The organization loses market position, strategic differentiation, intellectual advantage or customer preference because a control deficiency
(1) Exposes data;
(2) Disrupts performance; and/or
(3) Weakens stakeholder confidence.

Propojené úkoly

Vazby
Typ vazby Úkol
is blocked by Security, Compliance & Resilience Governance Policy
is blocked by Security, Compliance & Resilience Program (SCRP)
is blocked by Publishing Security, Compliance & Resilience Documentation
is blocked by Periodic Review & Update of Security, Compliance & Resilience Program
is blocked by Exception Management
is blocked by Defining Business Context & Mission
is blocked by Materiality Determination
is blocked by High Value Assets (HVAs)
is blocked by Steering Committee & Program Oversight
is blocked by Business As Usual (BAU) Security, Compliance & Resilience Practices
is blocked by Operationalizing Security, Compliance & Resilience Capabilities
is blocked by Measures of Performance
is blocked by Forced Technology Transfer (FTT)
is blocked by State-Sponsored Espionage
is blocked by Contacts With Authorities
is blocked by Artificial Intelligence & Autonomous Technologies Policy
is blocked by Artificial Intelligence (AI) & Autonomous Technologies Governance
is blocked by AI & Autonomous Technologies Mission and Goals Definition
is blocked by AI & Autonomous Technologies Value Sustainment
is blocked by AI & Autonomous Technologies Context Definition
is blocked by AI & Autonomous Technologies-Related Legal Requirements Identification
is blocked by Assigned Responsibilities for AI & Autonomous Technologies
is blocked by Trustworthy AI & Autonomous Technologies
is blocked by Situational Awareness of AI & Autonomous Technologies In Use
is blocked by AI Model & Agent Inventory & Lifecycle Management
is blocked by Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization
is blocked by AI & Autonomous Technologies Internal Controls
is blocked by AI & Autonomous Technologies Impact Assessment
is blocked by AI & Autonomous Technologies Risk Profiling
is blocked by AI & Autonomous Technologies Risk Mapping
is blocked by AI & Autonomous Technologies Risk Management Decisions
is blocked by AI & Autonomous Technologies Likelihood & Impact Risk Analysis
is blocked by AI & Autonomous Technologies High Risk Designations
is blocked by AI Threat Modeling & Risk Assessment
is blocked by Novel Risk Assessment Methods & Technologies
is blocked by AI & Autonomous Technologies Risk Response
is blocked by AI & Autonomous Technologies Risk Tracking Approaches
is blocked by AI & Autonomous Technologies Business Case
is blocked by AI & Autonomous Technologies Potential Benefits Analysis
is blocked by AI & Autonomous Technologies Potential Costs Analysis
is blocked by Model & AI Agent Documentation
is blocked by AI & Autonomous Technologies Output Marking
is blocked by Release Owner Gate (ROG) For AI-Augmented Content
is blocked by AI & Autonomous Technologies Output Filtering
is blocked by Human Moderation of AI & Autonomous Technologies-Generated Content
is blocked by AI & Autonomous Technologies Intellectual Property Infringement Protections
is blocked by Data Source Identification
is blocked by AI & Autonomous Technologies Harm Prevention
is blocked by AI & Autonomous Technologies Human Subject Protections
is blocked by AI & Autonomous Technologies Environmental Impact & Sustainability
is blocked by Previously Unknown AI & Autonomous Technologies Threats & Risks
is blocked by AI & Autonomous Technologies Conformity
is blocked by Manipulative or Deceptive Techniques
is blocked by Materially Distorting Behaviors
is blocked by Social Scoring
is blocked by AI & Autonomous Technologies Requirements Definitions
is blocked by AI & Autonomous Technologies Fairness & Bias
is blocked by AI & Autonomous Technologies Knowledge Limits
is blocked by AI & Autonomous Technologies Development Practices
is blocked by AI & Autonomous Technologies Implementation Tasks Definition
is blocked by Real World Testing of AI & Autonomous Technologies
is blocked by AI & Autonomous Technologies Testing Techniques
is blocked by Generative Artificial Intelligence (GAI) Identification
is blocked by Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV)
is blocked by AI TEVV Trustworthiness Assessment
is blocked by AI TEVV Tools
