Identity Compromise / Impersonation

A user, service or machine identity is compromised, spoofed or hijacked, allowing an unauthorized actor to authenticate or operate as a trusted identity.

Linked Issues

Issuelinks
Linktype	Issue
is blocked by	State-Sponsored Espionage
is blocked by	Generative Artificial Intelligence (GAI) Identification
is blocked by	Multi-Agent Trust & Communication Validation
is blocked by	Infrastructure Hardening & Isolation
is blocked by	Tool & Application Programming Interface (API) Invocation Controls
is blocked by	AI Agent Privileged Role & Delegation Boundaries
is blocked by	AI Agent Identity & Impersonation Defense
is blocked by	AI Agent Adversarial & Red Team Testing
is blocked by	AI Agent Delegation and Chaining Control
is blocked by	AI Agent Action Authentication & Authorization
is blocked by	Agentic Output Traceability & Repudiation
is blocked by	AI Agent Session Management
is blocked by	Unattended End-User Equipment
is blocked by	Return of Assets
is blocked by	Roots of Trust Protection
is blocked by	Travel-Only Devices
is blocked by	Re-Imaging Devices After Travel
is blocked by	Jump Server
is blocked by	Cloud Services
is blocked by	Cloud Infrastructure Onboarding
is blocked by	Cloud Access Security Broker (CASB)
is blocked by	Authorized Individuals For Hosted Technology Assets, Applications and/or Services (TAAS)
is blocked by	Account Lockout
is blocked by	Concurrent Session Control
is blocked by	Session Lock
is blocked by	Session Termination
is blocked by	User-Initiated Logouts / Message Displays
is blocked by	Non-Console Administrative Access
is blocked by	Wireless Access Authentication & Encryption
is blocked by	Radio Frequency Identification (RFID) Security
is blocked by	Contactless Access Control Systems
is blocked by	Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas
is blocked by	Physically Disable or Remove Capabilities
is blocked by	Software Repository Protections
is blocked by	Continuous Monitoring Policy
is blocked by	Continuous Monitoring
is blocked by	Event Log & Security-Relevant Telemetry Monitoring
is blocked by	Centralized Management of Event Log & Security-Relevant Telemetry Content
is blocked by	Analyze and Prioritize Monitoring Requirements
is blocked by	Audit Level Adjustments
is blocked by	System Generated Event Logs & Security-Relevant Telemetry
is blocked by	System-Wide / Time-Correlated Audit Trail
is blocked by	Centralized Collection of Event Logs & Security-Relevant Telemetry
is blocked by	Centralized Event Log & Security-Relevant Telemetry Review & Analysis
is blocked by	Event Log & Security-Relevant Telemetry Analysis & Triage
is blocked by	Automated Tools for Real-Time Event Log & Security-Relevant Telemetry Analysis
is blocked by	Automated Incident Responder Alerting
is blocked by	Monitoring Reporting
is blocked by	Alert Threshold Tuning
is blocked by	Correlate Monitoring Information
is blocked by	Integration of Scanning & Other Monitoring Information
is blocked by	Correlation with Physical Monitoring
is blocked by	Content of Event Logs
is blocked by	Audit Trails
is blocked by	Event Log & Security-Relevant Telemetry Storage Capacity
is blocked by	Event Log & Security-Relevant Telemetry Storage Capacity Alerting
is blocked by	Time Stamps
is blocked by	Synchronization With Authoritative Time Source
is blocked by	Protection of Event Logs & Security-Relevant Telemetry
is blocked by	Event Log & Security-Relevant Telemetry Backup on Separate Physical Systems / Components
is blocked by	Event Log & Security-Relevant Telemetry Access by Subset of Privileged Users
is blocked by	Cryptographic Protection of Event Logs & Security-Relevant Telemetry
is blocked by	Dual Authorization for Event Log & Security-Relevant Telemetry Movement
is blocked by	Write Once Read Many (WORM) Event Log Generation
is blocked by	Privileged Functions Logging
is blocked by	Account Creation and Modification Logging
is blocked by	Privileged User Oversight
is blocked by	Anomalous Behavior
is blocked by	Unusual Transactions
is blocked by	Monitoring for Indicators of Compromise (IOC)
is blocked by	Deactivated Account Activity
is blocked by	Insider Threats
is blocked by	Third-Party Threats
is blocked by	Individuals Posing Greater Risk
