Known Exploited Vulnerabilities (KEV) remain exploitable because they are not remediated, mitigated or otherwise addressed, increasing exposure to compromise.

Povezane zadeve

Povezave
Vrsta povezave Zadeva
is blocked by Security, Compliance & Resilience Governance Policy
is blocked by Security, Compliance & Resilience Program (SCRP)
is blocked by Publishing Security, Compliance & Resilience Documentation
is blocked by Periodic Review & Update of Security, Compliance & Resilience Program
is blocked by Exception Management
is blocked by Defining Business Context & Mission
is blocked by Materiality Determination
is blocked by High Value Assets (HVAs)
is blocked by Steering Committee & Program Oversight
is blocked by Business As Usual (BAU) Security, Compliance & Resilience Practices
is blocked by Operationalizing Security, Compliance & Resilience Capabilities
is blocked by Measures of Performance
is blocked by Forced Technology Transfer (FTT)
is blocked by State-Sponsored Espionage
is blocked by Contacts With Authorities
is blocked by Assurance
is blocked by Artificial Intelligence & Autonomous Technologies Policy
is blocked by Artificial Intelligence (AI) & Autonomous Technologies Governance
is blocked by AI & Autonomous Technologies Mission and Goals Definition
is blocked by AI & Autonomous Technologies Value Sustainment
is blocked by AI & Autonomous Technologies Context Definition
is blocked by AI & Autonomous Technologies-Related Legal Requirements Identification
is blocked by Assigned Responsibilities for AI & Autonomous Technologies
is blocked by Trustworthy AI & Autonomous Technologies
is blocked by Situational Awareness of AI & Autonomous Technologies In Use
is blocked by AI Model & Agent Inventory & Lifecycle Management
is blocked by Artificial Intelligence and Autonomous Technologies (AAT) & AI Agent Categorization
is blocked by AI & Autonomous Technologies Internal Controls
is blocked by AI & Autonomous Technologies Impact Assessment
is blocked by AI & Autonomous Technologies Risk Profiling
is blocked by AI & Autonomous Technologies Risk Mapping
is blocked by AI & Autonomous Technologies Risk Management Decisions
is blocked by AI & Autonomous Technologies Likelihood & Impact Risk Analysis
is blocked by AI & Autonomous Technologies High Risk Designations
is blocked by AI Threat Modeling & Risk Assessment
is blocked by AI & Autonomous Technologies Risk Response
is blocked by AI & Autonomous Technologies Risk Tracking Approaches
is blocked by AI & Autonomous Technologies Business Case
is blocked by AI & Autonomous Technologies Potential Benefits Analysis
is blocked by AI & Autonomous Technologies Potential Costs Analysis
is blocked by Model & AI Agent Documentation
is blocked by AI & Autonomous Technologies Output Marking
is blocked by Release Owner Gate (ROG) For AI-Augmented Content
is blocked by AI & Autonomous Technologies Output Filtering
is blocked by Human Moderation of AI & Autonomous Technologies-Generated Content
is blocked by AI & Autonomous Technologies Intellectual Property Infringement Protections
is blocked by Data Source Identification
is blocked by AI & Autonomous Technologies Harm Prevention
is blocked by AI & Autonomous Technologies Human Subject Protections
is blocked by AI & Autonomous Technologies Environmental Impact & Sustainability
is blocked by Previously Unknown AI & Autonomous Technologies Threats & Risks
is blocked by AI & Autonomous Technologies Conformity
is blocked by Manipulative or Deceptive Techniques
is blocked by Materially Distorting Behaviors
is blocked by Social Scoring
is blocked by AI & Autonomous Technologies Requirements Definitions
is blocked by AI & Autonomous Technologies Fairness & Bias
is blocked by AI & Autonomous Technologies Knowledge Limits
is blocked by AI & Autonomous Technologies Development Practices
is blocked by AI & Autonomous Technologies Implementation Tasks Definition
is blocked by Real World Testing of AI & Autonomous Technologies
is blocked by AI & Autonomous Technologies Testing Techniques
is blocked by Generative Artificial Intelligence (GAI) Identification
is blocked by Artificial Intelligence Test, Evaluation, Validation & Verification (AI TEVV)
is blocked by AI TEVV Trustworthiness Assessment
is blocked by AI TEVV Tools
is blocked by AI TEVV Trustworthiness Demonstration
is blocked by AI TEVV Results Evaluation
is blocked by AI TEVV Effectiveness
is blocked by AI TEVV Reporting
is blocked by AI & Autonomous Technologies Residual Risks
is blocked by AI & Autonomous Technologies Viability Decisions
is blocked by AI TEVV Post-Deployment Monitoring
is blocked by Updating AI & Autonomous Technologies
is blocked by Asset Management Policy
is blocked by Asset Governance
is blocked by Standardized Naming Convention
is blocked by Asset Inventories