is blocked by AI TEVV Trustworthiness Demonstration
is blocked by AI TEVV Results Evaluation
is blocked by AI TEVV Effectiveness
is blocked by AI TEVV Reporting
is blocked by AI & Autonomous Technologies Residual Risks
is blocked by AI & Autonomous Technologies Viability Decisions
is blocked by AI TEVV Post-Deployment Monitoring
is blocked by Updating AI & Autonomous Technologies
is blocked by Technology Assets, Applications, Services and/or Data (TAASD) Criticality Ratings
is blocked by Asset-Service Dependencies
is blocked by Stakeholder Identification & Involvement
is blocked by Comprehensive Asset Inventory Management
is blocked by Asset Discovery
is blocked by Automated Unauthorized Component Detection
is blocked by Prohibited Technology Assets, Applications and/or Services (TAAS)
is blocked by Software Licensing Restrictions
is blocked by Provenance
is blocked by Asset Categorization
is blocked by High-Risk Technology Assets, Applications and/or Services (TAAS) Categorization
is blocked by Asset Scope Classification
is blocked by Network Diagrams & Data Flow Diagrams (DFDs)
is blocked by Removal of Assets
is blocked by Use of Personal Devices
is blocked by Use of Third-Party Devices
is blocked by Bring Your Own Device (BYOD) Usage
is blocked by Usage Parameters
is blocked by Roots of Trust Protection
is blocked by Telecommunications Equipment
is blocked by Travel-Only Devices
is blocked by Business Continuity & Disaster Recovery Policy
is blocked by Business Continuity Management System (BCMS)
is blocked by Defined Operational Resilience Requirements
is blocked by Recovery Time / Point Objectives (RTO / RPO)
is blocked by Recovery Operations Criteria
is blocked by Recovery Operations Communications
is blocked by Alternate Communications Channels
is blocked by Resume All Missions & Business Functions
is blocked by Continue Essential Mission & Business Functions
is blocked by Resume Essential Missions & Business Functions
is blocked by Contingency Training
is blocked by Simulated Events
is blocked by Automated Training Environments
is blocked by Contingency Plan Testing & Exercises
is blocked by Coordinated Testing with Related Plans
is blocked by Contingency Plan Testing For Alternate Storage & Processing Sites
is blocked by Contingency Plan Root Cause Analysis (RCA) & Lessons Learned
is blocked by Alternate Storage Site
is blocked by Separation from Primary Storage Site
is blocked by Primary Storage Site Accessibility
is blocked by Alternate Processing Site
is blocked by Separation from Primary Processing Site
is blocked by Preparation for Use
is blocked by Inability to Return to Primary Site
is blocked by Capacity & Performance Planning Policy
is blocked by Capacity & Performance Management
is blocked by Capacity Planning
is blocked by Change Management Policy
is blocked by Change Management Program
is blocked by Dual Authorization for Changes To Critical / Sensitive Technology Assets, Applications and/or Services (TAAS)
is blocked by Dual Approval For High-Impact Environments
is blocked by Security, Compliance & Resilience Representative for Asset Lifecycle Changes
is blocked by Security Impact Analysis for Changes
is blocked by Test, Validate & Document Changes
is blocked by Cloud Security Policy
is blocked by Cloud Services
is blocked by Cloud Infrastructure Offboarding
is blocked by Cloud Security Architecture
is blocked by Cloud Infrastructure Security Subnet
is blocked by Standardized Virtualization Formats
is blocked by Sensitive Data In Public Cloud Providers
is blocked by Hosted Technology Assets, Applications and/or Services (TAAS)
is blocked by Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS)
is blocked by Compliance Policy
is blocked by Statutory, Regulatory & Contractual Compliance
is blocked by Compliance Scope
is blocked by Conformity Monitoring
is blocked by Functional Review Of Security, Compliance & Resilience Controls
is blocked by Non-Conformity Oversight
is blocked by Executive Leadership Oversight of Security, Compliance & Resilience Controls
is blocked by Internal Audit Function
is blocked by Independent Assessors
is blocked by Assessment Methods
is blocked by Assessment Rigor
is blocked by Configuration Management Policy
is blocked by Configuration Management Program
is blocked by Least Functionality