is blocked by	Session Audit
is blocked by	Real-Time Session Monitoring
is blocked by	Host Intrusion Detection & Prevention Systems (HIDS & HIPS) Monitoring
is blocked by	De-Militarized Zone (DMZ) Monitoring
is blocked by	Wireless Network Monitoring
is blocked by	Non-Repudiation
is blocked by	Identity Binding
is blocked by	Use of Cryptographic Controls
is blocked by	Cryptographic Management
is blocked by	Pre/Post Transmission Handling
is blocked by	Encrypting Data In Transit
is blocked by	Public Key Infrastructure (PKI)
is blocked by	Cryptographic Key Management
is blocked by	Symmetric Keys
is blocked by	Asymmetric Keys
is blocked by	Cryptographic Key Loss or Change
is blocked by	Control & Distribution of Cryptographic Keys
is blocked by	Assigned Cryptographic Key Owners
is blocked by	Third-Party Cryptographic Keys
is blocked by	External System Cryptographic Key Control
is blocked by	Transmission of Cybersecurity & Data Protection Attributes
is blocked by	Certificate Authorities
is blocked by	Certificate Monitoring
is blocked by	Storing Authentication Data
is blocked by	Interface Security
is blocked by	Message Queuing Telemetry Transport (MQTT) Security
is blocked by	Remote Management of Embedded Technologies
is blocked by	Certificate-Based Authentication
is blocked by	Chip-To-Cloud Security
is blocked by	Endpoint Protection Mechanisms
is blocked by	Malicious Code Protection (Antimalware)
is blocked by	Host Intrusion Detection and Prevention Systems (HIDS / HIPS)
is blocked by	Participant Identity Verification
is blocked by	Participant Connection Management
is blocked by	Malicious Link & File Protections
is blocked by	Social Media & Social Networking Restrictions
is blocked by	Personnel Termination
is blocked by	Automated Employment Status Notifications
is blocked by	High-Risk Terminations
is blocked by	Identification & Authentication Policy
is blocked by	Identity & Access Management (IAM)
is blocked by	Authenticate, Authorize and Audit (AAA)
is blocked by	Replay-Resistant Authentication
is blocked by	Identity Providers (IdP) & Authorization Servers
is blocked by	User Provisioning & De-Provisioning
is blocked by	Termination of Employment
is blocked by	Identity Proofing (Identity Verification)
is blocked by	In-Person or Trusted Third-Party Registration
is blocked by	Identity Evidence
is blocked by	Identity Evidence Validation & Verification
is blocked by	In-Person Validation & Verification
is blocked by	Address Confirmation
is blocked by	Attribute-Based Access Control (ABAC)
is blocked by	Real-Time Access Decisions
is blocked by	Access Profile Rules
is blocked by	Account Management
is blocked by	Automated System Account Management (Directory Services)
is blocked by	Authorized Accounts
is blocked by	User & Service Account Inventories
is blocked by	Disable Inactive Accounts
is blocked by	Account Disabling for High Risk Individuals
is blocked by	Automated Audit Actions
is blocked by	Account Separation Between Infrastructure Environments
is blocked by	Multiple System Accounts
is blocked by	Management Approval For New or Changed Accounts
is blocked by	Management Approval For Privileged Accounts
is blocked by	Privileged Account Management (PAM)
is blocked by	Privileged Account Inventories
is blocked by	Privileged Account Separation
is blocked by	Dedicated Privileged Account
is blocked by	Privileged Command Execution
is blocked by	Manual Override
is blocked by	Emergency Accounts
is blocked by	Removal of Temporary / Emergency Accounts
is blocked by	Periodic Review of Individual & Service Account Privileges
is blocked by	System Account Reviews
is blocked by	User Identity (ID) Management
is blocked by	Standardized Identifier Management (User Names)
is blocked by	Dynamic Management
is blocked by	Cross-Organization Management
is blocked by	Privileged Account Identifiers
is blocked by	Authenticator Management
is blocked by	Events Requiring Authenticator Change
is blocked by	Protection of Authenticators
is blocked by	No Embedded Unencrypted Static Authenticators
is blocked by	Default Authenticators
is blocked by	Expiration of Cached Authenticators
is blocked by	Password-Based Authentication
is blocked by	Automated Support For Password Strength