is blocked by Updates During Installations / Removals
is blocked by Identify Critical Assets
is blocked by Technology Assets, Applications, Services and/or Data (TAASD) Criticality Ratings
is blocked by Asset-Service Dependencies
is blocked by Stakeholder Identification & Involvement
is blocked by Comprehensive Asset Inventory Management
is blocked by Prohibited Technology Assets, Applications and/or Services (TAAS)
is blocked by Software Licensing Restrictions
is blocked by Provenance
is blocked by Asset Scope Classification
is blocked by Network Diagrams & Data Flow Diagrams (DFDs)
is blocked by Technology Assets, Applications, Services and/or Data (TAASD) Storage
is blocked by Unattended End-User Equipment
is blocked by Kiosks & Point of Interaction (PoI) Devices
is blocked by Secure Disposal, Destruction or Re-Use of Equipment
is blocked by Return of Assets
is blocked by Removal of Assets
is blocked by Use of Personal Devices
is blocked by Use of Third-Party Devices
is blocked by Bring Your Own Device (BYOD) Usage
is blocked by Usage Parameters
is blocked by Technology Asset Inspections
is blocked by Physical Tampering Detection
is blocked by Roots of Trust Protection
is blocked by Telecommunications Equipment
is blocked by Travel-Only Devices
is blocked by Recovery Operations Criteria
is blocked by Recovery Operations Communications
is blocked by Alternate Communications Channels
is blocked by Ongoing Contingency Planning
is blocked by Alternate Storage Site
is blocked by Separation from Primary Storage Site
is blocked by Primary Storage Site Accessibility
is blocked by Alternate Processing Site
is blocked by Preparation for Use
is blocked by Inability to Return to Primary Site
is blocked by Resource Priority
is blocked by Change Management Policy
is blocked by Change Management Program
is blocked by Configuration Change Control
is blocked by Access Restriction For Change
is blocked by Security Impact Analysis for Changes
is blocked by Test, Validate & Document Changes
is blocked by Cloud Security Policy
is blocked by Cloud Services
is blocked by Cloud Infrastructure Offboarding
is blocked by Cloud Infrastructure Security Subnet
is blocked by Standardized Virtualization Formats
is blocked by Prohibition On Unverified Hosted Technology Assets, Applications and/or Services (TAAS)
is blocked by Compliance Policy
is blocked by Statutory, Regulatory & Contractual Compliance
is blocked by Compliance Scope
is blocked by Conformity Monitoring
is blocked by Functional Review Of Security, Compliance & Resilience Controls
is blocked by Non-Conformity Oversight
is blocked by Executive Leadership Oversight of Security, Compliance & Resilience Controls
is blocked by Internal Audit Function
is blocked by Independent Assessors
is blocked by Configuration Management Policy
is blocked by Configuration Management Program
is blocked by Least Functionality
is blocked by Baseline Tailoring
is blocked by Development & Test Environment Configurations
is blocked by Secure Baseline Configurations
is blocked by Account Lockout
is blocked by Concurrent Session Control
is blocked by Configure Technology Assets, Applications and/or Services (TAAS) for High-Risk Areas
is blocked by Approved Configuration Deviations
is blocked by Baseline Configuration Reviews & Updates
is blocked by Periodic Configuration Reviews
is blocked by Respond To Unauthorized Changes
is blocked by Continuous Monitoring Policy
is blocked by Continuous Monitoring
is blocked by Event Log & Security-Relevant Telemetry Monitoring
is blocked by Analyze and Prioritize Monitoring Requirements
is blocked by Audit Level Adjustments
is blocked by System Generated Event Logs & Security-Relevant Telemetry
is blocked by Centralized Collection of Event Logs & Security-Relevant Telemetry
is blocked by Centralized Event Log & Security-Relevant Telemetry Review & Analysis
is blocked by Event Log & Security-Relevant Telemetry Analysis & Triage
is blocked by Monitoring Reporting
is blocked by Alert Threshold Tuning
is blocked by Correlate Monitoring Information
is blocked by Integration of Scanning & Other Monitoring Information
is blocked by Correlation with Physical Monitoring
is blocked by Event Log & Security-Relevant Telemetry Storage Capacity
is blocked by Time Stamps
is blocked by Protection of Event Logs & Security-Relevant Telemetry
is blocked by Anomalous Behavior
is blocked by Unusual Transactions
is blocked by Monitoring for Indicators of Compromise (IOC)
is blocked by Deactivated Account Activity
is blocked by Individuals Posing Greater Risk
is blocked by Monitoring For Information Disclosure
is blocked by Cryptographic Protections Policy
is blocked by Use of Cryptographic Controls
is blocked by Cryptographic Management
is blocked by Cryptographic Cipher Suites and Protocols Inventory
