|
is blocked by
|
State-Sponsored Espionage |
|
is blocked by
|
Virtual Data Room (VDR) |
|
is blocked by
|
Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization |
|
is blocked by
|
AI & Autonomous Technologies Internal Controls |
|
is blocked by
|
Adequate Protections For AI & Autonomous Technologies |
|
is blocked by
|
AI & Autonomous Technologies Risk Response |
|
is blocked by
|
AI & Autonomous Technologies Development Practices |
|
is blocked by
|
Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV) |
|
is blocked by
|
AI TEVV Security & Resiliency Assessment |
|
is blocked by
|
AI TEVV Third-Party Risk Management |
|
is blocked by
|
AI & Autonomous Technologies Production Monitoring |
|
is blocked by
|
Anomaly Detection & Human Oversight |
|
is blocked by
|
Emergent Behavior & Collusion Protections |
|
is blocked by
|
AI & Autonomous Technologies System Value Chain Fallbacks |
|
is blocked by
|
AI Model Resilience |
|
is blocked by
|
Resource Exhaustion & Denial of Service (DoS) Resilience |
|
is blocked by
|
Infrastructure Hardening & Isolation |
|
is blocked by
|
AI Agent Limitations |
|
is blocked by
|
Tool & Application Programming Interface (API) Invocation Controls |
|
is blocked by
|
AI Agent Orchestration Protocol Safeguards |
|
is blocked by
|
AI Agent Data Pipeline & Input Integrity |
|
is blocked by
|
Sandboxing AI Agents |
|
is blocked by
|
AI Agent Kill Switch / User Control |
|
is blocked by
|
Purging AI Agent Data |
|
is blocked by
|
AI Agent Resource Limiting |
|
is blocked by
|
Robotic Process Automation (RPA) |
|
is blocked by
|
Technology Assets, Applications, Services and/or Data (TAASD) Criticality Ratings |
|
is blocked by
|
Asset-Service Dependencies |
|
is blocked by
|
Security of Assets & Media |
|
is blocked by
|
Technology Assets, Applications, Services and/or Data (TAASD) Storage |
|
is blocked by
|
Temporary Asset Storage In Automobiles |
|
is blocked by
|
Return of Assets |
|
is blocked by
|
Use of Third-Party Devices |
|
is blocked by
|
Usage Parameters |
|
is blocked by
|
Telecommunications Equipment |
|
is blocked by
|
Database Management System (DBMS) |
|
is blocked by
|
Decommissioning |
|
is blocked by
|
Technology Lifecycle Management |
|
is blocked by
|
Technical Debt Reviews |
|
is blocked by
|
Unsupported Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Alternate Sources for Continued Support |
|
is blocked by
|
Predictable Failure Analysis |
|
is blocked by
|
Business Continuity Management System (BCMS) |
|
is blocked by
|
Defined Operational Resilience Requirements |
|
is blocked by
|
Operational Resilience Capabilities |
|
is blocked by
|
Business Continuity & Disaster Recovery (BC/DR) Plans |
|
is blocked by
|
Recovery Time / Point Objectives (RTO / RPO) |
|
is blocked by
|
Recovery Operations Criteria |
|
is blocked by
|
Recovery Operations Communications |
|
is blocked by
|
Alternate Communications Channels |
|
is blocked by
|
Ongoing Contingency Planning |
|
is blocked by
|
Contingency Planning Components |
|
is blocked by
|
Contingency Plan Update Notifications |
|
is blocked by
|
Coordinate with Related Plans |
|
is blocked by
|
Coordinate With External Service Providers |
|
is blocked by
|
Resume All Missions & Business Functions |
|
is blocked by
|
Continue Essential Mission & Business Functions |
|
is blocked by
|
Resume Essential Missions & Business Functions |
|
is blocked by
|
Contingency Training |
|
is blocked by
|
Contingency Plan Testing & Exercises |
|
is blocked by
|
Contingency Plan Testing For Alternate Storage & Processing Sites |
|
is blocked by
|
Alternate Storage Site |
|
is blocked by
|
Separation from Primary Storage Site |
|
is blocked by
|
Primary Storage Site Accessibility |