is blocked by Baseline Tailoring
is blocked by Development & Test Environment Configurations
is blocked by Secure Baseline Configurations
is blocked by Account Lockout
is blocked by Concurrent Session Control
is blocked by Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas
is blocked by Approved Configuration Deviations
is blocked by Periodic Configuration Reviews
is blocked by Respond To Unauthorized Changes
is blocked by Continuous Monitoring Policy
is blocked by Continuous Monitoring
is blocked by Event Log & Security-Relevant Telemetry Monitoring
is blocked by Centralized Management of Event Log & Security-Relevant Telemetry Content
is blocked by Analyze and Prioritize Monitoring Requirements
is blocked by Audit Level Adjustments
is blocked by System Generated Event Logs & Security-Relevant Telemetry
is blocked by Centralized Collection of Event Logs & Security-Relevant Telemetry
is blocked by Centralized Event Log & Security-Relevant Telemetry Review & Analysis
is blocked by Event Log & Security-Relevant Telemetry Analysis & Triage
is blocked by Monitoring Reporting
is blocked by Alert Threshold Tuning
is blocked by Correlate Monitoring Information
is blocked by Integration of Scanning & Other Monitoring Information
is blocked by Correlation with Physical Monitoring
is blocked by Time Stamps
is blocked by Protection of Event Logs & Security-Relevant Telemetry
is blocked by Event Log & Security-Relevant Telemetry Retention
is blocked by Anomalous Behavior
is blocked by Unusual Transactions
is blocked by Monitoring for Indicators of Compromise (IOC)
is blocked by Deactivated Account Activity
is blocked by Individuals Posing Greater Risk
is blocked by Cryptographic Protections Policy
is blocked by Use of Cryptographic Controls
is blocked by Cryptographic Management
is blocked by Cryptographic Cipher Suites and Protocols Inventory
is blocked by Encrypting Data In Transit
is blocked by Integrity of Data In Transit
is blocked by Encrypting Data At Rest
is blocked by Database Encryption
is blocked by Public Key Infrastructure (PKI)
is blocked by Public Key Infrastructure (PKI) Availability
is blocked by Cryptographic Key Management
is blocked by Transmission of Cybersecurity & Data Protection Attributes
is blocked by Certificate Authorities
is blocked by Certificate Monitoring
is blocked by Data Classification & Handling Policy
is blocked by Data Protection
is blocked by Sensitive / Regulated Data Governance
is blocked by Data Catalog
is blocked by Data & Asset Classification
is blocked by Highest Classification Level
is blocked by Sensitive Data Inventories
is blocked by Periodic Scans for Sensitive / Regulated Data
is blocked by Data Stewardship
is blocked by Defining Access Authorizations for Sensitive / Regulated Data
is blocked by Sensitive / Regulated Data Protection
is blocked by Restrict Sensitive / Regulated Data Access To Authorized Individuals
is blocked by Limitations on Use & Distribution of Sensitive / Regulated Data
is blocked by Sensitive / Regulated Data Access Mapping
is blocked by Sensitive / Regulated Media Records
is blocked by Media Marking
is blocked by Masking Displayed Sensitive / Regulated Data
is blocked by Media Storage
is blocked by Data Storage Location Reviews
is blocked by Physically Secure All Media Containing Sensitive / Regulated Data
is blocked by Storing Authentication Data
is blocked by Media Transportation
is blocked by Digital & Non-Digital Media Disposal
is blocked by Digital Media Sanitization
is blocked by Sanitization of Sensitive / Regulated Data
is blocked by Digital Media Sanitization Documentation
is blocked by Digital Media Sanitization Equipment Testing
is blocked by Digital Media Use Restrictions
is blocked by Portable Storage Devices
is blocked by Removable Media Security
is blocked by Use of External Technology Assets, Applications and/or Services (TAAS)
is blocked by Limits of Authorized Use To Process, Store and/or Transmit Data
is blocked by Protecting Sensitive / Regulated Data on External Technology Assets, Applications and/or Services (TAAS)
is blocked by Non-Organizationally Owned Technology Assets, Applications and/or Services (TAAS)
is blocked by Information Search & Retrieval
is blocked by Electronic Discovery (eDiscovery)
is blocked by Publicly Accessible Content
