Unauthorized Retention / Inability to Dispose of Data

Legături
Tip de legătură	Tichet
is blocked by	Business As Usual (BAU) Security, Compliance & Resilience Practices
is blocked by	Assurance
is blocked by	Novel Risk Assessment Methods & Technologies
is blocked by	Asset Management Policy
is blocked by	Asset Governance
is blocked by	Standardized Naming Convention
is blocked by	Asset Inventories
is blocked by	Updates During Installations / Removals
is blocked by	Component Duplication Avoidance
is blocked by	Identify Critical Assets
is blocked by	Technology Assets, Applications, Services and/or Data (TAASD) Criticality Ratings
is blocked by	Asset-Service Dependencies
is blocked by	Stakeholder Identification & Involvement
is blocked by	Comprehensive Asset Inventory Management
is blocked by	Asset Discovery
is blocked by	Approved Technologies
is blocked by	Automated Unauthorized Component Detection
is blocked by	Prohibited Technology Assets, Applications and/or Services (TAAS)
is blocked by	Software Licensing Restrictions
is blocked by	Provenance
is blocked by	Asset Categorization
is blocked by	High-Risk Technology Assets, Applications and/or Services (TAAS) Categorization
is blocked by	Asset Scope Classification
is blocked by	Network Diagrams & Data Flow Diagrams (DFDs)
is blocked by	Security of Assets & Media
is blocked by	Technology Assets, Applications, Services and/or Data (TAASD) Storage
is blocked by	Unattended End-User Equipment
is blocked by	Kiosks & Point of Interaction (PoI) Devices
is blocked by	Secure Disposal, Destruction or Re-Use of Equipment
is blocked by	Return of Assets
is blocked by	Removal of Assets
is blocked by	Use of Personal Devices
is blocked by	Use of Third-Party Devices
is blocked by	Bring Your Own Device (BYOD) Usage
is blocked by	Usage Parameters
is blocked by	Technology Asset Inspections
is blocked by	Physical Tampering Detection
is blocked by	Roots of Trust Protection
is blocked by	Telecommunications Equipment
is blocked by	Business Continuity & Disaster Recovery Policy
is blocked by	Business Continuity Management System (BCMS)
is blocked by	Defined Operational Resilience Requirements
is blocked by	Operational Resilience Capabilities
is blocked by	Business Continuity & Disaster Recovery (BC/DR) Plans
is blocked by	Recovery Time / Point Objectives (RTO / RPO)
is blocked by	Recovery Operations Criteria
is blocked by	Recovery Operations Communications
is blocked by	Alternate Communications Channels
is blocked by	Ongoing Contingency Planning
is blocked by	Resume All Missions & Business Functions
is blocked by	Continue Essential Mission & Business Functions
is blocked by	Resume Essential Missions & Business Functions
is blocked by	Contingency Training
is blocked by	Simulated Events
is blocked by	Automated Training Environments
is blocked by	Contingency Plan Testing & Exercises
is blocked by	Coordinated Testing with Related Plans
is blocked by	Contingency Plan Testing For Alternate Storage & Processing Sites
is blocked by	Contingency Plan Root Cause Analysis (RCA) & Lessons Learned
is blocked by	Alternate Storage Site
is blocked by	Separation from Primary Storage Site
is blocked by	Primary Storage Site Accessibility
is blocked by	Alternate Processing Site
is blocked by	Alternate Site Priority of Service
is blocked by	Preparation for Use
is blocked by	Inability to Return to Primary Site
is blocked by	Capacity & Performance Planning Policy
is blocked by	Capacity & Performance Management
is blocked by	Capacity Planning
is blocked by	Resource Priority
is blocked by	Change Management Policy
is blocked by	Change Management Program
is blocked by	Configuration Change Control
is blocked by	Prohibition Of Changes
is blocked by	Access Restriction For Change
is blocked by	Role-Based Permissions To Implement Changes
is blocked by	Dual Authorization for Changes To Critical / Sensitive Technology Assets, Applications and/or Services (TAAS)
is blocked by	Dual Approval For High-Impact Environments
is blocked by	Security, Compliance & Resilience Representative for Asset Lifecycle Changes