|
is blocked by
|
Alternate Processing Site |
|
is blocked by
|
Separation from Primary Processing Site |
|
is blocked by
|
Alternate Processing Site Accessibility |
|
is blocked by
|
Alternate Site Priority of Service |
|
is blocked by
|
Preparation for Use |
|
is blocked by
|
Inability to Return to Primary Site |
|
is blocked by
|
Personnel Transfer to Alternate Processing / Storage Site |
|
is blocked by
|
Telecommunications Services Availability |
|
is blocked by
|
Telecommunications Priority of Service Provisions |
|
is blocked by
|
Separation of Primary / Alternate Providers |
|
is blocked by
|
Technology Assets, Applications and/or Services (TAAS) Recovery & Reconstitution |
|
is blocked by
|
Restore Within Time Period |
|
is blocked by
|
Recovery Images |
|
is blocked by
|
Isolated Recovery Environment |
|
is blocked by
|
Reserve Hardware |
|
is blocked by
|
Redundant Secondary System |
|
is blocked by
|
Failover Capability |
|
is blocked by
|
Resilient Data Backup Architecture |
|
is blocked by
|
Data Backups |
|
is blocked by
|
Transfer to Alternate Storage Site |
|
is blocked by
|
Separate Storage for Critical Information |
|
is blocked by
|
Cryptographic Protection |
|
is blocked by
|
Redundant Copies of Business-Critical Data |
|
is blocked by
|
Transaction Recovery |
|
is blocked by
|
Data Replication |
|
is blocked by
|
Data Archiving |
|
is blocked by
|
Continuous Data Protection (CDP) |
|
is blocked by
|
Data Backup Access |
|
is blocked by
|
Data Backup & Restoration Hardware Protection |
|
is blocked by
|
Restoration Integrity Verification |
|
is blocked by
|
Testing for Reliability & Integrity |
|
is blocked by
|
Test Restoration Using Sampling |
|
is blocked by
|
Data Backup Modification and/or Destruction |
|
is blocked by
|
Dual Authorization For Sensitive / Regulated Backup Media Destruction |
|
is blocked by
|
Capacity & Performance Planning Policy |
|
is blocked by
|
Capacity & Performance Management |
|
is blocked by
|
Capacity Planning |
|
is blocked by
|
Resource Priority |
|
is blocked by
|
Performance Monitoring |
|
is blocked by
|
Elastic Expansion |
|
is blocked by
|
Regional Delivery |
|
is blocked by
|
Resiliency Planning For Alternate Sites |
|
is blocked by
|
Configuration Change Control |
|
is blocked by
|
Prohibition Of Changes |
|
is blocked by
|
Access Restriction For Change |
|
is blocked by
|
Role-Based Permissions To Implement Changes |
|
is blocked by
|
Dual Authorization for Changes To Critical / Sensitive Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Dual Approval For High-Impact Environments |
|
is blocked by
|
Test, Validate & Document Changes |
|
is blocked by
|
Control Functionality Verification |
|
is blocked by
|
Emergency Changes |
|
is blocked by
|
Cloud Services |
|
is blocked by
|
Cloud Infrastructure Onboarding |
|
is blocked by
|
Cloud Infrastructure Offboarding |
|
is blocked by
|
Cloud Security Architecture |
|
is blocked by
|
Cloud Infrastructure Security Subnet |
|
is blocked by
|
Multi-Tenant Environments |
|
is blocked by
|
Data Handling & Portability |
|
is blocked by
|
Standardized Virtualization Formats |
|
is blocked by
|
Cloud Access Security Broker (CASB) |
|
is blocked by
|
Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Compliance Scope |
|
is blocked by
|
Ability To Demonstrate Conformity |
|
is blocked by
|
Conformity Assessment |
|
is blocked by
|
Conformity Monitoring |
|
is blocked by
|
Functional Review Of Security, Compliance & Resilience Controls |
|
is blocked by
|
Account Lockout |
|
is blocked by
|
Concurrent Session Control |
|
is blocked by
|
Voice Over Internet Protocol (VoIP) Security |
|
is blocked by
|
Retention Of Previous Configurations |
|
is blocked by
|
