocked by
|
Bills of Material (BOMs) |
|
is blocked by
|
Cryptographic Bill of Materials (CBOM) |
|
is blocked by
|
Hardware Bill of Materials (HBOM) |
|
is blocked by
|
Indentured Bill of Materials (IBOM) |
|
is blocked by
|
Software Bill of Materials (SBOM) |
|
is blocked by
|
Acquisition Strategies, Tools & Methods |
|
is blocked by
|
Supply Chain Risk Management (SCRM) |
|
is blocked by
|
Processes To Address Weaknesses or Deficiencies |
|
is blocked by
|
Limit Potential Harm |
|
is blocked by
|
Supplier Diversity |
|
is blocked by
|
Adequate Supply |
|
is blocked by
|
Third-Party Authentication Practices |
|
is blocked by
|
External Connectivity Requirements - Identification of Ports, Protocols & Services |
|
is blocked by
|
Pre-Established Secure Configurations |
|
is blocked by
|
Malware Testing Prior to Release |
|
is blocked by
|
Product Testing & Reviews |
|
is blocked by
|
Secure Development Environments |
|
is blocked by
|
Separation of Development, Testing and Operational Environments |
|
is blocked by
|
Library Privileges |
|
is blocked by
|
Access to Program Source Code |
|
is blocked by
|
Approved Code |
|
is blocked by
|
Archiving Software Releases |
|
is blocked by
|
Static Code Analysis |
|
is blocked by
|
Dynamic Code Analysis |
|
is blocked by
|
Malformed Input Testing |
|
is blocked by
|
Developer Configuration Management |
|
is blocked by
|
Software / Firmware Integrity Verification |
|
is blocked by
|
Hardware Integrity Verification |
|
is blocked by
|
Bills of Material (BOMs) |
|
is blocked by
|
Cryptographic Bill of Materials (CBOM) |
|
is blocked by
|
Hardware Bill of Materials (HBOM) |
|
is blocked by
|
Indentured Bill of Materials (IBOM) |
|
is blocked by
|
Software Bill of Materials (SBOM) |
|
is blocked by
|
Acquisition Strategies, Tools & Methods |
|
is blocked by
|
Supply Chain Risk Management (SCRM) |
|
is blocked by
|
Processes To Address Weaknesses or Deficiencies |
|
is blocked by
|
Limit Potential Harm |
|
is blocked by
|
Supplier Diversity |
|
is blocked by
|
Adequate Supply |
|
is blocked by
|
Third-Party Authentication Practices |
|
is blocked by
|
External Connectivity Requirements - Identification of Ports, Protocols & Services |