is blocked by	Security Impact Analysis for Changes
is blocked by	Test, Validate & Document Changes
is blocked by	Cloud Security Policy
is blocked by	Cloud Services
is blocked by	Cloud Infrastructure Onboarding
is blocked by	Cloud Infrastructure Offboarding
is blocked by	Cloud Security Architecture
is blocked by	Cloud Infrastructure Security Subnet
is blocked by	Multi-Tenant Environments
is blocked by	Data Handling & Portability
is blocked by	Standardized Virtualization Formats
is blocked by	Sensitive Data In Public Cloud Providers
is blocked by	Cloud Access Security Broker (CASB)
is blocked by	Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS)
is blocked by	Compliance Policy
is blocked by	Statutory, Regulatory & Contractual Compliance
is blocked by	Compliance Scope
is blocked by	Executive Leadership Oversight of Security, Compliance & Resilience Controls
is blocked by	Internal Audit Function
is blocked by	Independent Assessors
is blocked by	Configuration Management Policy
is blocked by	Configuration Management Program
is blocked by	Least Functionality
is blocked by	Baseline Tailoring
is blocked by	Development & Test Environment Configurations
is blocked by	Secure Baseline Configurations
is blocked by	Account Lockout
is blocked by	Concurrent Session Control
is blocked by	Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas
is blocked by	Physically Disable or Remove Capabilities
is blocked by	Approved Configuration Deviations
is blocked by	Baseline Configuration Reviews & Updates
is blocked by	Periodic Configuration Reviews
is blocked by	Respond To Unauthorized Changes
is blocked by	Continuous Monitoring Policy
is blocked by	Continuous Monitoring
is blocked by	Event Log & Security-Relevant Telemetry Monitoring
is blocked by	Centralized Management of Event Log & Security-Relevant Telemetry Content
is blocked by	Analyze and Prioritize Monitoring Requirements
is blocked by	Audit Level Adjustments
is blocked by	System Generated Event Logs & Security-Relevant Telemetry
is blocked by	Centralized Collection of Event Logs & Security-Relevant Telemetry
is blocked by	Centralized Event Log & Security-Relevant Telemetry Review & Analysis
is blocked by	Event Log & Security-Relevant Telemetry Analysis & Triage
is blocked by	Monitoring Reporting
is blocked by	Trend Analysis Reporting
is blocked by	Alert Threshold Tuning
is blocked by	Correlate Monitoring Information
is blocked by	Integration of Scanning & Other Monitoring Information
is blocked by	Correlation with Physical Monitoring
is blocked by	Content of Event Logs
is blocked by	Audit Trails
is blocked by	Event Log & Security-Relevant Telemetry Storage Capacity
is blocked by	Time Stamps
is blocked by	Synchronization With Authoritative Time Source
is blocked by	Protection of Event Logs & Security-Relevant Telemetry
is blocked by	Event Log & Security-Relevant Telemetry Retention
is blocked by	Privileged Functions Logging
is blocked by	Account Creation and Modification Logging
is blocked by	Inventory of Technology Asset Event Logging
is blocked by	Anomalous Behavior
is blocked by	Unusual Transactions
is blocked by	Monitoring for Indicators of Compromise (IOC)
is blocked by	Deactivated Account Activity
is blocked by	Individuals Posing Greater Risk
is blocked by	Cryptographic Protections Policy
is blocked by	Use of Cryptographic Controls
is blocked by	Cryptographic Management
is blocked by	Cryptographic Cipher Suites and Protocols Inventory
is blocked by	Encrypting Data In Transit
is blocked by	Integrity of Data In Transit
is blocked by	Encrypting Data At Rest
is blocked by	Database Encryption
is blocked by	Public Key Infrastructure (PKI)
is blocked by	Public Key Infrastructure (PKI) Availability
is blocked by	Cryptographic Key Management
is blocked by	Transmission of Cybersecurity & Data Protection Attributes
is blocked by	Certificate Authorities
is blocked by	Data Classification & Handling Policy
is blocked by	Data Protection
is blocked by	Sensitive / Regulated Data Governance
is blocked by	Data Catalog
is blocked by	Data & Asset Classification