Network Device Configuration File Synchronization |
|
is blocked by
|
Production Software Repository |
|
is blocked by
|
Software Development Repository |
|
is blocked by
|
Hypervisor Access |
|
is blocked by
|
Control Assurance Automation (CAA) Change Control |
|
is blocked by
|
Continuous Monitoring Policy |
|
is blocked by
|
Continuous Monitoring |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Monitoring |
|
is blocked by
|
Centralized Management of Event Log & Security-Relevant Telemetry Content |
|
is blocked by
|
Analyze and Prioritize Monitoring Requirements |
|
is blocked by
|
Audit Level Adjustments |
|
is blocked by
|
System Generated Event Logs & Security-Relevant Telemetry |
|
is blocked by
|
System-Wide / Time-Correlated Audit Trail |
|
is blocked by
|
Content of Event Logs |
|
is blocked by
|
Audit Trails |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Storage Capacity |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Storage Capacity Alerting |
|
is blocked by
|
Time Stamps |
|
is blocked by
|
Synchronization With Authoritative Time Source |
|
is blocked by
|
Protection of Event Logs & Security-Relevant Telemetry |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Backup on Separate Physical Systems / Components |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Access by Subset of Privileged Users |
|
is blocked by
|
Cryptographic Protection of Event Logs & Security-Relevant Telemetry |
|
is blocked by
|
Dual Authorization for Event Log & Security-Relevant Telemetry Movement |
|
is blocked by
|
Write Once Read Many (WORM) Event Log Generation |
|
is blocked by
|
Event Log & Security-Relevant Telemetry Retention |
|
is blocked by
|
Host Intrusion Detection & Prevention Systems (HIDS & HIPS) Monitoring |
|
is blocked by
|
De-Militarized Zone (DMZ) Monitoring |
|
is blocked by
|
Wireless Network Monitoring |
|
is blocked by
|
Verbosity Logging for Boundary Devices |
|
is blocked by
|
Response To Event Log Processing Failures |
|
is blocked by
|
Real-Time Alerts of Event Logging Failure |
|
is blocked by
|
Alternate Event Logging Capability |
|
is blocked by
|
Cryptographic Management |
|
is blocked by
|
Encrypting Offline Storage |
|
is blocked by
|
Public Key Infrastructure (PKI) |
|
is blocked by
|
Public Key Infrastructure (PKI) Availability |
|
is blocked by
|
Cryptographic Key Management |
|
is blocked by
|
Symmetric Keys |
|
is blocked by
|
Asymmetric Keys |
|
is blocked by
|
Cryptographic Key Loss or Change |
|
is blocked by
|
Control & Distribution of Cryptographic Keys |
|
is blocked by
|
Data Protection |
|
is blocked by
|
Sensitive / Regulated Data Protection |
|
is blocked by
|
Making Sensitive / Regulated Data Unreadable In Storage |
|
is blocked by
|
Media Storage |
|
is blocked by
|
Physically Secure All Media Containing Sensitive / Regulated Data |
|
is blocked by
|
Media Transportation |
|
is blocked by
|
Dual Authorization for Sensitive / Regulated Data Destruction |
|
is blocked by
|
Electronic Discovery (eDiscovery) |
|
is blocked by
|
Media & Data Retention |
|
is blocked by
|
Archived Data Set Retention |
|
is blocked by
|
Logical Data Location |
|
is blocked by
|
Automated Tools to Support Logical Data Location |
|
is blocked by
|
Geolocation Requirements for Processing, Storage and Service Locations |
|
is blocked by
|
Data Localization |
|
is blocked by
|
Separate Operating Environments For Embedded Technologies |
|
is blocked by
|
Internet of Things (IOT) |
|
is blocked by
|
Operational Technology (OT) |
|
is blocked by
|
Prevent Alterations |
|
is blocked by
|
Embedded Technology Maintenance |
|
is blocked by
|
Resilience To Outages |
|
is blocked by
|
Power Level Monitoring |
|
is blocked by
|
