Personnel are more likely to:
(1) Make unsafe decisions;
(2) Fall victim to social engineering;
(3) Mishandle data;
(4) Violate requirements; and/or
(5) Fail to recognize and report security or privacy concerns.

Propojené úkoly

Vazby
Typ vazby Úkol
is blocked by Security, Compliance & Resilience Governance Policy
is blocked by Security, Compliance & Resilience Program (SCRP)
is blocked by Centralized Management of Security, Compliance & Resilience Controls
is blocked by Publishing Security, Compliance & Resilience Documentation
is blocked by Periodic Review & Update of Security, Compliance & Resilience Program
is blocked by Exception Management
is blocked by Assigned Security, Compliance & Resilience Responsibilities
is blocked by Stakeholder Accountability Structure
is blocked by Authoritative Chain of Command
is blocked by Materiality Determination
is blocked by State-Sponsored Espionage
is blocked by Contacts With Authorities
is blocked by Assurance
is blocked by Artificial Intelligence & Autonomous Technologies Policy
is blocked by Assigned Responsibilities for AI & Autonomous Technologies
is blocked by Standardized Naming Convention
is blocked by Asset Inventories
is blocked by Identify Critical Assets
is blocked by Prohibited Technology Assets, Applications and/or Services (TAAS)
is blocked by Software Licensing Restrictions
is blocked by Asset Scope Classification
is blocked by Removal of Assets
is blocked by Use of Personal Devices
is blocked by Use of Third-Party Devices
is blocked by Bring Your Own Device (BYOD) Usage
is blocked by Usage Parameters
is blocked by Roots of Trust Protection
is blocked by Telecommunications Equipment
is blocked by Travel-Only Devices
is blocked by Operational Resilience Capabilities
is blocked by Business Continuity & Disaster Recovery (BC/DR) Plans
is blocked by Inability to Return to Primary Site
is blocked by Compliance Policy
is blocked by Statutory, Regulatory & Contractual Compliance
is blocked by Executive Leadership Oversight of Security, Compliance & Resilience Controls
is blocked by Internal Audit Function
is blocked by Independent Assessors
is blocked by Assessment Methods
is blocked by Secure Baseline Configurations
is blocked by Account Lockout
is blocked by Concurrent Session Control
is blocked by Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas
is blocked by Approved Configuration Deviations
is blocked by Monitoring for Indicators of Compromise (IOC)
is blocked by Deactivated Account Activity
is blocked by Individuals Posing Greater Risk
is blocked by Data Classification & Handling Policy
is blocked by Data Protection
is blocked by Sensitive / Regulated Data Governance
is blocked by Data Catalog
is blocked by Sensitive / Regulated Data Protection
is blocked by Restrict Sensitive / Regulated Data Access To Authorized Individuals
is blocked by Endpoint Security Policy
is blocked by Endpoint Device Management (EDM)
is blocked by Endpoint Protection Mechanisms
is blocked by Centralized Management of Endpoint Protection Mechanisms
is blocked by Automatic Endpoint Protection Mechanism Updates
is blocked by Malicious Code Protection (Antimalware)
is blocked by Always On Antimalware Protection
is blocked by Collaborative Computing Capability Disabling / Removal In Secure Work Areas
is blocked by Explicitly Indicate Current Participants
is blocked by Human Resources Security Policy
is blocked by Human Resources Security Management
is blocked by Position Categorization
is blocked by Users With Elevated Privileges
is blocked by Competency Requirements for Security, Compliance & Resilience-Related Positions
is blocked by Defined Roles & Responsibilities
is blocked by Assigned Roles & Responsibilities Awareness
is blocked by Personnel Screening
is blocked by Roles With Special Protection Measures
is blocked by Citizenship Requirements
is blocked by Terms of Employment
is blocked by Rules of Behavior
is blocked by Social Media & Social Networking Restrictions
is blocked by Access Agreements
is blocked by Confidentiality Agreements
is blocked by Onboarding, Transferring & Offboarding Personnel
is blocked by Probationary Periods
is blocked by Personnel Sanctions
is blocked by Personnel Transfer
is blocked by Personnel Termination
is blocked by Automated Employment Status Notifications
is blocked by Third-Party Personnel
is blocked by Separation of Duties (SoD)
is blocked by Incompatible Roles
is blocked by Identity Evidence
is blocked by Passkeys
is blocked by PKI-Based Authentication
is blocked by Hardware Token-Based Authentication
is blocked by Incident Response Policy
is blocked by Incident Response Operations
is blocked by Indicators of Compromise (IOC)
is blocked by Incident Handling
is blocked by Correlation with External Organizations
is blocked by Automated Incident Handling Processes
is blocked by Incident Response Plan (IRP)
is blocked by Incident Response Capabilities Testing
is blocked by Incident Response Capabilities Testing Coordination with Related Plans
is blocked by Chain of Custody & Forensics
is blocked by Predictive Maintenance
is blocked by Mobile Device Management Policy