is blocked by	Highest Classification Level
is blocked by	Sensitive Data Inventories
is blocked by	Periodic Scans for Sensitive / Regulated Data
is blocked by	Data Stewardship
is blocked by	Defining Access Authorizations for Sensitive / Regulated Data
is blocked by	Sensitive / Regulated Data Protection
is blocked by	Restrict Sensitive / Regulated Data Access To Authorized Individuals
is blocked by	Limitations on Use & Distribution of Sensitive / Regulated Data
is blocked by	Sensitive / Regulated Data Access Mapping
is blocked by	Sensitive / Regulated Media Records
is blocked by	Media Marking
is blocked by	Masking Displayed Sensitive / Regulated Data
is blocked by	Media Storage
is blocked by	Data Storage Location Reviews
is blocked by	Physically Secure All Media Containing Sensitive / Regulated Data
is blocked by	Storing Authentication Data
is blocked by	Media Transportation
is blocked by	Digital & Non-Digital Media Disposal
is blocked by	Digital Media Sanitization
is blocked by	Sanitization of Sensitive / Regulated Data
is blocked by	Digital Media Sanitization Documentation
is blocked by	Digital Media Sanitization Equipment Testing
is blocked by	Digital Media Use Restrictions
is blocked by	Portable Storage Devices
is blocked by	Removable Media Security
is blocked by	Use of External Technology Assets, Applications and/or Services (TAAS)
is blocked by	Limits of Authorized Use To Process, Store and/or Transmit Data
is blocked by	Protecting Sensitive / Regulated Data on External Technology Assets, Applications and/or Services (TAAS)
is blocked by	Non-Organizationally Owned Technology Assets, Applications and/or Services (TAAS)
is blocked by	Information Search & Retrieval
is blocked by	Electronic Discovery (eDiscovery)
is blocked by	Publicly Accessible Content
is blocked by	Data Mining Protection
is blocked by	Ad-Hoc Transfers
is blocked by	Transfer Authorizations
is blocked by	Media & Data Retention
is blocked by	Embedded Technology Policy
is blocked by	Embedded Technology Security Program
is blocked by	Separate Operating Environments For Embedded Technologies
is blocked by	Embedded Technology Inventory Management
is blocked by	Internet of Things (IOT)
is blocked by	Operational Technology (OT)
is blocked by	Interface Security
is blocked by	Embedded Technology Configuration Monitoring
is blocked by	Prevent Alterations
is blocked by	Embedded Technology Maintenance
is blocked by	Resilience To Outages
is blocked by	Power Level Monitoring
is blocked by	Embedded Technology Reviews
is blocked by	Message Queuing Telemetry Transport (MQTT) Security
is blocked by	Remote Management of Embedded Technologies
is blocked by	Restrict Communications
is blocked by	Authorized Communications
is blocked by	Operating Environment Certification
is blocked by	Safety Assessment
is blocked by	Endpoint Security Policy
is blocked by	Endpoint Device Management (EDM)
is blocked by	Endpoint Protection Mechanisms
is blocked by	Centralized Management of Endpoint Protection Mechanisms
is blocked by	Automatic Endpoint Protection Mechanism Updates
is blocked by	Malicious Code Protection (Antimalware)
is blocked by	Always On Antimalware Protection
is blocked by	Heuristic / Nonsignature-Based Malware Detection
is blocked by	Antimalware Protection Mechanism Testing
is blocked by	Documented Endpoint Security Protection Measures
is blocked by	Software Firewall
is blocked by	Unified Endpoint Device Management (UEDM)
is blocked by	Endpoint Detection & Response (EDR)
is blocked by	Extended Detection & Response (XDR)
is blocked by	Endpoint File Integrity Monitoring (FIM)
is blocked by	Host Intrusion Detection and Prevention Systems (HIDS / HIPS)
is blocked by	Mobile Code
is blocked by	Collaborative Computing Devices
is blocked by	Collaborative Computing Capability Disabling / Removal In Secure Work Areas
is blocked by	Human Resources Security Policy
is blocked by	Citizenship Requirements
is blocked by	Confidentiality Agreements
is blocked by	Personnel Transfer
is blocked by	Personnel Termination
