A user, service or machine identity is compromised, spoofed or hijacked, allowing an unauthorized actor to authenticate or operate as a trusted identity.

Verknüpfte Vorgänge

Verknüpfungen
Verknüpfungstyp Vorgang
is blocked by State-Sponsored Espionage
is blocked by Generative Artificial Intelligence (GAI) Identification
is blocked by Multi-Agent Trust & Communication Validation
is blocked by Infrastructure Hardening & Isolation
is blocked by Tool & Application Programming Interface (API) Invocation Controls
is blocked by AI Agent Privileged Role & Delegation Boundaries
is blocked by AI Agent Identity & Impersonation Defense
is blocked by AI Agent Adversarial & Red Team Testing
is blocked by AI Agent Delegation and Chaining Control
is blocked by AI Agent Action Authentication & Authorization
is blocked by Agentic Output Traceability & Repudiation
is blocked by AI Agent Session Management
is blocked by Unattended End-User Equipment
is blocked by Return of Assets
is blocked by Roots of Trust Protection
is blocked by Travel-Only Devices
is blocked by Re-Imaging Devices After Travel
is blocked by Jump Server
is blocked by Cloud Services
is blocked by Cloud Infrastructure Onboarding
is blocked by Cloud Access Security Broker (CASB)
is blocked by Authorized Individuals For Hosted Technology Assets, Applications and/or Services (TAAS)
is blocked by Account Lockout
is blocked by Concurrent Session Control
is blocked by Session Lock
is blocked by Session Termination
is blocked by User-Initiated Logouts / Message Displays
is blocked by Non-Console Administrative Access
is blocked by Wireless Access Authentication & Encryption
is blocked by Radio Frequency Identification (RFID) Security
is blocked by Contactless Access Control Systems
is blocked by Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas
is blocked by Physically Disable or Remove Capabilities
is blocked by Software Repository Protections
is blocked by Continuous Monitoring Policy
is blocked by Continuous Monitoring
is blocked by Event Log & Security-Relevant Telemetry Monitoring
is blocked by Centralized Management of Event Log & Security-Relevant Telemetry Content
is blocked by Analyze and Prioritize Monitoring Requirements
is blocked by Audit Level Adjustments
is blocked by System Generated Event Logs & Security-Relevant Telemetry
is blocked by System-Wide / Time-Correlated Audit Trail
is blocked by Centralized Collection of Event Logs & Security-Relevant Telemetry
is blocked by Centralized Event Log & Security-Relevant Telemetry Review & Analysis
is blocked by Event Log & Security-Relevant Telemetry Analysis & Triage
is blocked by Automated Tools for Real-Time Event Log & Security-Relevant Telemetry Analysis
is blocked by Automated Incident Responder Alerting
is blocked by Monitoring Reporting
is blocked by Alert Threshold Tuning
is blocked by Correlate Monitoring Information
is blocked by Integration of Scanning & Other Monitoring Information
is blocked by Correlation with Physical Monitoring
is blocked by Content of Event Logs
is blocked by Audit Trails
is blocked by Event Log & Security-Relevant Telemetry Storage Capacity
is blocked by Event Log & Security-Relevant Telemetry Storage Capacity Alerting
is blocked by Time Stamps
is blocked by Synchronization With Authoritative Time Source
is blocked by Protection of Event Logs & Security-Relevant Telemetry
is blocked by Event Log & Security-Relevant Telemetry Backup on Separate Physical Systems / Components
is blocked by Event Log & Security-Relevant Telemetry Access by Subset of Privileged Users
is blocked by Cryptographic Protection of Event Logs & Security-Relevant Telemetry
is blocked by Dual Authorization for Event Log & Security-Relevant Telemetry Movement
is blocked by Write Once Read Many (WORM) Event Log Generation
is blocked by Privileged Functions Logging
is blocked by Account Creation and Modification Logging
is blocked by Privileged User Oversight
is blocked by Anomalous Behavior
is blocked by Unusual Transactions
is blocked by Monitoring for Indicators of Compromise (IOC)
is blocked by Deactivated Account Activity
is blocked by Insider Threats
is blocked by Third-Party Threats