is blocked by Centralized Management Of Mobile Devices
is blocked by Personally-Owned Mobile Devices
is blocked by Organization-Owned Mobile Devices
is blocked by Domain Name Service (DNS) Resolution
is blocked by Physical & Environmental Security Policy
is blocked by Physical Access Authorizations
is blocked by Data Privacy Policy
is blocked by Data Privacy Program
is blocked by Data Privacy Accountability Structure
is blocked by Chief Privacy Officer (CPO)
is blocked by Data Protection Officer (DPO)
is blocked by Personal Data Process Manager (PDPM)
is blocked by Data Fiduciary
is blocked by Privacy-Aware Design
is blocked by Documenting Data Processing Activities
is blocked by Personal Data (PD) Lineage
is blocked by Updating Personal Data (PD) Process
is blocked by Data Privacy Requirements for Contractors & Service Providers
is blocked by Security, Compliance & Resilience In Project Management
is blocked by Risk Management Policy
is blocked by Risk Management Program
is blocked by Risk Management Resourcing
is blocked by Risk Culture
is blocked by Risk Framing
is blocked by Material Risks
is blocked by Executive Leadership Approval For Managing Material Risk
is blocked by Documented Justification For Material Risk Management Decisions
is blocked by Risk-Based Security Categorization
is blocked by Business Impact Analysis (BIA)
is blocked by Risk Identification
is blocked by Risk Catalog
is blocked by Risk Owner
is blocked by Risk Assessment Methodology
is blocked by Secure Engineering & Architecture Policy
is blocked by Information Output Filtering
is blocked by Heterogeneity
is blocked by Security Operations Policy
is blocked by Operations Security
is blocked by Security Concept Of Operations (CONOPS)
is blocked by Standardized Operating Procedures (SOP)
is blocked by Service Delivery (Business Process Support)
is blocked by Security Operations Center (SOC)
is blocked by Security Awareness & Training Policy
is blocked by Security, Compliance & Resilience-Minded Workforce
is blocked by Maintaining Workforce Development Relevancy
is blocked by Role-Based Security, Compliance & Resilience Training
is blocked by Technology Development & Acquisition Policy
is blocked by Secure Software Development Practices (SSDP)
is blocked by Product Management
is blocked by Disclosure of Vulnerabilities
is blocked by Technical Documentation Artifacts
is blocked by Customized Development of Critical Components
is blocked by Minimum Viable Product (MVP) Security Requirements
is blocked by Bills of Material (BOMs)
is blocked by Third-Party Management Policy
is blocked by Threat Management Policy
is blocked by Threat Intelligence Feeds
is blocked by Threat Intelligence Reporting
is blocked by Material Threats
is blocked by Behavioral Baselining
is blocked by Predictive Cyber Analytics
is blocked by Indicators of Exposure (IOE)
is blocked by Pre-Deployment Patch Testing
is blocked by Standardized Terminology
is blocked by Business As Usual (BAU) Security, Compliance & Resilience Practices
is blocked by Contacts With Groups & Associations
is blocked by Artificial Intelligence (AI) & Autonomous Technologies Governance
is blocked by AI & Autonomous Technologies Stakeholder Diversity
is blocked by AI & Autonomous Technologies Stakeholder Competencies
is blocked by AI & Autonomous Technologies Oversight Functions Competency
is blocked by AI & Autonomous Technologies Use Notification To Employees
is blocked by AI & Autonomous Technologies Use Notification To Users
is blocked by Human-in-the-Loop Workload & Manipulation
is blocked by Temporary Asset Storage In Automobiles
is blocked by Unattended End-User Equipment
is blocked by Contingency Plan Update Notifications
is blocked by Contingency Training
is blocked by Simulated Events
is blocked by Automated Training Environments
is blocked by Personnel Transfer to Alternate Processing / Storage Site
is blocked by Change Management Policy
is blocked by Cloud Security Policy
is blocked by Configuration Management Policy
is blocked by Cryptographic Protections Policy
is blocked by Sensitive / Regulated Data Sharing Decisions
is blocked by Media Marking
is blocked by Automated Marking
is blocked by Data Modeling Guidelines
is blocked by Attribute Displays for Output Devices
is blocked by Data Subject Attribute Associations
is blocked by Identity Association Techniques & Technologies
is blocked by Code Names
is blocked by Embedded Technology Policy
is blocked by Technology Use Restrictions
is blocked by Use of Critical Technologies
is blocked by Use of Mobile Devices
is blocked by Security-Minded Dress Code
is blocked by Formal Indoctrination
is blocked by Policy Familiarization & Acknowledgement
is blocked by Post-Employment Requirements Awareness
is blocked by Post-Employment Requirements Notification
is blocked by Workplace Investigations
is blocked by Updating Disciplinary Processes
is blocked by Identify Critical Skills & Gaps
is blocked by Remediate Identified Skills Deficiencies
is blocked by Identifying Authorized Work Locations
is blocked by Communicating Authorized Work Locations
is blocked by Reporting Suspicious Activities