is blocked by	Automated Employment Status Notifications
is blocked by	Separation of Duties (SoD)
is blocked by	Incompatible Roles
is blocked by	Identification & Authentication Policy
is blocked by	Identity & Access Management (IAM)
is blocked by	Authenticate, Authorize and Audit (AAA)
is blocked by	Replay-Resistant Authentication
is blocked by	Retain Access Records
is blocked by	Identity Providers (IdP) & Authorization Servers
is blocked by	User Provisioning & De-Provisioning
is blocked by	Change of Roles & Duties
is blocked by	Termination of Employment
is blocked by	Identity Proofing (Identity Verification)
is blocked by	In-Person or Trusted Third-Party Registration
is blocked by	Identity Evidence
is blocked by	Role-Based Access Control (RBAC)
is blocked by	Attribute-Based Access Control (ABAC)
is blocked by	Real-Time Access Decisions
is blocked by	Access Profile Rules
is blocked by	Account Management
is blocked by	Management Approval For New or Changed Accounts
is blocked by	Management Approval For Privileged Accounts
is blocked by	Privileged Account Management (PAM)
is blocked by	Privileged Account Inventories
is blocked by	Privileged Account Separation
is blocked by	Dedicated Privileged Account
is blocked by	Privileged Command Execution
is blocked by	Manual Override
is blocked by	Emergency Accounts
is blocked by	Periodic Review of Individual & Service Account Privileges
is blocked by	System Account Reviews
is blocked by	User Identity (ID) Management
is blocked by	Standardized Identifier Management (User Names)
is blocked by	Employment Status Identification
is blocked by	Citizenship Identification
is blocked by	Authenticator Management
is blocked by	Password-Based Authentication
is blocked by	Automated Support For Password Strength
is blocked by	Password Managers
is blocked by	Passkeys
is blocked by	Biometric Authentication
is blocked by	PKI-Based Authentication
is blocked by	Hardware Token-Based Authentication
is blocked by	Authenticator Feedback
is blocked by	Restrictions on Shared Groups / Accounts
is blocked by	Group Authentication
is blocked by	User Responsibilities for Account Management
is blocked by	Credential Sharing
is blocked by	Reference Monitor
is blocked by	Access Enforcement
is blocked by	Access To Sensitive / Regulated Data
is blocked by	Use of Privileged Utility Programs
is blocked by	Dedicated Administrative Machines
is blocked by	Dual Authorization for Privileged Commands
is blocked by	Revocation of Access Authorizations
is blocked by	Incident Response Policy
is blocked by	Incident Response Operations
is blocked by	Continuous Incident Response Improvements
is blocked by	Incident Classification & Prioritization
is blocked by	Incident Response Plan (IRP)
is blocked by	Incident Response Capabilities Testing
is blocked by	Incident Response Capabilities Testing Coordination with Related Plans
is blocked by	Simulated Incidents
is blocked by	Public Relations & Reputation Repair
is blocked by	Regulatory & Law Enforcement Contacts
is blocked by	Incident Stakeholder Reporting
is blocked by	Maintenance Policy
is blocked by	Maintenance Operations
is blocked by	Controlled Maintenance
is blocked by	Timely Maintenance
is blocked by	Preventative Maintenance
is blocked by	Mobile Device Management Policy
is blocked by	Centralized Management Of Mobile Devices
is blocked by	Restricting Access To Authorized Technology Assets, Applications and/or Services (TAAS)
is blocked by	Separate Mobile Device Profiles
is blocked by	Personally-Owned Mobile Devices
is blocked by	Organization-Owned Mobile Devices
is blocked by	Mobile Device Geofencing
is blocked by	Remote Purging
is blocked by	Mobile Device Tampering
is blocked by	Network Security Policy
is blocked by	Network Security Controls (NSC)
is blocked by	Boundary Protection
is blocked by	Limit Network Connections
is blocked by	External Telecommunications Services
is blocked by	Prevent Discovery of Internal Information
is blocked by	Direct Internet Access Restrictions
is blocked by	Prevent Unauthorized Exfiltration
is blocked by	Protocol Compliance Enforcement