is blocked by Individuals Posing Greater Risk
is blocked by Session Audit
is blocked by Real-Time Session Monitoring
is blocked by Host Intrusion Detection & Prevention Systems (HIDS & HIPS) Monitoring
is blocked by De-Militarized Zone (DMZ) Monitoring
is blocked by Wireless Network Monitoring
is blocked by Non-Repudiation
is blocked by Identity Binding
is blocked by Use of Cryptographic Controls
is blocked by Cryptographic Management
is blocked by Pre/Post Transmission Handling
is blocked by Encrypting Data In Transit
is blocked by Public Key Infrastructure (PKI)
is blocked by Cryptographic Key Management
is blocked by Symmetric Keys
is blocked by Asymmetric Keys
is blocked by Cryptographic Key Loss or Change
is blocked by Control & Distribution of Cryptographic Keys
is blocked by Assigned Cryptographic Key Owners
is blocked by Third-Party Cryptographic Keys
is blocked by External System Cryptographic Key Control
is blocked by Transmission of Cybersecurity & Data Protection Attributes
is blocked by Certificate Authorities
is blocked by Certificate Monitoring
is blocked by Storing Authentication Data
is blocked by Interface Security
is blocked by Message Queuing Telemetry Transport (MQTT) Security
is blocked by Remote Management of Embedded Technologies
is blocked by Certificate-Based Authentication
is blocked by Chip-To-Cloud Security
is blocked by Endpoint Protection Mechanisms
is blocked by Malicious Code Protection (Antimalware)
is blocked by Host Intrusion Detection and Prevention Systems (HIDS / HIPS)
is blocked by Participant Identity Verification
is blocked by Participant Connection Management
is blocked by Malicious Link & File Protections
is blocked by Social Media & Social Networking Restrictions
is blocked by Personnel Termination
is blocked by Automated Employment Status Notifications
is blocked by High-Risk Terminations
is blocked by Identification & Authentication Policy
is blocked by Identity & Access Management (IAM)
is blocked by Authenticate, Authorize and Audit (AAA)
is blocked by Replay-Resistant Authentication
is blocked by Identity Providers (IdP) & Authorization Servers
is blocked by User Provisioning & De-Provisioning
is blocked by Termination of Employment
is blocked by Identity Proofing (Identity Verification)
is blocked by In-Person or Trusted Third-Party Registration
is blocked by Identity Evidence
is blocked by Identity Evidence Validation & Verification
is blocked by In-Person Validation & Verification
is blocked by Address Confirmation
is blocked by Attribute-Based Access Control (ABAC)
is blocked by Real-Time Access Decisions
is blocked by Access Profile Rules
is blocked by Account Management
is blocked by Automated System Account Management (Directory Services)
is blocked by Authorized Accounts
is blocked by User & Service Account Inventories
is blocked by Disable Inactive Accounts
is blocked by Account Disabling for High Risk Individuals
is blocked by Automated Audit Actions
is blocked by Account Separation Between Infrastructure Environments
is blocked by Multiple System Accounts
is blocked by Management Approval For New or Changed Accounts
is blocked by Management Approval For Privileged Accounts
is blocked by Privileged Account Management (PAM)
is blocked by Privileged Account Inventories
is blocked by Privileged Account Separation
is blocked by Dedicated Privileged Account
is blocked by Privileged Command Execution
is blocked by Manual Override
is blocked by Emergency Accounts
is blocked by Removal of Temporary / Emergency Accounts
is blocked by Periodic Review of Individual & Service Account Privileges
is blocked by System Account Reviews
is blocked by User Identity (ID) Management
is blocked by Standardized Identifier Management (User Names)
is blocked by Dynamic Management
is blocked by Cross-Organization Management
is blocked by Privileged Account Identifiers
is blocked by Authenticator Management
is blocked by Events Requiring Authenticator Change
is blocked by Protection of Authenticators
is blocked by No Embedded Unencrypted Static Authenticators
is blocked by Default Authenticators
is blocked by Expiration of Cached Authenticators
is blocked by Password-Based Authentication