Embedded Technology Reviews |
|
is blocked by
|
Message Queuing Telemetry Transport (MQTT) Security |
|
is blocked by
|
Remote Management of Embedded Technologies |
|
is blocked by
|
Restrict Communications |
|
is blocked by
|
Authorized Communications |
|
is blocked by
|
Certificate-Based Authentication |
|
is blocked by
|
Chip-To-Cloud Security |
|
is blocked by
|
Real-Time Operating System (RTOS) Security |
|
is blocked by
|
Safety Instrumented Function (SIF) |
|
is blocked by
|
Endpoint Protection Mechanisms |
|
is blocked by
|
Malicious Code Protection (Antimalware) |
|
is blocked by
|
Always On Antimalware Protection |
|
is blocked by
|
Heuristic / Nonsignature-Based Malware Detection |
|
is blocked by
|
Software Firewall |
|
is blocked by
|
Unified Endpoint Device Management (UEDM) |
|
is blocked by
|
Endpoint Detection & Response (EDR) |
|
is blocked by
|
Extended Detection & Response (XDR) |
|
is blocked by
|
Boot Process Integrity |
|
is blocked by
|
Protection of Boot Firmware |
|
is blocked by
|
Host Intrusion Detection and Prevention Systems (HIDS / HIPS) |
|
is blocked by
|
Mobile Code |
|
is blocked by
|
Malicious Link & File Protections |
|
is blocked by
|
Technology Use Restrictions |
|
is blocked by
|
Use of Critical Technologies |
|
is blocked by
|
Use of Mobile Devices |
|
is blocked by
|
Incompatible Roles |
|
is blocked by
|
Identity & Access Management (IAM) |
|
is blocked by
|
Authenticate, Authorize and Audit (AAA) |
|
is blocked by
|
Identity Providers (IdP) & Authorization Servers |
|
is blocked by
|
Attribute-Based Access Control (ABAC) |
|
is blocked by
|
Real-Time Access Decisions |
|
is blocked by
|
Access Profile Rules |
|
is blocked by
|
Account Management |
|
is blocked by
|
Automated System Account Management (Directory Services) |
|
is blocked by
|
Authorized Accounts |
|
is blocked by
|
User & Service Account Inventories |
|
is blocked by
|
Disable Inactive Accounts |
|
is blocked by
|
Account Disabling for High Risk Individuals |
|
is blocked by
|
Automated Audit Actions |
|
is blocked by
|
Account Separation Between Infrastructure Environments |
|
is blocked by
|
Multiple System Accounts |
|
is blocked by
|
Management Approval For New or Changed Accounts |
|
is blocked by
|
Management Approval For Privileged Accounts |
|
is blocked by
|
Privileged Account Management (PAM) |
|
is blocked by
|
Privileged Account Inventories |
|
is blocked by
|
Privileged Account Separation |
|
is blocked by
|
Dedicated Privileged Account |
|
is blocked by
|
Privileged Command Execution |
|
is blocked by
|
Manual Override |
|
is blocked by
|
Emergency Accounts |
|
is blocked by
|
Removal of Temporary / Emergency Accounts |
|
is blocked by
|
Periodic Review of Individual & Service Account Privileges |
|
is blocked by
|
No Embedded Unencrypted Static Authenticators |
|
is blocked by
|
Default Authenticators |
|
is blocked by
|
Expiration of Cached Authenticators |
|
is blocked by
|
Password-Based Authentication |
|
is blocked by
|
Automated Support For Password Strength |
|
is blocked by
|
Password Managers |
|
is blocked by
|
Passkeys |
|
is blocked by
|
Biometric Authentication |
|
is blocked by
|
PKI-Based Authentication |
|
is blocked by
|
Hardware Token-Based Authentication |
|
is blocked by
|
Authenticator Feedback |
|
is blocked by
|
Restrictions on Shared Groups / Accounts |
|
is blocked by
|
Reference Monitor |
|
is blocked by
|
Use of Privileged Utility Programs |
|
is blocked by
|
Dual Authorization for Privileged Commands |
|
is blocked by
|
Prohibit Non-Privileged Users from Executing Privileged Functions |
|
is blocked by
|
Authorize Access to Security Functions |
|
is blocked by
|
Non-Privileged Access for Non-Security Functions |
|
is blocked by