is blocked by	Domain Name Verification
is blocked by	Bandwidth Control
is blocked by	Data Flow Enforcement – Access Control Lists (ACLs)
is blocked by	Deny Traffic by Default & Allow Traffic by Exception
is blocked by	Human Reviews
is blocked by	Interconnection Security Agreements (ISAs)
is blocked by	External System Connections
is blocked by	Internal System Connections
is blocked by	Network Segmentation (macrosegmentation)
is blocked by	Security Management Subnets
is blocked by	Out-of-Band Channels
is blocked by	Separate Subnets To Isolate Functions
is blocked by	Sensitive / Regulated Data Enclave (Secure Zone)
is blocked by	Segregation From Enterprise Services
is blocked by	Network Device Plane Segmentation
is blocked by	Virtual Local Area Network (VLAN) Separation
is blocked by	Microsegmentation
is blocked by	Software Defined Networking (SDN)
is blocked by	Domain Name Service (DNS) Resolution
is blocked by	Zero Trust Architecture (ZTA)
is blocked by	Policy Decision Point (PDP)
is blocked by	Network Access Control (NAC)
is blocked by	DNS & Content Filtering
is blocked by	Authenticated Proxy
is blocked by	Route Internal Traffic to Proxy Servers
is blocked by	Route Privileged Network Access
is blocked by	Application Proxy
is blocked by	Visibility of Encrypted Communications
is blocked by	Content Check for Encrypted Data
is blocked by	Physical & Environmental Security Policy
is blocked by	Physical Security Plan (PSP)
is blocked by	Alternate Work Site
is blocked by	Physical Access Authorizations
is blocked by	Role-Based Physical Access
is blocked by	Dual Authorization for Physical Access
is blocked by	Physical Access Control
is blocked by	Physical Access Device Inventories
is blocked by	Controlled Ingress & Egress Points
is blocked by	Physical Access Logs
is blocked by	Access Control for Output Devices
is blocked by	Data Privacy Policy
is blocked by	Data Privacy Program
is blocked by	Data Privacy Accountability Structure
is blocked by	Chief Privacy Officer (CPO)
is blocked by	Data Protection Officer (DPO)
is blocked by	Personal Data Process Manager (PDPM)
is blocked by	Data Fiduciary
is blocked by	Privacy-Aware Design
is blocked by	Documenting Data Processing Activities
is blocked by	Personal Data (PD) Lineage
is blocked by	Personal Data (PD) Categories
is blocked by	Inventory of Personal Data (PD)
is blocked by	Personal Data (PD) Inventory Automation Support
is blocked by	Updating Personal Data (PD) Process
is blocked by	Reasonable Data Privacy Practices
is blocked by	Security of Personal Data (PD)
is blocked by	Personal Data (PD) Control Testing, Training & Monitoring
is blocked by	Authority To Collect, Process, Store & Share Personal Data (PD)
is blocked by	Product or Service Delivery Restrictions
is blocked by	Data Privacy Requirements for Contractors & Service Providers
is blocked by	Binding Corporate Rules (BCR)
is blocked by	Information Sharing With Third Parties
is blocked by	Limiting Personal Data (PD) Disclosures
is blocked by	Accounting of Disclosures
is blocked by	Financial Incentives For Personal Data (PD)
is blocked by	Notice of Financial Incentive
is blocked by	Secure Architecture Principles
is blocked by	Alignment With Enterprise Architecture
is blocked by	Secure Engineering Principles
is blocked by	Defense-In-Depth (DiD) Architecture
is blocked by	Application Partitioning
is blocked by	Process Isolation
is blocked by	Security Function Isolation
is blocked by	Hardware Separation
is blocked by	Thread Separation
is blocked by	System Privileges Isolation
is blocked by	Information In Shared Resources
is blocked by	Fail Secure
is blocked by	Fail Safe
is blocked by	Non-Persistence
is blocked by	Information Output Filtering
is blocked by	Memory Protection
is blocked by	Honeypots
is blocked by	Heterogeneity
is blocked by	Security Operations Policy
is blocked by	Operations Security
is blocked by	Security Concept Of Operations (CONOPS)
is blocked by	Standardized Operating Procedures (SOP)
is blocked by	Security Operations Center (SOC)
is blocked by	Technology Development & Acquisition Policy
