CVE-2021-42142

Contingency plan updates ensure recovery strategies address unbounded resource allocation, making it harder for attackers to exploit lack of throttling to cause prolonged outages.

Pre-planned substitution limits the window an attacker can exploit unbounded allocation to cause predictable component failure.

This control implements explicit throttling on session allocation, addressing the weakness of allocating resources without limits.

Provides defined handling (alert and additional actions) for the exceptional condition of audit logging failure.

Supplies a concrete handling action (safe mode) for exceptional conditions, mitigating risks from improper or absent handling that could allow continued attacks.

By preparing users for contingency scenarios, the control promotes proper handling of exceptional conditions instead of default or unsafe behaviors.

Plan testing exercises resource allocation limits and throttling during simulated failures, directly addressing weaknesses that allow unbounded resource use.

Provides continuity when unbounded resource allocation at the primary site leads to exhaustion and downtime.