is blocked by Data Mining Protection
is blocked by Ad-Hoc Transfers
is blocked by Transfer Authorizations
is blocked by Media & Data Retention
is blocked by Embedded Technology Policy
is blocked by Embedded Technology Security Program
is blocked by Separate Operating Environments For Embedded Technologies
is blocked by Embedded Technology Inventory Management
is blocked by Internet of Things (IOT)
is blocked by Operational Technology (OT)
is blocked by Interface Security
is blocked by Embedded Technology Configuration Monitoring
is blocked by Remote Management of Embedded Technologies
is blocked by Safety Assessment
is blocked by Endpoint Security Policy
is blocked by Endpoint Device Management (EDM)
is blocked by Endpoint Protection Mechanisms
is blocked by Centralized Management of Endpoint Protection Mechanisms
is blocked by Automatic Endpoint Protection Mechanism Updates
is blocked by Malicious Code Protection (Antimalware)
is blocked by Always On Antimalware Protection
is blocked by Heuristic / Nonsignature-Based Malware Detection
is blocked by Antimalware Protection Mechanism Testing
is blocked by Documented Endpoint Security Protection Measures
is blocked by Software Firewall
is blocked by Unified Endpoint Device Management (UEDM)
is blocked by Endpoint Detection & Response (EDR)
is blocked by Extended Detection & Response (XDR)
is blocked by Endpoint File Integrity Monitoring (FIM)
is blocked by Host Intrusion Detection and Prevention Systems (HIDS / HIPS)
is blocked by Mobile Code
is blocked by Collaborative Computing Devices
is blocked by Collaborative Computing Capability Disabling / Removal In Secure Work Areas
is blocked by Explicitly Indicate Current Participants
is blocked by Participant Identity Verification
is blocked by Participant Connection Management
is blocked by Explicit Indication Of Use
is blocked by Human Resources Security Policy
is blocked by Human Resources Security Management
is blocked by Position Categorization
is blocked by Users With Elevated Privileges
is blocked by Competency Requirements for Security, Compliance & Resilience-Related Positions
is blocked by Defined Roles & Responsibilities
is blocked by Assigned Roles & Responsibilities Awareness
is blocked by Personnel Screening
is blocked by Roles With Special Protection Measures
is blocked by Citizenship Requirements
is blocked by Terms of Employment
is blocked by Rules of Behavior
is blocked by Social Media & Social Networking Restrictions
is blocked by Access Agreements
is blocked by Confidentiality Agreements
is blocked by Onboarding, Transferring & Offboarding Personnel
is blocked by Probationary Periods
is blocked by Personnel Sanctions
is blocked by Personnel Transfer
is blocked by Personnel Termination
is blocked by Automated Employment Status Notifications
is blocked by Third-Party Personnel
is blocked by Separation of Duties (SoD)
is blocked by Incompatible Roles
is blocked by Identification & Authentication Policy
is blocked by Identity & Access Management (IAM)
is blocked by Authenticate, Authorize and Audit (AAA)
is blocked by Replay-Resistant Authentication
is blocked by Retain Access Records
is blocked by Identity Providers (IdP) & Authorization Servers
is blocked by User Provisioning & De-Provisioning
is blocked by Change of Roles & Duties
is blocked by Termination of Employment
is blocked by Identity Proofing (Identity Verification)
is blocked by In-Person or Trusted Third-Party Registration
is blocked by Identity Evidence
is blocked by Role-Based Access Control (RBAC)
is blocked by Attribute-Based Access Control (ABAC)
is blocked by Real-Time Access Decisions
is blocked by Access Profile Rules
is blocked by Account Management
is blocked by Management Approval For New or Changed Accounts
is blocked by Management Approval For Privileged Accounts
is blocked by Privileged Account Management (PAM)
is blocked by Privileged Account Inventories
is blocked by Privileged Account Separation
is blocked by Dedicated Privileged Account
is blocked by Privileged Command Execution
is blocked by Manual Override
is blocked by Emergency Accounts
is blocked by Periodic Review of Individual & Service Account Privileges
is blocked by System Account Reviews
is blocked by User Identity (ID) Management
is blocked by Standardized Identifier Management (User Names)