|
Network Access to Privileged Commands |
|
is blocked by
|
Privilege Levels for Code Execution |
|
is blocked by
|
Identification & Authentication for Organizational Users |
|
is blocked by
|
Out-of-Band Authentication (OOBA) |
|
is blocked by
|
Acceptance of PIV Credentials |
|
is blocked by
|
Identification & Authentication for Non-Organizational Users |
|
is blocked by
|
Acceptance of Third-Party Credentials |
|
is blocked by
|
Replay-Resistant Multi-Factor Authentication (MFA) |
|
is blocked by
|
Phishing-Resistant Multi-Factor Authentication (MFA) |
|
is blocked by
|
Out-of-Band (OOB) Multi-Factor Authentication (MFA) |
|
is blocked by
|
Alternative Multi-Factor Authentication (MFA) |
|
is blocked by
|
Multi-Factor Authentication (MFA) For Network Access to Privileged Accounts |
|
is blocked by
|
Multi-Factor Authentication (MFA) For Network Access to Non-Privileged Accounts |
|
is blocked by
|
Multi-Factor Authentication (MFA) For Local Access to Privileged Accounts |
|
is blocked by
|
Cryptographic Module Authentication |
|
is blocked by
|
Hardware Security Modules (HSM) |
|
is blocked by
|
Single Sign-On (SSO) Transparent Authentication |
|
is blocked by
|
Adaptive Identification & Authentication |
|
is blocked by
|
Technology Use Restrictions |
|
is blocked by
|
Use of Critical Technologies |
|
is blocked by
|
Use of Mobile Devices |
|
is blocked by
|
Incompatible Roles |
|
is blocked by
|
Identity & Access Management (IAM) |
|
is blocked by
|
Authenticate, Authorize and Audit (AAA) |
|
is blocked by
|
Identity Providers (IdP) & Authorization Servers |
|
is blocked by
|
Attribute-Based Access Control (ABAC) |
|
is blocked by
|
Real-Time Access Decisions |
|
is blocked by
|
Access Profile Rules |
|
is blocked by
|
Account Management |
|
is blocked by
|
Automated System Account Management (Directory Services) |
|
is blocked by
|
Authorized Accounts |
|
is blocked by
|
User & Service Account Inventories |
|
is blocked by
|
Disable Inactive Accounts |
|
is blocked by
|
Account Disabling for High Risk Individuals |
|
is blocked by
|
Automated Audit Actions |
|
is blocked by
|
Account Separation Between Infrastructure Environments |
|
is blocked by
|
Compliance As Code (CAC) Credentials Management |
|
is blocked by
|
Incident Handling |
|
is blocked by
|
Dynamic Reconfiguration |
|
is blocked by
|
Automatic Disabling of Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Automation Support of Availability of Information / Support |
|
is blocked by
|
Post-Sensitive / Regulated Data Spill Operations |
|
is blocked by
|
Post-Incident Technology Assets, Applications and Services (TAAS) Validation |
|
is blocked by
|
Plan / Coordinate with Other Organizational Entities |
|
is blocked by
|
Maintenance Policy |
|
is blocked by
|
Maintenance Operations |
|
is blocked by
|
Controlled Maintenance |
|
is blocked by
|
Timely Maintenance |
|
is blocked by
|
Preventative Maintenance |
|
is blocked by
|
Predictive Maintenance |
|
is blocked by
|
Maintenance Validation |
|
is blocked by
|
Maintenance Monitoring |
|
is blocked by
|
Prevent Unauthorized Removal |
|
is blocked by
|
Automated Maintenance Activities |
|
is blocked by
|
Automated Support For Predictive Maintenance |
|
is blocked by
|
Maintenance Tools |
|
is blocked by
|
Inspect Media |
|
is blocked by
|
Restrict Tool Usage |
|
is blocked by
|
Remote Maintenance |
|
is blocked by
|
Non-System Related Maintenance |
|
is blocked by
|
Full Device & Container-Based Encryption |
|
is blocked by
|
Personally-Owned Mobile Devices |
|
is blocked by
|
Organization-Owned Mobile Devices |
|
is blocked by
|
Network Security Policy |
|
is blocked by
|
Network Security Controls (NSC) |
|
is blocked by
|
Boundary Protection |
|
