Alamteemad
| Pealkiri | Kirjeldus |
|---|---|
| Loss of Accountability / Attribution | Actions, transactions, asset ownership or other relevant activity cannot be reliably attributed to an accountable individual, service or system, impairing traceability, non-repudiation and enforcement. |
| Excessive or Unauthorized Privilege | Users, services or systems obtain or retain privileges beyond those required for authorized duties, increasing the ability to access, change, disclose or disrupt protected resources. |
| Unauthorized Privilege Elevation | An actor, account, service or process gains privileges beyond its authorized level, enabling access to restricted functions, data or administrative capabilities. |
| Unauthorized Access | Individuals, groups, services, devices or processes gain access to Technology Assets, Applications, Services, Data and/or Facilities (TAASDF) without appropriate authorization. |
| Loss of Accountability / Attribution | Actions, transactions, asset ownership or other relevant activity cannot be reliably attributed to an accountable individual, service or system, impairing traceability, non-repudiation and enforcement. |
| Excessive or Unauthorized Privilege | Users, services or systems obtain or retain privileges beyond those required for authorized duties, increasing the ability to access, change, disclose or disrupt protected resources. |
| Unauthorized Privilege Elevation | An actor, account, service or process gains privileges beyond its authorized level, enabling access to restricted functions, data or administrative capabilities. |
| Unauthorized Access | Individuals, groups, services, devices or processes gain access to Technology Assets, Applications, Services, Data and/or Facilities (TAASDF) without appropriate authorization. |
| Identity Compromise / Impersonation | A user, service or machine identity is compromised, spoofed or hijacked, allowing an unauthorized actor to authenticate or operate as a trusted identity. |
| Loss of Accountability / Attribution | Actions, transactions, asset ownership or other relevant activity cannot be reliably attributed to an accountable individual, service or system, impairing traceability, non-repudiation and enforcement. |
| Excessive or Unauthorized Privilege | Users, services or systems obtain or retain privileges beyond those required for authorized duties, increasing the ability to access, change, disclose or disrupt protected resources. |
| Unauthorized Privilege Elevation | An actor, account, service or process gains privileges beyond its authorized level, enabling access to restricted functions, data or administrative capabilities. |
| Unauthorized Access | Individuals, groups, services, devices or processes gain access to Technology Assets, Applications, Services, Data and/or Facilities (TAASDF) without appropriate authorization. |
| Identity Compromise / Impersonation | A user, service or machine identity is compromised, spoofed or hijacked, allowing an unauthorized actor to authenticate or operate as a trusted identity. |
| Loss of Accountability / Attribution | Actions, transactions, asset ownership or other relevant activity cannot be reliably attributed to an accountable individual, service or system, impairing traceability, non-repudiation and enforcement. |
| Excessive or Unauthorized Privilege | Users, services or systems obtain or retain privileges beyond those required for authorized duties, increasing the ability to access, change, disclose or disrupt protected resources. |
| Unauthorized Privilege Elevation | An actor, account, service or process gains privileges beyond its authorized level, enabling access to restricted functions, data or administrative capabilities. |
| Unauthorized Access | Individuals, groups, services, devices or processes gain access to Technology Assets, Applications, Services, Data and/or Facilities (TAASDF) without appropriate authorization. |
| Identity Compromise / Impersonation | A user, service or machine identity is compromised, spoofed or hijacked, allowing an unauthorized actor to authenticate or operate as a trusted identity. |
- Secure Controls Framework -
EN: GRCA includes the Secure Controls Framework® (SCF) content, © Secure Controls Framework Council, LLC, used under the Creative Commons Attribution-NoDerivatives 4.0 International Public License. SCF control numbers, names, descriptions and mappings appear exactly as published by the SCF Council – https://securecontrolsframework.com. GRCA may group or reorder SCF content for display, which does not change SCF content; the mappings are shown as links to the frameworks they name. Learn more at https://securecontrolsframework.com.
DE: GRCA enthält Inhalte des Secure Controls Framework® (SCF), © Secure Controls Framework Council, LLC, genutzt unter der Creative Commons Attribution-NoDerivatives 4.0 International Public License. Nummern, Namen, Beschreibungen und Zuordnungen der SCF-Controls erscheinen genau so, wie der SCF Council sie veröffentlicht – https://securecontrolsframework.com. GRCA gruppiert oder sortiert SCF-Inhalte für die Anzeige, ohne sie zu verändern; die Zuordnungen erscheinen als Verknüpfungen zu den genannten Regelwerken. Mehr unter https://securecontrolsframework.com.