NIST SP 800-53 rev5 · System and Communications Protection
SC-12 Cryptographic Key Establishment and Management
Mitigates 11 ATT&CK techniques, used by 9 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Weaknesses it helps against
Through the techniques typically used to exploit them (CTID, CISA KEV).
Techniques it mitigates
- T1573.001Encrypted Channel: Symmetric Cryptography181 users
- T1573.002Encrypted Channel: Asymmetric Cryptography94 users
- T1552.001Unsecured Credentials: Credentials In Files41 users
- T1552.004Unsecured Credentials: Private Keys22 users
- T1573Encrypted Channel15 users
- T1072Software Deployment Tools11 users
- T1552.002Unsecured Credentials: Credentials in Registry10 users
- T1098.004Account Manipulation: SSH Authorized Keys6 users
- T1552Unsecured Credentials6 users
- T1563.001Remote Service Session Hijacking: SSH Hijacking1 users
- T1521.003T1521.0030 users
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.