is blocked by
|
Limit Network Connections |
|
is blocked by
|
External Telecommunications Services |
|
is blocked by
|
Protocol Compliance Enforcement |
|
is blocked by
|
Bandwidth Control |
|
is blocked by
|
Deny Traffic by Default & Allow Traffic by Exception |
|
is blocked by
|
External System Connections |
|
is blocked by
|
Network Segmentation (macrosegmentation) |
|
is blocked by
|
Security Management Subnets |
|
is blocked by
|
Separate Subnets To Isolate Functions |
|
is blocked by
|
Sensitive / Regulated Data Enclave (Secure Zone) |
|
is blocked by
|
Segregation From Enterprise Services |
|
is blocked by
|
Network Device Plane Segmentation |
|
is blocked by
|
Virtual Local Area Network (VLAN) Separation |
|
is blocked by
|
Compliance As Code (CAC) Credentials Management |
|
is blocked by
|
Incident Handling |
|
is blocked by
|
Dynamic Reconfiguration |
|
is blocked by
|
Automatic Disabling of Technology Assets, Applications and/or Services (TAAS) |
|
is blocked by
|
Automation Support of Availability of Information / Support |
|
is blocked by
|
Post-Sensitive / Regulated Data Spill Operations |
|
is blocked by
|
Post-Incident Technology Assets, Applications and Services (TAAS) Validation |
|
is blocked by
|
Microsegmentation |
|
is blocked by
|
Software Defined Networking (SDN) |
|
is blocked by
|
Domain Name Service (DNS) Resolution |
|
is blocked by
|
Architecture & Provisioning for Name / Address Resolution Service |
|
is blocked by
|
Secure Name / Address Resolution Service (Recursive or Caching Resolver) |
|
is blocked by
|
Domain Registrar Security |
|
is blocked by
|
Zero Trust Architecture (ZTA) |
|
is blocked by
|
Policy Decision Point (PDP) |
|
is blocked by
|
Network Access Control (NAC) |
|
is blocked by
|
Route Internal Traffic to Proxy Servers |
|
is blocked by
|
Application Proxy |
|
is blocked by
|
Denial of Service (DoS) Protection |
|
is blocked by
|
Remote Access |
|
is blocked by
|
Remote Access Pathways |
|
is blocked by
|
Remote Access Endpoint Security Validation |
|
is blocked by
|
Network Intrusion Detection / Prevention Systems (NIDS / NIPS) |
|
is blocked by
|
Wireless Intrusion Detection / Prevention Systems (WIDS / WIPS) Deployment |
|
is blocked by
|
Demilitarized Zones (DMZ) |
|
is blocked by
|
Web Application Firewall (WAF) |
|
is blocked by
|
Application Programming Interface (API) Security |
|
is blocked by
|
API Gateway |
|
is blocked by
|
Wireless Link Protection |
|
is blocked by
|
Email Domain Reputation Protections |
|
is blocked by
|
Electronic Messaging |
|
is blocked by
|
Phishing & Spam Protection |
|
is blocked by
|
Email Content Protections |
|
is blocked by
|
Data Type Identifiers |
|
is blocked by
|
Decomposition Into Policy-Related Subcomponents |
|
is blocked by
|
Detection of Unsanctioned Information |
|
is blocked by
|
Cross Domain Content Transfer |
|
is blocked by
|
Isolation of System Components |
|
is blocked by
|
Dynamic Isolation & Segregation (Sandboxing) |
|
is blocked by
|
Host Containment |
|
is blocked by
|
Resource Containment |
|
is blocked by
|
Conceal / Randomize Communications |
|
is blocked by
|
Object Security Attributes |
|
is blocked by
|
Embedded Data Types |
|
is blocked by
|
Metadata |
|
is blocked by
|
Side Channel Attack Prevention |
|
is blocked by
|
Physical & Environmental Protections |
|
is blocked by
|
Zone-Based Physical Security |
|
is blocked by
|
Alternate Work Site |
|
is blocked by
|
Physical Access Control |
|
is blocked by
|
Controlled Ingress & Egress Points |
|
is blocked by
|
Physical Security of Offices, Rooms & Facilities |
|
is blocked by
|
Working in Secure Areas |
|
is blocked by
|
Access To Critical Systems |
|
is blocked by
|
Lockable Physical Casings |
|