is blocked by Encrypting Data In Transit
is blocked by Integrity of Data In Transit
is blocked by Encrypting Data At Rest
is blocked by Database Encryption
is blocked by Public Key Infrastructure (PKI)
is blocked by Public Key Infrastructure (PKI) Availability
is blocked by Cryptographic Key Management
is blocked by Transmission of Cybersecurity & Data Protection Attributes
is blocked by Certificate Authorities
is blocked by Data Classification & Handling Policy
is blocked by Data Protection
is blocked by Sensitive / Regulated Data Governance
is blocked by Data Catalog
is blocked by Data & Asset Classification
is blocked by Highest Classification Level
is blocked by Sensitive Data Inventories
is blocked by Periodic Scans for Sensitive / Regulated Data
is blocked by Data Stewardship
is blocked by Defining Access Authorizations for Sensitive / Regulated Data
is blocked by Sensitive / Regulated Data Protection
is blocked by Restrict Sensitive / Regulated Data Access To Authorized Individuals
is blocked by Limitations on Use & Distribution of Sensitive / Regulated Data
is blocked by Sensitive / Regulated Data Access Mapping
is blocked by Sensitive / Regulated Media Records
is blocked by Media Marking
is blocked by Masking Displayed Sensitive / Regulated Data
is blocked by Media Storage
is blocked by Data Storage Location Reviews
is blocked by Physically Secure All Media Containing Sensitive / Regulated Data
is blocked by Storing Authentication Data
is blocked by Media Transportation
is blocked by Digital & Non-Digital Media Disposal
is blocked by Digital Media Sanitization
is blocked by Sanitization of Sensitive / Regulated Data
is blocked by Digital Media Sanitization Documentation
is blocked by Digital Media Sanitization Equipment Testing
is blocked by Digital Media Use Restrictions
is blocked by Portable Storage Devices
is blocked by Removable Media Security
is blocked by Use of External Technology Assets, Applications and/or Services (TAAS)
is blocked by Protecting Sensitive / Regulated Data on External Technology Assets, Applications and/or Services (TAAS)
is blocked by Publicly Accessible Content
is blocked by Data Mining Protection
is blocked by Ad-Hoc Transfers
is blocked by Transfer Authorizations
is blocked by Media & Data Retention
is blocked by Embedded Technology Policy
is blocked by Embedded Technology Security Program
is blocked by Separate Operating Environments For Embedded Technologies
is blocked by Embedded Technology Inventory Management
is blocked by Internet of Things (IOT)
is blocked by Operational Technology (OT)
is blocked by Interface Security
is blocked by Embedded Technology Configuration Monitoring
is blocked by Prevent Alterations
is blocked by Embedded Technology Maintenance
is blocked by Resilience To Outages
is blocked by Power Level Monitoring
is blocked by Embedded Technology Reviews
is blocked by Message Queuing Telemetry Transport (MQTT) Security
is blocked by Remote Management of Embedded Technologies
is blocked by Restrict Communications
is blocked by Authorized Communications
is blocked by Operating Environment Certification
is blocked by Safety Assessment
is blocked by Endpoint Security Policy
is blocked by Endpoint Device Management (EDM)
is blocked by Endpoint Protection Mechanisms
is blocked by Centralized Management of Endpoint Protection Mechanisms
is blocked by Automatic Endpoint Protection Mechanism Updates
is blocked by Malicious Code Protection (Antimalware)
is blocked by Always On Antimalware Protection
is blocked by Heuristic / Nonsignature-Based Malware Detection
is blocked by Antimalware Protection Mechanism Testing
is blocked by Documented Endpoint Security Protection Measures
is blocked by Software Firewall
is blocked by Unified Endpoint Device Management (UEDM)
is blocked by Endpoint Detection & Response (EDR)
is blocked by Extended Detection & Response (XDR)
is blocked by Endpoint File Integrity Monitoring (FIM)
is blocked by Host Intrusion Detection and Prevention Systems (HIDS / HIPS)
is blocked by Mobile Code
is blocked by Collaborative Computing Devices
is blocked by Collaborative Computing Capability Disabling / Removal In Secure Work Areas
is blocked by Explicitly Indicate Current Participants
is blocked by Human Resources Security Policy
is blocked by Human Resources Security Management
is blocked by Position Categorization
is blocked by Users With Elevated Privileges
is blocked by Competency Requirements for Security, Compliance & Resilience-Related Positions
is blocked by Defined Roles & Responsibilities
is blocked by Assigned Roles & Responsibilities Awareness
is blocked by Personnel Screening
is blocked by Roles With Special Protection Measures
is blocked by Citizenship Requirements
is blocked by Terms of Employment
