IA-8Identification and Authentication (Non-organizational Users)

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 4 mapping(s) from 2 framework(s): CSF 2.0 2 (mostly) · ASVS 5.0 2 (partial)

See the full cumulative-coverage rollup →

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (22)

• T1053 Scheduled Task/Job Execution, Persistence, Privilege Escalation
• T1053.007 Container Orchestration Job Execution, Persistence, Privilege Escalation
• T1059 Command and Scripting Interpreter Execution
• T1059.001 PowerShell Execution
• T1059.008 Network Device CLI Execution
• T1087.004 Cloud Account Discovery
• T1190 Exploit Public-Facing Application Initial Access
• T1210 Exploitation of Remote Services Lateral Movement
• T1213 Data from Information Repositories Collection
• T1213.001 Confluence Collection
• T1213.002 Sharepoint Collection
• T1213.004 Customer Relationship Management Software Collection
• T1213.005 Messaging Applications Collection
• T1528 Steal Application Access Token Credential Access
• T1530 Data from Cloud Storage Collection
• T1537 Transfer Data to Cloud Account Exfiltration
• T1538 Cloud Service Dashboard Discovery
• T1542 Pre-OS Boot Stealth, Persistence
• T1542.001 System Firmware Stealth, Persistence
• T1542.003 Bootkit Stealth, Persistence
• T1542.005 TFTP Boot Stealth, Persistence
• T1547.006 Kernel Modules and Extensions Persistence, Privilege Escalation

Weaknesses this control addresses (6)AI

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family IA