is blocked by
|
Monitoring Physical Access |
|
is blocked by
|
Intrusion Alarms / Surveillance Equipment |
|
is blocked by
|
Monitoring Physical Access To Critical Systems |
|
is blocked by
|
Visitor Control |
|
is blocked by
|
Equipment Siting & Protection |
|
is blocked by
|
Transmission Medium Security |
|
is blocked by
|
Asset Monitoring and Tracking |
|
is blocked by
|
Supporting Utilities |
|
is blocked by
|
Automatic Voltage Controls |
|
is blocked by
|
Emergency Shutoff |
|
is blocked by
|
Emergency Power |
|
is blocked by
|
Water Damage Protection |
|
is blocked by
|
Automation Support for Water Damage Protection |
|
is blocked by
|
Redundant Cabling |
|
is blocked by
|
Fire Protection |
|
is blocked by
|
Fire Detection Devices |
|
is blocked by
|
Microsegmentation |
|
is blocked by
|
Software Defined Networking (SDN) |
|
is blocked by
|
Domain Name Service (DNS) Resolution |
|
is blocked by
|
Architecture & Provisioning for Name / Address Resolution Service |
|
is blocked by
|
Secure Name / Address Resolution Service (Recursive or Caching Resolver) |
|
is blocked by
|
Domain Registrar Security |
|
is blocked by
|
Zero Trust Architecture (ZTA) |
|
is blocked by
|
Policy Decision Point (PDP) |
|
is blocked by
|
Network Access Control (NAC) |
|
is blocked by
|
Route Internal Traffic to Proxy Servers |
|
is blocked by
|
Application Proxy |
|
is blocked by
|
Denial of Service (DoS) Protection |
|
is blocked by
|
Remote Access |
|
is blocked by
|
Remote Access Pathways |
|
is blocked by
|
Remote Access Endpoint Security Validation |
|
is blocked by
|
Network Intrusion Detection / Prevention Systems (NIDS / NIPS) |
|
is blocked by
|
Wireless Intrusion Detection / Prevention Systems (WIDS / WIPS) Deployment |
|
is blocked by
|
Demilitarized Zones (DMZ) |
|
is blocked by
|
Web Application Firewall (WAF) |
|
is blocked by
|
Application Programming Interface (API) Security |
|
is blocked by
|
API Gateway |
|
is blocked by
|
Wireless Link Protection |
|
is blocked by
|
Email Domain Reputation Protections |
|
is blocked by
|
Electronic Messaging |
|
is blocked by
|
Phishing & Spam Protection |
|
is blocked by
|
Fire Suppression Devices |
|
is blocked by
|
Automatic Fire Suppression |
|
is blocked by
|
Temperature & Humidity Controls Monitoring |
|
is blocked by
|
Temperature & Humidity Controls Alerting |
|
is blocked by
|
Electromagnetic Pulse (EMP) Protection |
|
is blocked by
|
Personal Data (PD) Retention & Disposal |
|
is blocked by
|
Purpose Validation |
|
is blocked by
|
Secure Development Life Cycle (SDLC) Management |
|
is blocked by
|
Security, Compliance & Resilience In Project Management |
|
is blocked by
|
Project Management Stage Gates |
|
is blocked by
|
Security, Compliance & Resilience Requirements Definition |
|
is blocked by
|
Business Process Definition |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Transition Planning & Hybrid Mode Support |
|
is blocked by
|
Crypto-Agility Architecture |
|
is blocked by
|
Post-Quantum Cryptography (PQC) Key Management |
|
is blocked by
|
Fire Suppression Devices |
|
is blocked by
|
Automatic Fire Suppression |
|
is blocked by
|
Temperature & Humidity Controls Monitoring |
|
is blocked by
|
Temperature & Humidity Controls Alerting |
|
is blocked by
|
Electromagnetic Pulse (EMP) Protection |
|
is blocked by
|
Risk-Based Security Categorization |
|
is blocked by
|
Impact-Level Prioritization |
|
is blocked by
|
Business Impact Analysis (BIA) |
|
is blocked by
|
Risk Assessment |
|
is blocked by
|
Security, Compliance & Resilience Aware Design |
|
is blocked by
|
Achieving Security, Compliance & Resilience Requirements |
|
is blocked by
|
Secure Architecture Principles |
|
is blocked by
|
Secure Engineering Principles |