is blocked by Identification & Authentication Policy
is blocked by User Responsibilities for Account Management
is blocked by Credential Sharing
is blocked by Technology Use Restrictions
is blocked by Use of Critical Technologies
is blocked by Use of Mobile Devices
is blocked by Security-Minded Dress Code
is blocked by Formal Indoctrination
is blocked by Policy Familiarization & Acknowledgement
is blocked by Post-Employment Requirements Awareness
is blocked by Post-Employment Requirements Notification
is blocked by Workplace Investigations
is blocked by Updating Disciplinary Processes
is blocked by Identify Critical Skills & Gaps
is blocked by Remediate Identified Skills Deficiencies
is blocked by Identifying Authorized Work Locations
is blocked by Communicating Authorized Work Locations
is blocked by Reporting Suspicious Activities
is blocked by Identification & Authentication Policy
is blocked by Incident Response Training
is blocked by Simulated Incidents
is blocked by Automated Incident Response Training Environments
is blocked by Root Cause Analysis (RCA) & Lessons Learned
is blocked by Incident Pattern Analysis
is blocked by Recurring Incident Analysis
is blocked by Incident Reporting Assistance
is blocked by Automation Support of Availability of Information / Support
is blocked by Sensitive / Regulated Data Spill Responsible Personnel
is blocked by Sensitive / Regulated Data Spill Training
is blocked by Sensitive / Regulated Data Exposure to Unauthorized Personnel
is blocked by Information Assurance Policy
is blocked by Maintenance Policy
is blocked by Maintenance Operations
is blocked by Network Security Policy
is blocked by Network Security Controls (NSC)
is blocked by Incident Response Training
is blocked by Simulated Incidents
is blocked by Automated Incident Response Training Environments
is blocked by Root Cause Analysis (RCA) & Lessons Learned
is blocked by Incident Pattern Analysis
is blocked by Recurring Incident Analysis
is blocked by Incident Reporting Assistance
is blocked by Automation Support of Availability of Information / Support
is blocked by Sensitive / Regulated Data Spill Responsible Personnel
is blocked by Sensitive / Regulated Data Spill Training
is blocked by Sensitive / Regulated Data Exposure to Unauthorized Personnel
is blocked by Information Assurance Policy
is blocked by Work From Anywhere (WFA) - Telecommuting Security
is blocked by Phishing & Spam Protection
is blocked by Email Labeling
is blocked by User Threat Reporting
is blocked by Component Marking
is blocked by Work From Anywhere (WFA) - Telecommuting Security
is blocked by Phishing & Spam Protection
is blocked by Personal Data (PD) Control Testing, Training & Monitoring
is blocked by Commitment To Continual Improvements
is blocked by Prioritization To Address Evolving Risks & Threats
is blocked by Manage Organizational Knowledge
is blocked by Personal Data (PD) Control Testing, Training & Monitoring
is blocked by System Use Notification (Logon Banner)
is blocked by Standardized Microsoft Windows Banner
is blocked by Truncated Banner
is blocked by Previous Logon Notification
is blocked by Secure Practices Guidelines
is blocked by Security, Compliance & Resilience Awareness Training
is blocked by Simulated Cyber Attack Scenario Training
is blocked by Sensitive / Regulated Data Storage, Handling & Processing
is blocked by Privileged User Training
is blocked by AI & Autonomous Technologies Risk Management Training
is blocked by Vendor-Specific Security, Compliance & Resilience Training
is blocked by Cyber Threat Environment Situational Awareness
is blocked by Social Engineering & Mining
is blocked by Suspicious Communications & Anomalous System Behavior
is blocked by Counterintelligence Training
is blocked by Anti-Counterfeit Training
is blocked by Quantum Security Awareness
is blocked by Continuing Professional Education (CPE) - Security, Compliance & Resilience Personnel
is blocked by Continuing Professional Education (CPE) - DevOps Personnel
is blocked by Practical Security Training Exercises
is blocked by Security, Compliance & Resilience Training Records
is blocked by Training Feedback
is blocked by Security, Compliance & Resilience Knowledge Sharing
is blocked by Administrator Documentation
is blocked by DevSecOps
is blocked by Developer Screening
is blocked by Developer Knowledge & Skills Register
is blocked by Requisite Developer Training
is blocked by Developer-Provided Training
is blocked by Third-Party Personnel Security
is blocked by Dynamic Threat Awareness
is blocked by Insider Threat Awareness
is blocked by Red Team Exercises
is blocked by Web Security Policy
is blocked by Web Security
is blocked by Developer Screening
is blocked by Developer Knowledge & Skills Register
is blocked by Requisite Developer Training
is blocked by Developer-Provided Training
is blocked by Third-Party Personnel Security
is blocked by Developer Screening
is blocked by Developer Knowledge & Skills Register
is blocked by Requisite Developer Training
is blocked by Developer-Provided Training
is blocked by Third-Party Personnel Security