is blocked by Rules of Behavior
is blocked by Social Media & Social Networking Restrictions
is blocked by Access Agreements
is blocked by Confidentiality Agreements
is blocked by Onboarding, Transferring & Offboarding Personnel
is blocked by Probationary Periods
is blocked by Personnel Sanctions
is blocked by Personnel Transfer
is blocked by Personnel Termination
is blocked by Automated Employment Status Notifications
is blocked by Third-Party Personnel
is blocked by Separation of Duties (SoD)
is blocked by Incompatible Roles
is blocked by Identification & Authentication Policy
is blocked by Identity & Access Management (IAM)
is blocked by Authenticate, Authorize and Audit (AAA)
is blocked by Replay-Resistant Authentication
is blocked by Retain Access Records
is blocked by Identity Providers (IdP) & Authorization Servers
is blocked by User Provisioning & De-Provisioning
is blocked by Change of Roles & Duties
is blocked by Termination of Employment
is blocked by Identity Proofing (Identity Verification)
is blocked by In-Person or Trusted Third-Party Registration
is blocked by Identity Evidence
is blocked by Role-Based Access Control (RBAC)
is blocked by Attribute-Based Access Control (ABAC)
is blocked by Real-Time Access Decisions
is blocked by Access Profile Rules
is blocked by Account Management
is blocked by Management Approval For New or Changed Accounts
is blocked by Management Approval For Privileged Accounts
is blocked by Privileged Account Management (PAM)
is blocked by Privileged Account Inventories
is blocked by Privileged Account Separation
is blocked by Dedicated Privileged Account
is blocked by Privileged Command Execution
is blocked by Manual Override
is blocked by Emergency Accounts
is blocked by Periodic Review of Individual & Service Account Privileges
is blocked by System Account Reviews
is blocked by User Identity (ID) Management
is blocked by Standardized Identifier Management (User Names)
is blocked by Employment Status Identification
is blocked by Citizenship Identification
is blocked by Authenticator Management
is blocked by Password-Based Authentication
is blocked by Automated Support For Password Strength
is blocked by Password Managers
is blocked by Passkeys
is blocked by Biometric Authentication
is blocked by PKI-Based Authentication
is blocked by Hardware Token-Based Authentication
is blocked by Authenticator Feedback
is blocked by Restrictions on Shared Groups / Accounts
is blocked by Group Authentication
is blocked by User Responsibilities for Account Management
is blocked by Credential Sharing
is blocked by Reference Monitor
is blocked by Access Enforcement
is blocked by Access To Sensitive / Regulated Data
is blocked by Use of Privileged Utility Programs
is blocked by Dedicated Administrative Machines
is blocked by Dual Authorization for Privileged Commands
is blocked by Revocation of Access Authorizations
is blocked by Incident Response Policy
is blocked by Incident Response Operations
is blocked by Continuous Incident Response Improvements
is blocked by Incident Classification & Prioritization
is blocked by Indicators of Compromise (IOC)
is blocked by Incident Handling
is blocked by Correlation with External Organizations
is blocked by Automated Incident Handling Processes
is blocked by Incident Response Plan (IRP)
is blocked by Incident Response Capabilities Testing
is blocked by Incident Response Capabilities Testing Coordination with Related Plans
is blocked by Incident Response Training
is blocked by Simulated Incidents
is blocked by Automated Incident Response Training Environments
is blocked by Integrated Security Incident Response Team (ISIRT)
is blocked by Public Relations & Reputation Repair
is blocked by Chain of Custody & Forensics
is blocked by Root Cause Analysis (RCA) & Lessons Learned
is blocked by Regulatory & Law Enforcement Contacts
is blocked by Incident Stakeholder Reporting
is blocked by Information Assurance Policy
is blocked by Information Assurance (IA) Operations
is blocked by Assessment Boundaries
is blocked by Control Validation Testing (CVT)
is blocked by Specialized Assessments
is blocked by Assessor Independence
is blocked by Third-Party Assessment Reciprocity
is blocked by Maintenance Policy
is blocked by Maintenance Operations
is blocked by Controlled Maintenance
is blocked by Timely Maintenance
is blocked by Preventative Maintenance
is blocked by Predictive Maintenance
is blocked by Maintenance Validation
is blocked by Maintenance Monitoring
is blocked by Prevent Unauthorized Removal
is blocked by Automated Maintenance Activities
is blocked by Mobile Device Management Policy
is blocked by Centralized Management Of Mobile Devices
is blocked by Personally-Owned Mobile Devices
is blocked by Organization-Owned Mobile Devices
is blocked by Remote Purging