is blocked by Automated Support For Password Strength
is blocked by Password Managers
is blocked by Passkeys
is blocked by Biometric Authentication
is blocked by PKI-Based Authentication
is blocked by Hardware Token-Based Authentication
is blocked by Authenticator Feedback
is blocked by Restrictions on Shared Groups / Accounts
is blocked by Group Authentication
is blocked by User Responsibilities for Account Management
is blocked by Credential Sharing
is blocked by Reference Monitor
is blocked by Access Enforcement
is blocked by Database Access
is blocked by Dedicated Administrative Machines
is blocked by Revocation of Access Authorizations
is blocked by Least Privilege
is blocked by Prohibit Non-Privileged Users from Executing Privileged Functions
is blocked by Authorize Access to Security Functions
is blocked by Non-Privileged Access for Non-Security Functions
is blocked by Auditing Use of Privileged Functions
is blocked by Network Access to Privileged Commands
is blocked by Privilege Levels for Code Execution
is blocked by Permitted Actions Without Identification or Authorization
is blocked by Identification & Authentication for Organizational Users
is blocked by Out-of-Band Authentication (OOBA)
is blocked by Acceptance of PIV Credentials
is blocked by Identification & Authentication for Non-Organizational Users
is blocked by Acceptance of Third-Party Credentials
is blocked by Acceptance of External Authenticators
is blocked by Disassociability
is blocked by Acceptance of PIV Credentials from Other Organizations
is blocked by Use of FICAM-Issued Profiles
is blocked by Identification & Authentication for Devices
is blocked by Device Attestation
is blocked by Device Authorization Enforcement
is blocked by Access Control For Mobile Devices
is blocked by Identification & Authentication for Third-Party Technology Assets, Applications and/or Services (TAAS)
is blocked by Sharing Identification & Authentication Information
is blocked by Privileged Access by Non-Organizational Users
is blocked by Multi-Factor Authentication (MFA)
is blocked by Replay-Resistant Multi-Factor Authentication (MFA)
is blocked by Phishing-Resistant Multi-Factor Authentication (MFA)
is blocked by Out-of-Band (OOB) Multi-Factor Authentication (MFA)
is blocked by Alternative Multi-Factor Authentication (MFA)
is blocked by Multi-Factor Authentication (MFA) For Network Access to Privileged Accounts
is blocked by Multi-Factor Authentication (MFA) For Network Access to Non-Privileged Accounts
is blocked by Multi-Factor Authentication (MFA) For Local Access to Privileged Accounts
is blocked by Cryptographic Module Authentication
is blocked by Hardware Security Modules (HSM)
is blocked by Single Sign-On (SSO) Transparent Authentication
is blocked by Adaptive Identification & Authentication
is blocked by Continuous Authentication
is blocked by Re-Authentication
is blocked by Mutual Authentication (MA)
is blocked by Federated Credential Management
is blocked by Invalidate Session Identifiers at Logout
is blocked by Unique System-Generated Session Identifiers
is blocked by Personnel Termination
is blocked by Automated Employment Status Notifications
is blocked by High-Risk Terminations
is blocked by Identification & Authentication Policy
is blocked by Identity & Access Management (IAM)
is blocked by Authenticate, Authorize and Audit (AAA)
is blocked by Replay-Resistant Authentication
is blocked by Identity Providers (IdP) & Authorization Servers
is blocked by User Provisioning & De-Provisioning
is blocked by Termination of Employment
is blocked by Identity Proofing (Identity Verification)
is blocked by In-Person or Trusted Third-Party Registration
is blocked by Identity Evidence
is blocked by Identity Evidence Validation & Verification
is blocked by In-Person Validation & Verification
is blocked by Address Confirmation
is blocked by Attribute-Based Access Control (ABAC)
is blocked by Real-Time Access Decisions
is blocked by Access Profile Rules
is blocked by Account Management
is blocked by Automated System Account Management (Directory Services)
is blocked by Authorized Accounts
is blocked by User & Service Account Inventories
is blocked by Disable Inactive Accounts