|
is blocked by
|
Defense-In-Depth (DiD) Architecture |
|
is blocked by
|
System Partitioning |
|
is blocked by
|
Process Isolation |
|
is blocked by
|
Fail Secure |
|
is blocked by
|
Fail Safe |
|
is blocked by
|
Heterogeneity |
|
is blocked by
|
Virtualization Techniques |
|
is blocked by
|
Change Processing & Storage Locations |
|
is blocked by
|
Distributed Processing & Storage |
|
is blocked by
|
Clock Synchronization |
|
is blocked by
|
System Administrative Processes |
|
is blocked by
|
Database Administrative Processes |
|
is blocked by
|
Service Delivery (Business Process Support) |
|
is blocked by
|
Development Methods, Techniques & Processes |
|
is blocked by
|
Secure Settings By Default |
|
is blocked by
|
Secure Software Development Practices (SSDP) |
|
is blocked by
|
Customized Development of Critical Components |
|
is blocked by
|
Input Data Validation |
|
is blocked by
|
Error Handling |
|
is blocked by
|
Minimizing Attack Surfaces |
|
is blocked by
|
Risk-Based Security Categorization |
|
is blocked by
|
Impact-Level Prioritization |
|
is blocked by
|
Business Impact Analysis (BIA) |
|
is blocked by
|
Risk Assessment |
|
is blocked by
|
Security, Compliance & Resilience Aware Design |
|
is blocked by
|
Achieving Security, Compliance & Resilience Requirements |
|
is blocked by
|
Secure Architecture Principles |
|
is blocked by
|
Secure Engineering Principles |
|
is blocked by
|
Defense-In-Depth (DiD) Architecture |
|
is blocked by
|
System Partitioning |
|
is blocked by
|
Process Isolation |
|
is blocked by
|
Fail Secure |
|
is blocked by
|
Fail Safe |
|
is blocked by
|
Malware Testing Prior to Release |
|
is blocked by
|
Product Testing & Reviews |
|
is blocked by
|
Separation of Development, Testing and Operational Environments |
|
is blocked by
|
Approved Code |
|
is blocked by
|
Archiving Software Releases |
|
is blocked by
|
Software Escrow |
|
is blocked by
|
Malformed Input Testing |
|
is blocked by
|
Developer Configuration Management |
|
is blocked by
|
Supplier Diversity |
|
is blocked by
|
Adequate Supply |
|
is blocked by
|
Provider Contingency Plan |
|
is blocked by
|
Managing Changes To Third-Party Services |
|
is blocked by
|
Third-Party Incident Response & Recovery Capabilities |
|
is blocked by
|
Security Compromise Notification Agreements |
|
is blocked by
|
Terminating Third-Party Relationships |
|
is blocked by
|
Third-Party Transition Planning |
|
is blocked by
|
Technology Assets, Applications, Services and Data (TAASD) Portability |
|
is blocked by
|
Third-Party Knowledge & Operational Transfer |
|
is blocked by
|
Third-Party Exit Contingencies |
|
is blocked by
|
Pre-Deployment Patch Testing |
|
is blocked by
|
Web Application Framework |
|
is blocked by
|
Client-Facing Web Services |
|
is blocked by
|
Malware Testing Prior to Release |
|
is blocked by
|
Product Testing & Reviews |
|
is blocked by
|
Separation of Development, Testing and Operational Environments |
|
is blocked by
|
Approved Code |
|
is blocked by
|
Archiving Software Releases |
|
is blocked by
|
Software Escrow |
|
is blocked by
|
Malformed Input Testing |
|
is blocked by
|
Developer Configuration Management |
|
is blocked by
|
Supplier Diversity |
|
is blocked by
|
Adequate Supply |
|
is blocked by
|
Malware Testing Prior to Release |
|
is blocked by
|
Product Testing & Reviews |
|
is blocked by
|
Separation of Development, Testing and Operational Environments |
|
is blocked by
|
Approved Code |
|
is blocked by
|
Archiving Software Releases |
|
is blocked by
|
Software Escrow |
|
is blocked by
|
Malformed Input Testing |
|
is blocked by
|
Developer Configuration Management |
|
is blocked by
|
Supplier Diversity |
|
is blocked by
|
Adequate Supply |