is blocked by Mobile Device Tampering
is blocked by Network Security Policy
is blocked by Boundary Protection
is blocked by Limit Network Connections
is blocked by External Telecommunications Services
is blocked by Domain Name Verification
is blocked by Bandwidth Control
is blocked by Data Flow Enforcement – Access Control Lists (ACLs)
is blocked by Deny Traffic by Default & Allow Traffic by Exception
is blocked by Network Segmentation (macrosegmentation)
is blocked by Security Management Subnets
is blocked by Sensitive / Regulated Data Enclave (Secure Zone)
is blocked by Network Access Control (NAC)
is blocked by Application Proxy
is blocked by Visibility of Encrypted Communications
is blocked by Content Check for Encrypted Data
is blocked by Working in Secure Areas
is blocked by Access To Critical Systems
is blocked by Lockable Physical Casings
is blocked by Access Control for Output Devices
is blocked by Component Marking
is blocked by Asset Monitoring and Tracking
is blocked by Project & Resource Management Policy
is blocked by Strategic Plan & Objectives
is blocked by Targeted Capability Maturity Levels
is blocked by Security, Compliance & Resilience Protection Portfolio Management
is blocked by Security, Compliance & Resilience Resource Management
is blocked by Allocation of Resources
is blocked by Secure Development Life Cycle (SDLC) Management
is blocked by Security, Compliance & Resilience In Project Management
is blocked by Risk Management Policy
is blocked by Risk Management Program
is blocked by Risk Management Resourcing
is blocked by Risk Culture
is blocked by Risk Framing
is blocked by Material Risks
is blocked by Executive Leadership Approval For Managing Material Risk
is blocked by Documented Justification For Material Risk Management Decisions
is blocked by Risk-Based Security Categorization
is blocked by Business Impact Analysis (BIA)
is blocked by Risk Identification
is blocked by Risk Owner
is blocked by Risk Assessment Methodology
is blocked by Secure Engineering & Architecture Policy
is blocked by Security, Compliance & Resilience Aware Design
is blocked by Flexible Technology Stack
is blocked by Secure Architecture Principles
is blocked by Secure Engineering Principles
is blocked by Heterogeneity
is blocked by Security Operations Policy
is blocked by Security Operations Center (SOC)
is blocked by Security Awareness & Training Policy
is blocked by Security, Compliance & Resilience-Minded Workforce
is blocked by Maintaining Workforce Development Relevancy
is blocked by Role-Based Security, Compliance & Resilience Training
is blocked by Technology Development & Acquisition Policy
is blocked by Technology Development & Acquisition
is blocked by Secure Software Development Practices (SSDP)
is blocked by Product Management
is blocked by Disclosure of Vulnerabilities
is blocked by Technical Documentation Artifacts
is blocked by Product-Specific Risk Assessment Artifacts
is blocked by Product Tampering and Counterfeiting (PTC)
is blocked by DevSecOps
is blocked by Minimum Viable Product (MVP) Security Requirements
is blocked by Input Data Validation
is blocked by Minimizing Attack Surfaces
is blocked by Product Testing & Reviews
is blocked by Security, Compliance & Resilience Representatives For Product Changes
is blocked by Secure Development Environments
is blocked by Library Privileges
is blocked by Security, Compliance & Resilience Testing Throughout Development
is blocked by Static Code Analysis
is blocked by Use of Live Data
is blocked by Developer Screening
is blocked by Developer Configuration Management
is blocked by Hardware Integrity Verification
is blocked by Bills of Material (BOMs)
is blocked by Third-Party Management Policy
is blocked by Third-Party Management
is blocked by Acquisition Strategies, Tools & Methods
is blocked by Supply Chain Risk Management (SCRM)
is blocked by Processes To Address Weaknesses or Deficiencies
is blocked by Limit Potential Harm
is blocked by Security, Compliance & Resilience Outsourcing Limitations
is blocked by Outsourcing Non-Essential Functions or Services
is blocked by Supplier Diversity
is blocked by Adequate Supply
is blocked by Third-Party Inventories
is blocked by Third-Party Criticality Assessments
is blocked by Third-Party Risk Assessments & Approvals
is blocked by Responsible, Accountable, Supportive, Consulted & Informed (RASCI) Matrix
is blocked by Threat Management Policy
is blocked by Threat Intelligence Program
is blocked by Dynamic Threat Awareness
is blocked by Threat Intelligence Feeds
is blocked by Threat Intelligence Reporting
is blocked by Material Threats
is blocked by Indicators of Exposure (IOE)
is blocked by Vulnerability & Patch Management Policy
is blocked by Vulnerability & Patch Management Program (VPMP)
is blocked by Attack Surface Scope