is blocked by	Password Managers
is blocked by	Passkeys
is blocked by	Biometric Authentication
is blocked by	PKI-Based Authentication
is blocked by	Hardware Token-Based Authentication
is blocked by	Authenticator Feedback
is blocked by	Restrictions on Shared Groups / Accounts
is blocked by	Group Authentication
is blocked by	User Responsibilities for Account Management
is blocked by	Credential Sharing
is blocked by	Reference Monitor
is blocked by	Access Enforcement
is blocked by	Database Access
is blocked by	Dedicated Administrative Machines
is blocked by	Revocation of Access Authorizations
is blocked by	Least Privilege
is blocked by	Prohibit Non-Privileged Users from Executing Privileged Functions
is blocked by	Authorize Access to Security Functions
is blocked by	Non-Privileged Access for Non-Security Functions
is blocked by	Auditing Use of Privileged Functions
is blocked by	Network Access to Privileged Commands
is blocked by	Privilege Levels for Code Execution
is blocked by	Permitted Actions Without Identification or Authorization
is blocked by	Identification & Authentication for Organizational Users
is blocked by	Out-of-Band Authentication (OOBA)
is blocked by	Acceptance of PIV Credentials
is blocked by	Identification & Authentication for Non-Organizational Users
is blocked by	Acceptance of Third-Party Credentials
is blocked by	Acceptance of External Authenticators
is blocked by	Disassociability
is blocked by	Acceptance of PIV Credentials from Other Organizations
is blocked by	Use of FICAM-Issued Profiles
is blocked by	Identification & Authentication for Devices
is blocked by	Device Attestation
is blocked by	Device Authorization Enforcement
is blocked by	Access Control For Mobile Devices
is blocked by	Identification & Authentication for Third-Party Technology Assets, Applications and/or Services (TAAS)
is blocked by	Sharing Identification & Authentication Information
is blocked by	Privileged Access by Non-Organizational Users
is blocked by	Multi-Factor Authentication (MFA)
is blocked by	Replay-Resistant Multi-Factor Authentication (MFA)
is blocked by	Phishing-Resistant Multi-Factor Authentication (MFA)
is blocked by	Out-of-Band (OOB) Multi-Factor Authentication (MFA)
is blocked by	Alternative Multi-Factor Authentication (MFA)
is blocked by	Multi-Factor Authentication (MFA) For Network Access to Privileged Accounts
is blocked by	Multi-Factor Authentication (MFA) For Network Access to Non-Privileged Accounts
is blocked by	Multi-Factor Authentication (MFA) For Local Access to Privileged Accounts
is blocked by	Cryptographic Module Authentication
is blocked by	Hardware Security Modules (HSM)
is blocked by	Single Sign-On (SSO) Transparent Authentication
is blocked by	Adaptive Identification & Authentication
is blocked by	Continuous Authentication
is blocked by	Re-Authentication
is blocked by	Mutual Authentication (MA)
is blocked by	Federated Credential Management
is blocked by	Invalidate Session Identifiers at Logout
is blocked by	Unique System-Generated Session Identifiers
is blocked by	Personnel Termination
is blocked by	Automated Employment Status Notifications
is blocked by	High-Risk Terminations
is blocked by	Identification & Authentication Policy
is blocked by	Identity & Access Management (IAM)
is blocked by	Authenticate, Authorize and Audit (AAA)
is blocked by	Replay-Resistant Authentication
is blocked by	Identity Providers (IdP) & Authorization Servers
is blocked by	User Provisioning & De-Provisioning
is blocked by	Termination of Employment
is blocked by	Identity Proofing (Identity Verification)
is blocked by	In-Person or Trusted Third-Party Registration
is blocked by	Identity Evidence
is blocked by	Identity Evidence Validation & Verification
is blocked by	In-Person Validation & Verification
is blocked by	Address Confirmation
is blocked by	Attribute-Based Access Control (ABAC)
is blocked by	Real-Time Access Decisions
is blocked by	Access Profile Rules
is blocked by	Account Management
is blocked by	Automated System Account Management (Directory Services)
is blocked by	Authorized Accounts
is blocked by	User & Service Account Inventories
is blocked by	Disable Inactive Accounts
is blocked by	Account Disabling for High Risk Individuals
