NIST SP 800-53 rev5 · Contingency Planning
CP-9 System Backup
Mitigates 22 ATT&CK techniques, used by 12 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Techniques it mitigates
- T1005Data from Local System221 users
- T1486Data Encrypted for Impact83 users
- T1119Automated Collection71 users
- T1490Inhibit System Recovery56 users
- T1485Data Destruction38 users
- T1070Indicator Removal31 users
- T1025Data from Removable Media24 users
- T1003.003OS Credential Dumping: NTDS22 users
- T1003OS Credential Dumping20 users
- T1561.002Disk Wipe: Disk Structure Wipe19 users
- T1561.001Disk Wipe: Disk Content Wipe17 users
- T1491.001Defacement: Internal Defacement16 users
- T1070.008Indicator Removal: Clear Mailbox Data4 users
- T1565.001Data Manipulation: Stored Data Manipulation3 users
- T1491.002Defacement: External Defacement2 users
- T1565Data Manipulation2 users
- T1565.003Data Manipulation: Runtime Data Manipulation1 users
- T1070.001T1070.0010 users
- T1070.002T1070.0020 users
- T1485.001Data Destruction: Lifecycle-Triggered Deletion0 users
- T1491Defacement0 users
- T1561Disk Wipe0 users
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.