is blocked by Vulnerability Exploitation Analysis
is blocked by Vulnerability Ranking
is blocked by Vulnerability Remediation Process
is blocked by Centralized Management of Flaw Remediation Processes
is blocked by Continuous Vulnerability Remediation Activities
is blocked by Known Exploited Vulnerabilities (KEV) Mitigations
is blocked by Time To Remediate / Benchmarks For Corrective Action
is blocked by Software & Firmware Patching
is blocked by Pre-Deployment Patch Testing
is blocked by Web Security Policy
is blocked by Web Security
is blocked by Web Security Standard
is blocked by Publicly Accessible Content Reviews
is blocked by Assessment Objectives (AO)
is blocked by Periodic Review of Exceptions
is blocked by Select Controls
is blocked by Implement Controls
is blocked by Assess Controls
is blocked by Authorize Technology Assets, Applications and/or Services (TAAS)
is blocked by Monitor Controls
is blocked by Key Performance Indicators (KPIs)
is blocked by Key Risk Indicators (KRIs)
is blocked by Contacts With Groups & Associations
is blocked by Mergers, Acquisitions & Divestitures (MA&D)
is blocked by Adequate Protections For AI & Autonomous Technologies
is blocked by AI TEVV Security & Resiliency Assessment
is blocked by AI TEVV Third-Party Risk Management
is blocked by Serious Incident Root Cause Analysis (RCA) For AI & Autonomous Technologies
is blocked by Infrastructure Hardening & Isolation
is blocked by AI Agent Adversarial & Red Team Testing
is blocked by Component Duplication Avoidance
is blocked by Technology Assets, Applications, Services and/or Data (TAASD) Ownership Assignment
is blocked by Configuration Management Database (CMDB)
is blocked by Component Assignment
is blocked by Asset Discovery
is blocked by Automated Network Asset Discovery
is blocked by Approved Technologies
is blocked by Authorized To Connect
is blocked by Automated Unauthorized Component Detection
is blocked by Database Management System (DBMS)
is blocked by Technology Lifecycle Management
is blocked by Stable Versions
is blocked by Removal of Previous Versions
is blocked by Technical Debt Reviews
is blocked by Unsupported Technology Assets, Applications and/or Services (TAAS)
is blocked by Alternate Sources for Continued Support
is blocked by Technology Assets, Applications and/or Services (TAAS) Recovery & Reconstitution
is blocked by Restore Within Time Period
is blocked by Recovery Images
is blocked by Security, Compliance & Resilience Representative for Asset Lifecycle Changes
is blocked by Control Functionality Verification
is blocked by Emergency Changes
is blocked by Post Configuration Change Reviews
is blocked by Automated Security Response
is blocked by Unauthorized Software Installation Alerts
is blocked by Signed Components
is blocked by Cloud Infrastructure Onboarding
is blocked by Cloud Security Architecture
is blocked by Multi-Tenant Incident Response Capabilities
is blocked by Continuous Control Monitoring (CCM)
is blocked by Multi-Function Devices (MFD)
is blocked by Thin Nodes
is blocked by Automated Baseline Configuration Management & Verification
is blocked by Integrity Assurance & Enforcement (IAE)
is blocked by Restrict Roles Permitted To Install Software
is blocked by Open Source Software
is blocked by Prevent Unauthorized Software Execution
is blocked by Explicitly Allow / Deny Applications
is blocked by Unsupported Internet Browsers & Email Clients
is blocked by Zero-Touch Provisioning (ZTP)
is blocked by Production Software Repository
is blocked by Third-Party Libraries
is blocked by Software Repository Protections
is blocked by Software Development Repository
is blocked by Refresh from Trusted Sources
is blocked by Host-Based Security Function Isolation
is blocked by Control Assurance Automation (CAA) Change Control
is blocked by Control Assurance Automation (CAA) Unauthorized Change Detection
is blocked by Control Assurance Automation (CAA) Separation of Duties
is blocked by Centralized Management of Event Log & Security-Relevant Telemetry Content
is blocked by System-Wide / Time-Correlated Audit Trail
is blocked by Trend Analysis Reporting
is blocked by Unauthorized Activities
is blocked by Unauthorized Network Services
is blocked by Control Assurance Automation (CAA) Aggregated Telemetry
is blocked by Certificate-Based Authentication
is blocked by Chip-To-Cloud Security
is blocked by Real-Time Operating System (RTOS) Security
is blocked by Evolving Endpoint Protection Threats
is blocked by Binary or Machine-Executable Code
is blocked by Automated System Account Management (Directory Services)
is blocked by Authorized Accounts
is blocked by User & Service Account Inventories
is blocked by Disable Inactive Accounts
is blocked by Account Disabling for High Risk Individuals
is blocked by Automated Audit Actions