is blocked by Employment Status Identification
is blocked by Citizenship Identification
is blocked by Authenticator Management
is blocked by Password-Based Authentication
is blocked by Automated Support For Password Strength
is blocked by Password Managers
is blocked by Passkeys
is blocked by Biometric Authentication
is blocked by PKI-Based Authentication
is blocked by Hardware Token-Based Authentication
is blocked by Authenticator Feedback
is blocked by Restrictions on Shared Groups / Accounts
is blocked by Group Authentication
is blocked by User Responsibilities for Account Management
is blocked by Credential Sharing
is blocked by Reference Monitor
is blocked by Access Enforcement
is blocked by Access To Sensitive / Regulated Data
is blocked by Use of Privileged Utility Programs
is blocked by Dedicated Administrative Machines
is blocked by Dual Authorization for Privileged Commands
is blocked by Incident Response Policy
is blocked by Incident Response Operations
is blocked by Continuous Incident Response Improvements
is blocked by Incident Classification & Prioritization
is blocked by Indicators of Compromise (IOC)
is blocked by Incident Handling
is blocked by Correlation with External Organizations
is blocked by Automated Incident Handling Processes
is blocked by Incident Response Plan (IRP)
is blocked by Incident Response Capabilities Testing
is blocked by Incident Response Capabilities Testing Coordination with Related Plans
is blocked by Incident Response Training
is blocked by Simulated Incidents
is blocked by Automated Incident Response Training Environments
is blocked by Integrated Security Incident Response Team (ISIRT)
is blocked by Public Relations & Reputation Repair
is blocked by Chain of Custody & Forensics
is blocked by Root Cause Analysis (RCA) & Lessons Learned
is blocked by Regulatory & Law Enforcement Contacts
is blocked by Incident Stakeholder Reporting
is blocked by Information Assurance Policy
is blocked by Information Assurance (IA) Operations
is blocked by Assessment Boundaries
is blocked by Control Validation Testing (CVT)
is blocked by Specialized Assessments
is blocked by Assessor Independence
is blocked by Third-Party Assessment Reciprocity
is blocked by Maintenance Policy
is blocked by Maintenance Operations
is blocked by Controlled Maintenance
is blocked by Timely Maintenance
is blocked by Preventative Maintenance
is blocked by Predictive Maintenance
is blocked by Maintenance Validation
is blocked by Maintenance Monitoring
is blocked by Prevent Unauthorized Removal
is blocked by Automated Maintenance Activities
is blocked by Mobile Device Management Policy
is blocked by Centralized Management Of Mobile Devices
is blocked by Restricting Access To Authorized Technology Assets, Applications and/or Services (TAAS)
is blocked by Full Device & Container-Based Encryption
is blocked by Separate Mobile Device Profiles
is blocked by Personally-Owned Mobile Devices
is blocked by Organization-Owned Mobile Devices
is blocked by Mobile Device Geofencing
is blocked by Mobile Device Tampering
is blocked by Network Security Policy
is blocked by Network Security Controls (NSC)
is blocked by Boundary Protection
is blocked by Limit Network Connections
is blocked by External Telecommunications Services
is blocked by Direct Internet Access Restrictions
is blocked by Prevent Unauthorized Exfiltration
is blocked by Protocol Compliance Enforcement
is blocked by Domain Name Verification
is blocked by Bandwidth Control
is blocked by Data Flow Enforcement – Access Control Lists (ACLs)
is blocked by Deny Traffic by Default & Allow Traffic by Exception
is blocked by Human Reviews
is blocked by Interconnection Security Agreements (ISAs)
is blocked by External System Connections
is blocked by Internal System Connections
is blocked by Network Segmentation (macrosegmentation)
is blocked by Security Management Subnets
is blocked by Out-of-Band Channels
is blocked by Separate Subnets To Isolate Functions
is blocked by Sensitive / Regulated Data Enclave (Secure Zone)
is blocked by Segregation From Enterprise Services
is blocked by Network Device Plane Segmentation
is blocked by Virtual Local Area Network (VLAN) Separation
is blocked by Software Defined Networking (SDN)
is blocked by Domain Name Service (DNS) Resolution
is blocked by Zero Trust Architecture (ZTA)