is blocked by	Technology Development & Acquisition
is blocked by	Software Assurance Maturity Model (SAMM)
is blocked by	Developer Architecture & Design
is blocked by	Programming Language Selection
is blocked by	Secure Software Development Practices (SSDP)
is blocked by	Product Management
is blocked by	Product Conformity Governance
is blocked by	Continuous Monitoring Plan
is blocked by	Ongoing Product Security Support
is blocked by	Integrity Mechanisms for Software / Firmware Updates
is blocked by	Software Release Integrity Verification
is blocked by	Information Assurance Enabled Products
is blocked by	Disclosure of Vulnerabilities
is blocked by	Technical Documentation Artifacts
is blocked by	Product Tampering and Counterfeiting (PTC)
is blocked by	Customized Development of Critical Components
is blocked by	DevSecOps
is blocked by	Input Data Validation
is blocked by	Product Testing & Reviews
is blocked by	Security, Compliance & Resilience Representatives For Product Changes
is blocked by	Secure Development Environments
is blocked by	Library Privileges
is blocked by	Security, Compliance & Resilience Testing Throughout Development
is blocked by	Static Code Analysis
is blocked by	Use of Live Data
is blocked by	Developer Screening
is blocked by	Developer Configuration Management
is blocked by	Developer Threat Analysis & Flaw Remediation
is blocked by	Developer-Provided Training
is blocked by	Software / Firmware Integrity Verification
is blocked by	Hardware Integrity Verification
is blocked by	Bills of Material (BOMs)
is blocked by	Third-Party Management Policy
is blocked by	Third-Party Management
is blocked by	Acquisition Strategies, Tools & Methods
is blocked by	Supply Chain Risk Management (SCRM)
is blocked by	Processes To Address Weaknesses or Deficiencies
is blocked by	Limit Potential Harm
is blocked by	Security, Compliance & Resilience Outsourcing Limitations
is blocked by	Outsourcing Non-Essential Functions or Services
is blocked by	Supplier Diversity
is blocked by	Adequate Supply
is blocked by	Third-Party Inventories
is blocked by	Third-Party Criticality Assessments
is blocked by	Third-Party Risk Assessments & Approvals
is blocked by	Responsible, Accountable, Supportive, Consulted & Informed (RASCI) Matrix
is blocked by	Threat Management Policy
is blocked by	Threat Intelligence Program
is blocked by	Dynamic Threat Awareness
is blocked by	Threat Intelligence Feeds
is blocked by	Threat Intelligence Reporting
is blocked by	Threat Catalog
is blocked by	Material Threats
is blocked by	Threat Analysis
is blocked by	Indicators of Exposure (IOE)
is blocked by	Vulnerability & Patch Management Policy
is blocked by	Vulnerability & Patch Management Program (VPMP)
is blocked by	Attack Surface Scope
is blocked by	Vulnerability Exploitation Analysis
is blocked by	Vulnerability Ranking
is blocked by	Vulnerability Remediation Process
is blocked by	Centralized Management of Flaw Remediation Processes
is blocked by	Continuous Vulnerability Remediation Activities
is blocked by	Known Exploited Vulnerabilities (KEV) Mitigations
is blocked by	Time To Remediate / Benchmarks For Corrective Action
is blocked by	Deferred Patching Decisions
is blocked by	Pre-Deployment Patch Testing
is blocked by	Web Security Policy
is blocked by	Web Security
is blocked by	Web Security Standard
is blocked by	Web Application Framework
is blocked by	Unauthorized Code On Web Pages
is blocked by	Client-Facing Web Services
is blocked by	Strong Customer Authentication (SCA)
is blocked by	Web Application Input Validation & Sanitization
is blocked by	Secure Web Traffic
is blocked by	Web Application Output Encoding
is blocked by	Web Browser Security
is blocked by	Website Change Detection
is blocked by	Publicly Accessible Content Reviews

is blocked by

Business As Usual (BAU) Security, Compliance & Resilience Practices

is blocked by

Assurance

is blocked by

Novel Risk Assessment Methods & Technologies

is blocked by

Asset Management Policy

is blocked by

Asset Governance

is blocked by

Standardized Naming Convention