is blocked by Account Disabling for High Risk Individuals
is blocked by Automated Audit Actions
is blocked by Account Separation Between Infrastructure Environments
is blocked by Compliance As Code (CAC) Identity Governance
is blocked by Compliance As Code (CAC) Credential Lifecycle Management
is blocked by Compliance As Code (CAC) Credentials Management
is blocked by Remote Maintenance
is blocked by Remote Maintenance Disconnect Verification
is blocked by Remote Maintenance Cryptographic Protection
is blocked by Remote Maintenance Comparable Security & Sanitization
is blocked by Separation of Maintenance Sessions
is blocked by Authorized Maintenance Personnel
is blocked by Centralized Management Of Mobile Devices
is blocked by Restricting Access To Authorized Technology Assets, Applications and/or Services (TAAS)
is blocked by Full Device & Container-Based Encryption
is blocked by Personally-Owned Mobile Devices
is blocked by Mobile Device Tampering
is blocked by Boundary Protection
is blocked by External Telecommunications Services
is blocked by Domain Name Verification
is blocked by Certificate Denylisting
is blocked by Out-of-Band Channels
is blocked by Compliance As Code (CAC) Identity Governance
is blocked by Compliance As Code (CAC) Credential Lifecycle Management
is blocked by Compliance As Code (CAC) Credentials Management
is blocked by Domain Name Service (DNS) Resolution
is blocked by Secure Name / Address Resolution Service (Recursive or Caching Resolver)
is blocked by Zero Trust Architecture (ZTA)
is blocked by Policy Decision Point (PDP)
is blocked by Network Access Control (NAC)
is blocked by Authenticated Proxy
is blocked by Route Privileged Network Access
is blocked by Application Proxy
is blocked by Intranets
is blocked by Wireless Networking
is blocked by Wireless Networking Authentication & Encryption
is blocked by Wireless Boundaries
is blocked by Remote Access
is blocked by Remote Access Pathways
is blocked by Expeditious Remote Access Disconnect / Disable Capability
is blocked by Remote Access Endpoint Security Validation
is blocked by Remote Access Monitoring & Control
is blocked by Remote Access Cryptographic Protections
is blocked by Remote Access Privileged Commands & Sensitive Data Access
is blocked by Work From Anywhere (WFA) - Telecommuting Security
is blocked by Network Connection Termination
is blocked by Session Integrity
is blocked by Third-Party Remote Access Governance
is blocked by Network Intrusion Detection / Prevention Systems (NIDS / NIPS)
is blocked by Wireless Intrusion Detection / Prevention Systems (WIDS / WIPS) Deployment
is blocked by Web Application Firewall (WAF)
is blocked by Application Programming Interface (API) Security
is blocked by API Gateway
is blocked by Safeguarding Data Over Open Networks
is blocked by Wireless Link Protection
is blocked by Email Domain Reputation Protections
is blocked by Domain-Based Message Authentication Reporting and Conformance (DMARC)
is blocked by Sender Policy Framework (SPF)
is blocked by Authenticated Received Chain (ARC)
is blocked by Sender Denylisting
is blocked by Phishing & Spam Protection
is blocked by Adaptive Email Protections
is blocked by Email Labeling
is blocked by User Digital Signatures for Outgoing Email
is blocked by User Threat Reporting
is blocked by Cross Domain Authentication
is blocked by Physical Access Device Inventories
is blocked by Controlled Ingress & Egress Points
is blocked by Physical Access Logs
is blocked by Working in Secure Areas
is blocked by Access To Critical Systems
is blocked by Visitor Control
is blocked by Distinguish Visitors from On-Site Personnel
is blocked by Identification Requirement
is blocked by Restrict Unescorted Access
is blocked by Automated Records Management & Review
is blocked by Visitor Access Revocation
is blocked by Domain Name Service (DNS) Resolution
is blocked by Secure Name / Address Resolution Service (Recursive or Caching Resolver)
is blocked by Zero Trust Architecture (ZTA)
is blocked by Policy Decision Point (PDP)
is blocked by Network Access Control (NAC)
is blocked by Authenticated Proxy
is blocked by Route Privileged Network Access
is blocked by Application Proxy