is blocked by Policy Decision Point (PDP)
is blocked by Network Access Control (NAC)
is blocked by Authenticated Proxy
is blocked by Route Internal Traffic to Proxy Servers
is blocked by Route Privileged Network Access
is blocked by Application Proxy
is blocked by Visibility of Encrypted Communications
is blocked by Content Check for Encrypted Data
is blocked by Physical & Environmental Security Policy
is blocked by Physical & Environmental Protections
is blocked by Physical Security Plan (PSP)
is blocked by Zone-Based Physical Security
is blocked by Alternate Work Site
is blocked by Physical Access Authorizations
is blocked by Role-Based Physical Access
is blocked by Dual Authorization for Physical Access
is blocked by Physical Access Control
is blocked by Physical Access Device Inventories
is blocked by Controlled Ingress & Egress Points
is blocked by Physical Access Logs
is blocked by Physical Security of Offices, Rooms & Facilities
is blocked by Working in Secure Areas
is blocked by Access To Critical Systems
is blocked by Lockable Physical Casings
is blocked by Monitoring Physical Access
is blocked by Visitor Control
is blocked by Equipment Siting & Protection
is blocked by Component Marking
is blocked by Asset Monitoring and Tracking
is blocked by Data Privacy Policy
is blocked by Data Privacy Program
is blocked by Data Privacy Accountability Structure
is blocked by Chief Privacy Officer (CPO)
is blocked by Data Protection Officer (DPO)
is blocked by Personal Data Process Manager (PDPM)
is blocked by Data Fiduciary
is blocked by Privacy-Aware Design
is blocked by Documenting Data Processing Activities
is blocked by Personal Data (PD) Lineage
is blocked by Personal Data (PD) Categories
is blocked by Inventory of Personal Data (PD)
is blocked by Personal Data (PD) Inventory Automation Support
is blocked by Updating Personal Data (PD) Process
is blocked by Reasonable Data Privacy Practices
is blocked by Security of Personal Data (PD)
is blocked by Personal Data (PD) Control Testing, Training & Monitoring
is blocked by Authority To Collect, Process, Store & Share Personal Data (PD)
is blocked by Product or Service Delivery Restrictions
is blocked by Data Privacy Requirements for Contractors & Service Providers
is blocked by Binding Corporate Rules (BCR)
is blocked by Limiting Personal Data (PD) Disclosures
is blocked by Accounting of Disclosures
is blocked by Notification of Disclosure Requests To Data Subject
is blocked by Financial Incentives For Personal Data (PD)
is blocked by Notice of Financial Incentive
is blocked by Dissemination of Data Privacy Program Information
is blocked by Data Privacy Notice
is blocked by Privacy Notice Formatting
is blocked by Conspicuous Link To Data Privacy Notice
is blocked by Security, Compliance & Resilience Protection Portfolio Management
is blocked by Security, Compliance & Resilience Resource Management
is blocked by Secure Development Life Cycle (SDLC) Management
is blocked by Risk Management Policy
is blocked by Risk Management Program
is blocked by Risk Management Resourcing
is blocked by Risk Culture
is blocked by Risk Framing
is blocked by Material Risks
is blocked by Executive Leadership Approval For Managing Material Risk
is blocked by Documented Justification For Material Risk Management Decisions
is blocked by Risk-Based Security Categorization
is blocked by Business Impact Analysis (BIA)
is blocked by Risk Identification
is blocked by Risk Catalog
is blocked by Risk Owner
is blocked by Risk Assessment Methodology
is blocked by Secure Engineering & Architecture Policy
is blocked by Security, Compliance & Resilience Aware Design
is blocked by Flexible Technology Stack
is blocked by Secure Architecture Principles
is blocked by Secure Engineering Principles
is blocked by Defense-In-Depth (DiD) Architecture
is blocked by Fail Secure
is blocked by Information Output Filtering
is blocked by Heterogeneity
is blocked by Security Operations Policy
is blocked by Security Operations Center (SOC)
is blocked by Security Awareness & Training Policy
is blocked by Security, Compliance & Resilience-Minded Workforce
is blocked by Maintaining Workforce Development Relevancy
is blocked by Security, Compliance & Resilience Awareness Training
is blocked by Role-Based Security, Compliance & Resilience Training
