NIST SP 800-53 rev5 · Configuration Management
CM-10 Software Usage Restrictions
Mitigates 9 ATT&CK techniques, used by 2 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Techniques it mitigates
- T1559.002Inter-Process Communication: Dynamic Data Exchange19 users
- T1559Inter-Process Communication17 users
- T1550.001Use Alternate Authentication Material: Application Access Token10 users
- T1546.008Event Triggered Execution: Accessibility Features7 users
- T1553.004Subvert Trust Controls: Install Root Certificate5 users
- T1553Subvert Trust Controls2 users
- T1546.013Event Triggered Execution: PowerShell Profile1 users
- T1562.006T1562.0060 users
- T1562.009T1562.0090 users
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.