is blocked by Intranets
is blocked by Wireless Networking
is blocked by Wireless Networking Authentication & Encryption
is blocked by Wireless Boundaries
is blocked by Remote Access
is blocked by Remote Access Pathways
is blocked by Expeditious Remote Access Disconnect / Disable Capability
is blocked by Remote Access Endpoint Security Validation
is blocked by Remote Access Monitoring & Control
is blocked by Remote Access Cryptographic Protections
is blocked by Remote Access Privileged Commands & Sensitive Data Access
is blocked by Work From Anywhere (WFA) - Telecommuting Security
is blocked by Network Connection Termination
is blocked by Session Integrity
is blocked by Third-Party Remote Access Governance
is blocked by Network Intrusion Detection / Prevention Systems (NIDS / NIPS)
is blocked by Wireless Intrusion Detection / Prevention Systems (WIDS / WIPS) Deployment
is blocked by Web Application Firewall (WAF)
is blocked by Application Programming Interface (API) Security
is blocked by API Gateway
is blocked by Safeguarding Data Over Open Networks
is blocked by Wireless Link Protection
is blocked by Email Domain Reputation Protections
is blocked by Domain-Based Message Authentication Reporting and Conformance (DMARC)
is blocked by Sender Policy Framework (SPF)
is blocked by Authenticated Received Chain (ARC)
is blocked by Sender Denylisting
is blocked by Phishing & Spam Protection
is blocked by Disclosure Request Rejections
is blocked by Justification To Reject Disclosure Requests
is blocked by Cookie Management
is blocked by Authorized Agent
is blocked by Data Subject Authentication
is blocked by Data Subject Rights Management
is blocked by Data Subject Empowerment
is blocked by Enabling Data Subjects To Update Personal Data (PD)
is blocked by Data Portability
is blocked by Personal Data (PD) Exports
is blocked by Harvest Now, Decrypt Later (HNDL) Mitigation
is blocked by Entropy Source & Random Bit Generation
is blocked by Deprecated Cryptographic Algorithms
is blocked by Post-Quantum Cryptography (PQC) Key Management
is blocked by Quantum-Safe Public Key Infrastructure (PKI) Transition
is blocked by Algorithm Negotiation Integrity
is blocked by Disclosure Request Rejections
is blocked by Justification To Reject Disclosure Requests
is blocked by Secure Log-On Procedures (Trusted Path)
is blocked by Previous Logon Notification
is blocked by Clock Synchronization
is blocked by Privileged Environments
is blocked by Security, Compliance & Resilience-Minded Workforce
is blocked by Security, Compliance & Resilience Awareness Training
is blocked by Simulated Cyber Attack Scenario Training
is blocked by Role-Based Security, Compliance & Resilience Training
is blocked by Social Engineering & Mining
is blocked by Secure Settings By Default
is blocked by Insecure Ports, Protocols & Services
is blocked by Physical Diagnostic & Test Interfaces
is blocked by Secure Migration Practices
is blocked by Application Penetration Testing
is blocked by Manual Code Review
is blocked by Developer Screening
is blocked by Third-Party Services
is blocked by Third-Party Authentication Practices
is blocked by Third-Party Personnel Security
is blocked by Third-Party Access Revocation
is blocked by Privileged Access For Vulnerability Scanning Tools
is blocked by Web Security Standard
is blocked by Web Application Framework
is blocked by Unauthorized Code On Web Pages
is blocked by Client-Facing Web Services
is blocked by Strong Customer Authentication (SCA)
is blocked by Secure Web Traffic
is blocked by Web Application Output Encoding
is blocked by Web Browser Security
is blocked by Secure Migration Practices
is blocked by Application Penetration Testing
is blocked by Manual Code Review
is blocked by Developer Screening
is blocked by Third-Party Services
is blocked by Third-Party Authentication Practices
is blocked by Third-Party Personnel Security
is blocked by Secure Migration Practices
is blocked by Application Penetration Testing
is blocked by Manual Code Review
is blocked by Developer Screening
is blocked by Third-Party Services
is blocked by Third-Party Authentication Practices
is blocked by Third-Party Personnel Security