is blocked by Technology Development & Acquisition Policy
is blocked by Technology Development & Acquisition
is blocked by Development Methods, Techniques & Processes
is blocked by Software Assurance Maturity Model (SAMM)
is blocked by Developer Architecture & Design
is blocked by Programming Language Selection
is blocked by Secure Software Development Practices (SSDP)
is blocked by Criticality Analysis During Development
is blocked by Threat Modeling
is blocked by Product Management
is blocked by Product Conformity Governance
is blocked by Continuous Monitoring Plan
is blocked by Ongoing Product Security Support
is blocked by Integrity Mechanisms for Software / Firmware Updates
is blocked by Software Release Integrity Verification
is blocked by Information Assurance Enabled Products
is blocked by Disclosure of Vulnerabilities
is blocked by Technical Documentation Artifacts
is blocked by Product-Specific Risk Assessment Artifacts
is blocked by Product Tampering and Counterfeiting (PTC)
is blocked by Customized Development of Critical Components
is blocked by DevSecOps
is blocked by Minimum Viable Product (MVP) Security Requirements
is blocked by Input Data Validation
is blocked by Minimizing Attack Surfaces
is blocked by Product Testing & Reviews
is blocked by Security, Compliance & Resilience Representatives For Product Changes
is blocked by Secure Development Environments
is blocked by Library Privileges
is blocked by Security, Compliance & Resilience Testing Throughout Development
is blocked by Static Code Analysis
is blocked by Use of Live Data
is blocked by Developer Screening
is blocked by Developer Configuration Management
is blocked by Hardware Integrity Verification
is blocked by Bills of Material (BOMs)
is blocked by Third-Party Management Policy
is blocked by Third-Party Management
is blocked by Acquisition Strategies, Tools & Methods
is blocked by Supply Chain Risk Management (SCRM)
is blocked by Processes To Address Weaknesses or Deficiencies
is blocked by Limit Potential Harm
is blocked by Security, Compliance & Resilience Outsourcing Limitations
is blocked by Outsourcing Non-Essential Functions or Services
is blocked by Supplier Diversity
is blocked by Adequate Supply
is blocked by Third-Party Inventories
is blocked by Third-Party Criticality Assessments
is blocked by Third-Party Risk Assessments & Approvals
is blocked by Responsible, Accountable, Supportive, Consulted & Informed (RASCI) Matrix
is blocked by Threat Management Policy
is blocked by Dynamic Threat Awareness
is blocked by Threat Intelligence Feeds
is blocked by Threat Intelligence Reporting
is blocked by Material Threats
is blocked by Indicators of Exposure (IOE)
is blocked by Vulnerability & Patch Management Policy
is blocked by Vulnerability & Patch Management Program (VPMP)
is blocked by Attack Surface Scope
is blocked by Vulnerability Exploitation Analysis
is blocked by Vulnerability Ranking
is blocked by Vulnerability Remediation Process
is blocked by Centralized Management of Flaw Remediation Processes
is blocked by Continuous Vulnerability Remediation Activities
is blocked by Known Exploited Vulnerabilities (KEV) Mitigations
is blocked by Time To Remediate / Benchmarks For Corrective Action
is blocked by Pre-Deployment Patch Testing
is blocked by Web Security Policy
is blocked by Web Security
is blocked by Web Application Framework
is blocked by Unauthorized Code On Web Pages
is blocked by Client-Facing Web Services
is blocked by Strong Customer Authentication (SCA)
is blocked by Web Application Input Validation & Sanitization
is blocked by Secure Web Traffic
is blocked by Web Application Output Encoding
is blocked by Web Browser Security
is blocked by Website Change Detection
is blocked by Publicly Accessible Content Reviews
is blocked by Virtual Data Room (VDR)
is blocked by AI & Autonomous Technologies Continuous Improvements
is blocked by Prohibit Training
is blocked by Cross-Organizational Monitoring
is blocked by Code Names
is blocked by Data Rights Management (DRM)
is blocked by Data Loss Prevention (DLP)
is blocked by Conceal / Randomize Communications
is blocked by Personnel Searches
is blocked by Conflict of Interests
is blocked by Technical Surveillance Countermeasures Security
is blocked by Conflict of Interests
is blocked by Conflict of Interests