is blocked by Account Separation Between Infrastructure Environments
is blocked by Default Authenticators
is blocked by Automated System Account Management (Directory Services)
is blocked by Authorized Accounts
is blocked by User & Service Account Inventories
is blocked by Disable Inactive Accounts
is blocked by Account Disabling for High Risk Individuals
is blocked by Automated Audit Actions
is blocked by Account Separation Between Infrastructure Environments
is blocked by Compliance As Code (CAC) Credentials Management
is blocked by Vulnerabilities Related To Incidents
is blocked by Incident Pattern Analysis
is blocked by Recurring Incident Analysis
is blocked by Post-Incident Technology Assets, Applications and Services (TAAS) Validation
is blocked by Threat Analysis & Flaw Remediation During Development
is blocked by Technical Verification
is blocked by Capabilities Deficiency Tracking
is blocked by Deficiency Tracking Automation
is blocked by Security Assessment Report (SAR)
is blocked by Security Authorization
is blocked by Control Assurance Automation (CAA) Automation
is blocked by Restricting Access To Authorized Technology Assets, Applications and/or Services (TAAS)
is blocked by Network Security Controls (NSC)
is blocked by Human Reviews
is blocked by External System Connections
is blocked by Internal System Connections
is blocked by Separate Subnets To Isolate Functions
is blocked by Segregation From Enterprise Services
is blocked by Network Device Plane Segmentation
is blocked by Compliance As Code (CAC) Credentials Management
is blocked by Vulnerabilities Related To Incidents
is blocked by Incident Pattern Analysis
is blocked by Recurring Incident Analysis
is blocked by Post-Incident Technology Assets, Applications and Services (TAAS) Validation
is blocked by Remote Access Endpoint Security Validation
is blocked by Network Intrusion Detection / Prevention Systems (NIDS / NIPS)
is blocked by Demilitarized Zones (DMZ)
is blocked by Web Application Firewall (WAF)
is blocked by API Gateway
is blocked by Metadata Validation
is blocked by Side Channel Attack Prevention
is blocked by Remote Access Endpoint Security Validation
is blocked by Network Intrusion Detection / Prevention Systems (NIDS / NIPS)
is blocked by Demilitarized Zones (DMZ)
is blocked by Web Application Firewall (WAF)
is blocked by API Gateway
is blocked by Prioritization To Address Evolving Risks & Threats
is blocked by Cryptographic Agility Risk Assessment (CARA)
is blocked by Compensating Controls for Quantum-Vulnerable Systems
is blocked by Post-Quantum Cryptography (PQC) Discovery & Visibility
is blocked by Post-Quantum Cryptography (PQC) Asset Inventory
is blocked by Post-Quantum Cryptography Exposure
is blocked by Crypto-Agility Architecture
is blocked by Stateful Hash-Based Signatures for Firmware & Code Signing
is blocked by Approved Post-Quantum Cryptography (PQC) Algorithm Use
is blocked by Post-Quantum Cryptography (PQC) Validation Requirements
is blocked by Deprecated Cryptographic Algorithms
is blocked by Post-Quantum Cryptography (PQC) Key Management
is blocked by Quantum-Safe Public Key Infrastructure (PKI) Transition
is blocked by Algorithm Negotiation Integrity
is blocked by Hybrid / Composite Cryptography
is blocked by Cryptographic Application Programming Interface (API) Abstraction
is blocked by Post-Quantum Cryptography (PQC) Implementation Validation & Interoperability Testing
is blocked by Risk Assessment Update
is blocked by Risk Ranking
is blocked by Risk Response
is blocked by Risk Treatment Options
is blocked by Risk Remediation
is blocked by Risk Treatment Plan (RTP)
is blocked by Compensating Countermeasures
is blocked by Risk Monitoring
is blocked by Hardware Separation
is blocked by Thread Separation
is blocked by System Privileges Isolation
is blocked by Information In Shared Resources
is blocked by Memory Protection
is blocked by Virtualization Techniques
is blocked by Virtual Machine Images
is blocked by Randomness
is blocked by Non-Modifiable Executable Programs
is blocked by Application Container
is blocked by Operations Security
is blocked by System Administrative Processes
is blocked by Database Administrative Processes
is blocked by Secure Practices Guidelines
is blocked by Shadow Information Technology Detection
is blocked by Development Methods, Techniques & Processes
is blocked by Software Assurance Maturity Model (SAMM)
is blocked by Secure Settings By Default
is blocked by Developer Architecture & Design
is blocked by Programming Language Selection
is blocked by Criticality Analysis During Development
is blocked by Threat Modeling
is blocked by Supporting Toolchain
is blocked by Software Design Review
is blocked by Software Design Root Cause Analysis (RCA)
is blocked by Continuous Monitoring Plan
