SA-8Security and Privacy Engineering Principles

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: mostly · 6 mapping(s) from 3 framework(s): CSF 2.0 3 (mostly) · OWASP-Web 2 (partial) · ASVS 5.0 1 (partial)

See the full cumulative-coverage rollup →

Implementations targeting this control (0)

• No implementations targeting this control yet.

ATT&CK techniques this control mitigates (20)

• T1005 Data from Local System Collection
• T1025 Data from Removable Media Collection
• T1041 Exfiltration Over C2 Channel Exfiltration
• T1048 Exfiltration Over Alternative Protocol Exfiltration
• T1048.002 Exfiltration Over Asymmetric Encrypted Non-C2 Protocol Exfiltration
• T1048.003 Exfiltration Over Unencrypted Non-C2 Protocol Exfiltration
• T1052 Exfiltration Over Physical Medium Exfiltration
• T1052.001 Exfiltration over USB Exfiltration
• T1078 Valid Accounts Stealth, Persistence, Privilege Escalation, Initial Access
• T1078.001 Default Accounts Stealth, Persistence, Privilege Escalation, Initial Access
• T1078.003 Local Accounts Stealth, Persistence, Privilege Escalation, Initial Access
• T1078.004 Cloud Accounts Stealth, Persistence, Privilege Escalation, Initial Access
• T1134.005 SID-History Injection Stealth, Privilege Escalation
• T1190 Exploit Public-Facing Application Initial Access
• T1213.003 Code Repositories Collection
• T1482 Domain Trust Discovery Discovery
• T1559.003 XPC Services Execution
• T1567 Exfiltration Over Web Service Exfiltration
• T1574.001 DLL Stealth, Execution
• T1647 Plist File Modification Defense Impairment

Weaknesses this control addresses (9)AI

CWEs ranked by how often they appear in real CVEs. The rationale describes how this control reduces exploitability of each weakness class.

Top CVEs where this control is the strongest mitigation

Other controls in family SA