NIST SP 800-53 rev5 · Identification and Authentication
IA-7 Cryptographic Module Authentication
Mitigates 12 ATT&CK techniques, used by 2 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Techniques it mitigates
- T1542.003Pre-OS Boot: Bootkit9 users
- T1553.006Subvert Trust Controls: Code Signing Policy Modification5 users
- T1542.001Pre-OS Boot: System Firmware3 users
- T1495Firmware Corruption2 users
- T1553Subvert Trust Controls2 users
- T1601Modify System Image1 users
- T1601.001Modify System Image: Patch System Image1 users
- T1195.003Supply Chain Compromise: Compromise Hardware Supply Chain0 users
- T1542Pre-OS Boot0 users
- T1542.004Pre-OS Boot: ROMMONkit0 users
- T1542.005Pre-OS Boot: TFTP Boot0 users
- T1601.002Modify System Image: Downgrade System Image0 users
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.