is blocked by Ongoing Product Security Support
is blocked by Reporting Exploitable Vulnerabilities
is blocked by Functional Properties
is blocked by Administrator Documentation
is blocked by Identification & Justification of Ports, Protocols & Services
is blocked by Products With Digital Elements
is blocked by Insecure Ports, Protocols & Services
is blocked by Commercial Off-The-Shelf (COTS) Security Solutions
is blocked by Physical Diagnostic & Test Interfaces
is blocked by Error Handling
is blocked by Designated Roles To View Error Messages
is blocked by Pre-Established Secure Configurations
is blocked by Cryptographic Application Programming Interface (API) Abstraction
is blocked by Post-Quantum Cryptography (PQC) Implementation Validation & Interoperability Testing
is blocked by Risk Assessment Update
is blocked by Risk Ranking
is blocked by Risk Response
is blocked by Risk Treatment Options
is blocked by Risk Remediation
is blocked by Risk Treatment Plan (RTP)
is blocked by Compensating Countermeasures
is blocked by Risk Monitoring
is blocked by Hardware Separation
is blocked by Thread Separation
is blocked by System Privileges Isolation
is blocked by Information In Shared Resources
is blocked by Memory Protection
is blocked by Malware Testing Prior to Release
is blocked by Approved Code
is blocked by Dynamic Code Analysis
is blocked by Malformed Input Testing
is blocked by Application Penetration Testing
is blocked by Manual Code Review
is blocked by Test Data Integrity
is blocked by Requisite Developer Training
is blocked by Developer Threat Analysis & Flaw Remediation
is blocked by Software / Firmware Integrity Verification
is blocked by Cryptographic Bill of Materials (CBOM)
is blocked by Hardware Bill of Materials (HBOM)
is blocked by Indentured Bill of Materials (IBOM)
is blocked by Software Bill of Materials (SBOM)
is blocked by External Connectivity Requirements - Identification of Ports, Protocols & Services
is blocked by Review of Third-Party Services
is blocked by Managing Changes To Third-Party Services
is blocked by Third-Party Deficiency Remediation
is blocked by Predictive Cyber Analytics
is blocked by Vulnerability Disclosure Program (VDP)
is blocked by Security Disclosure Contact Information
is blocked by Automated Software & Firmware Updates
is blocked by Software Patch Integrity
is blocked by Automated Remediation Status
is blocked by Deferred Patching Decisions
is blocked by Out-of-Cycle Patching
is blocked by Vulnerability Scanning
is blocked by Update Vulnerability Scanning Tools
is blocked by Breadth / Depth of Coverage For Vulnerability Scanning
is blocked by Privileged Access For Vulnerability Scanning Tools
is blocked by Vulnerability Trend Analysis
is blocked by Review Historical Event logs
is blocked by External Vulnerability Assessment
is blocked by Internal Vulnerability Assessment
is blocked by Acceptable Discoverable Information
is blocked by Correlate Scanning Information
is blocked by Penetration Testing
is blocked by Independent Penetration Agent or Team
is blocked by Red Team Exercises
is blocked by Web Application Framework
is blocked by Unauthorized Code On Web Pages
is blocked by Client-Facing Web Services
is blocked by Web Application Input Validation & Sanitization
is blocked by Web Application Output Encoding
is blocked by Web Browser Security
is blocked by Malware Testing Prior to Release
is blocked by Approved Code
is blocked by Dynamic Code Analysis
is blocked by Malformed Input Testing
is blocked by Application Penetration Testing
is blocked by Manual Code Review
is blocked by Test Data Integrity
is blocked by Requisite Developer Training
is blocked by Developer Threat Analysis & Flaw Remediation
is blocked by Software / Firmware Integrity Verification
is blocked by Cryptographic Bill of Materials (CBOM)
is blocked by Hardware Bill of Materials (HBOM)
is blocked by Indentured Bill of Materials (IBOM)
is blocked by Software Bill of Materials (SBOM)
is blocked by External Connectivity Requirements - Identification of Ports, Protocols & Services
is blocked by Malware Testing Prior to Release
is blocked by Approved Code
is blocked by Dynamic Code Analysis
is blocked by Malformed Input Testing
is blocked by Application Penetration Testing
is blocked by Manual Code Review
is blocked by Test Data Integrity
is blocked by Requisite Developer Training
is blocked by Developer Threat Analysis & Flaw Remediation
is blocked by Software / Firmware Integrity Verification
is blocked by Cryptographic Bill of Materials (CBOM)
is blocked by Hardware Bill of Materials (HBOM)
is blocked by Indentured Bill of Materials (IBOM)
is blocked by Software Bill of Materials (SBOM)
is blocked by External Connectivity Requirements - Identification of Ports, Protocols & Services