is blocked by	Automated Audit Actions
is blocked by	Account Separation Between Infrastructure Environments
is blocked by	Compliance As Code (CAC) Identity Governance
is blocked by	Compliance As Code (CAC) Credential Lifecycle Management
is blocked by	Compliance As Code (CAC) Credentials Management
is blocked by	Remote Maintenance
is blocked by	Remote Maintenance Disconnect Verification
is blocked by	Remote Maintenance Cryptographic Protection
is blocked by	Remote Maintenance Comparable Security & Sanitization
is blocked by	Separation of Maintenance Sessions
is blocked by	Authorized Maintenance Personnel
is blocked by	Centralized Management Of Mobile Devices
is blocked by	Restricting Access To Authorized Technology Assets, Applications and/or Services (TAAS)
is blocked by	Full Device & Container-Based Encryption
is blocked by	Personally-Owned Mobile Devices
is blocked by	Mobile Device Tampering
is blocked by	Boundary Protection
is blocked by	External Telecommunications Services
is blocked by	Domain Name Verification
is blocked by	Certificate Denylisting
is blocked by	Out-of-Band Channels
is blocked by	Compliance As Code (CAC) Identity Governance
is blocked by	Compliance As Code (CAC) Credential Lifecycle Management
is blocked by	Compliance As Code (CAC) Credentials Management
is blocked by	Domain Name Service (DNS) Resolution
is blocked by	Secure Name / Address Resolution Service (Recursive or Caching Resolver)
is blocked by	Zero Trust Architecture (ZTA)
is blocked by	Policy Decision Point (PDP)
is blocked by	Network Access Control (NAC)
is blocked by	Authenticated Proxy
is blocked by	Route Privileged Network Access
is blocked by	Application Proxy
is blocked by	Intranets
is blocked by	Wireless Networking
is blocked by	Wireless Networking Authentication & Encryption
is blocked by	Wireless Boundaries
is blocked by	Remote Access
is blocked by	Remote Access Pathways
is blocked by	Expeditious Remote Access Disconnect / Disable Capability
is blocked by	Remote Access Endpoint Security Validation
is blocked by	Remote Access Monitoring & Control
is blocked by	Remote Access Cryptographic Protections
is blocked by	Remote Access Privileged Commands & Sensitive Data Access
is blocked by	Work From Anywhere (WFA) - Telecommuting Security
is blocked by	Network Connection Termination
is blocked by	Session Integrity
is blocked by	Third-Party Remote Access Governance
is blocked by	Network Intrusion Detection / Prevention Systems (NIDS / NIPS)
is blocked by	Wireless Intrusion Detection / Prevention Systems (WIDS / WIPS) Deployment
is blocked by	Web Application Firewall (WAF)
is blocked by	Application Programming Interface (API) Security
is blocked by	API Gateway
is blocked by	Safeguarding Data Over Open Networks
is blocked by	Wireless Link Protection
is blocked by	Email Domain Reputation Protections
is blocked by	Domain-Based Message Authentication Reporting and Conformance (DMARC)
is blocked by	Sender Policy Framework (SPF)
is blocked by	Authenticated Received Chain (ARC)
is blocked by	Sender Denylisting
is blocked by	Phishing & Spam Protection
is blocked by	Adaptive Email Protections
is blocked by	Email Labeling
is blocked by	User Digital Signatures for Outgoing Email
is blocked by	User Threat Reporting
is blocked by	Cross Domain Authentication
is blocked by	Physical Access Device Inventories
is blocked by	Controlled Ingress & Egress Points
is blocked by	Physical Access Logs
is blocked by	Working in Secure Areas
is blocked by	Access To Critical Systems
is blocked by	Visitor Control
is blocked by	Distinguish Visitors from On-Site Personnel
is blocked by	Identification Requirement
is blocked by	Restrict Unescorted Access
is blocked by	Automated Records Management & Review
is blocked by	Visitor Access Revocation
is blocked by	Domain Name Service (DNS) Resolution
is blocked by	Secure Name / Address Resolution Service (Recursive or Caching Resolver)
is blocked by	Zero Trust Architecture (ZTA)
is blocked by	Policy Decision Point (PDP)
is blocked by	Network Access Control (NAC)
is blocked by	Authenticated Proxy
is blocked by	Route Privileged Network Access
is blocked by	Application Proxy
is blocked by	Intranets
is blocked by	Wireless Networking
is blocked by	Wireless Networking Authentication & Encryption
