CVE-2023-26580

Requires verification of individual access authorizations before granting facility entry, addressing missing authentication for critical physical access.

Knowing every system allows confirmation that critical functions are not left without required authentication mechanisms.

Requires authentication gates on critical functions that must remain unavailable to anonymous public users.

Decoy implementations of critical functions without authentication lure and record attackers probing for missing auth checks.

Requires established identification and authentication to unlock, mitigating missing authentication for continued system access.

Requiring identification and rationale for actions allowed without authentication ensures critical functions are not left unprotected by forcing review of authentication requirements.

Authorizing mobile device connections to organizational systems ensures authentication is performed for this critical access function.

Controls on authorized publication limit files and directories with nonpublic data from becoming accessible to external parties.

Managing identities and credentials is a prerequisite for authentication but does not itself enforce it on critical functions.

Data-at-rest protections such as encryption or ACLs reduce the impact of unintended file exposure.

Hardened configuration baselines commonly include file-system permission settings that limit external access.

By tracing and retrieving all copies of information stored on endpoint and portable devices, the control reduces the likelihood that files remain accessible outside the organization’s security perimeter.

Labeling information according to its sensitivity and specifying corresponding protection measures makes it less probable that files or directories containing sensitive content will be left accessible to external parties.

Mandating authentication requirements for critical functions at the requirements-gathering stage ensures that essential operations are not left unprotected by missing login or verification mechanisms.

Including asset location and ownership in the inventory, combined with secure disposal procedures, decreases the chance that files or directories remain accessible to external parties after they should have been removed or restricted.

Solid perimeters and locked external access points stop files, devices, or directories containing sensitive data from being reachable by external parties who could otherwise walk in or break in.