is blocked by	Wireless Boundaries
is blocked by	Remote Access
is blocked by	Remote Access Pathways
is blocked by	Expeditious Remote Access Disconnect / Disable Capability
is blocked by	Remote Access Endpoint Security Validation
is blocked by	Remote Access Monitoring & Control
is blocked by	Remote Access Cryptographic Protections
is blocked by	Remote Access Privileged Commands & Sensitive Data Access
is blocked by	Work From Anywhere (WFA) - Telecommuting Security
is blocked by	Network Connection Termination
is blocked by	Session Integrity
is blocked by	Third-Party Remote Access Governance
is blocked by	Network Intrusion Detection / Prevention Systems (NIDS / NIPS)
is blocked by	Wireless Intrusion Detection / Prevention Systems (WIDS / WIPS) Deployment
is blocked by	Web Application Firewall (WAF)
is blocked by	Application Programming Interface (API) Security
is blocked by	API Gateway
is blocked by	Safeguarding Data Over Open Networks
is blocked by	Wireless Link Protection
is blocked by	Email Domain Reputation Protections
is blocked by	Domain-Based Message Authentication Reporting and Conformance (DMARC)
is blocked by	Sender Policy Framework (SPF)
is blocked by	Authenticated Received Chain (ARC)
is blocked by	Sender Denylisting
is blocked by	Phishing & Spam Protection
is blocked by	Disclosure Request Rejections
is blocked by	Justification To Reject Disclosure Requests
is blocked by	Cookie Management
is blocked by	Authorized Agent
is blocked by	Data Subject Authentication
is blocked by	Data Subject Rights Management
is blocked by	Data Subject Empowerment
is blocked by	Enabling Data Subjects To Update Personal Data (PD)
is blocked by	Data Portability
is blocked by	Personal Data (PD) Exports
is blocked by	Harvest Now, Decrypt Later (HNDL) Mitigation
is blocked by	Entropy Source & Random Bit Generation
is blocked by	Deprecated Cryptographic Algorithms
is blocked by	Post-Quantum Cryptography (PQC) Key Management
is blocked by	Quantum-Safe Public Key Infrastructure (PKI) Transition
is blocked by	Algorithm Negotiation Integrity
is blocked by	Disclosure Request Rejections
is blocked by	Justification To Reject Disclosure Requests
is blocked by	Secure Log-On Procedures (Trusted Path)
is blocked by	Previous Logon Notification
is blocked by	Clock Synchronization
is blocked by	Privileged Environments
is blocked by	Security, Compliance & Resilience-Minded Workforce
is blocked by	Security, Compliance & Resilience Awareness Training
is blocked by	Simulated Cyber Attack Scenario Training
is blocked by	Role-Based Security, Compliance & Resilience Training
is blocked by	Social Engineering & Mining
is blocked by	Secure Settings By Default
is blocked by	Insecure Ports, Protocols & Services
is blocked by	Physical Diagnostic & Test Interfaces
is blocked by	Secure Migration Practices
is blocked by	Application Penetration Testing
is blocked by	Manual Code Review
is blocked by	Developer Screening
is blocked by	Third-Party Services
is blocked by	Third-Party Authentication Practices
is blocked by	Third-Party Personnel Security
is blocked by	Third-Party Access Revocation
is blocked by	Privileged Access For Vulnerability Scanning Tools
is blocked by	Web Security Standard
is blocked by	Web Application Framework
is blocked by	Unauthorized Code On Web Pages
is blocked by	Client-Facing Web Services
is blocked by	Strong Customer Authentication (SCA)
is blocked by	Secure Web Traffic
is blocked by	Web Application Output Encoding
is blocked by	Web Browser Security
is blocked by	Secure Migration Practices
is blocked by	Application Penetration Testing
is blocked by	Manual Code Review
is blocked by	Developer Screening
is blocked by	Third-Party Services
is blocked by	Third-Party Authentication Practices
is blocked by	Third-Party Personnel Security
is blocked by	Secure Migration Practices
is blocked by	Application Penetration Testing
is blocked by	Manual Code Review
is blocked by	Developer Screening
is blocked by	Third-Party Services
is blocked by	Third-Party Authentication Practices
is blocked by	Third-Party Personnel Security

Secure Controls Framework -
EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.

DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.