NIST SP 800-53 rev5 · System and Communications Protection
SC-37 Out-of-band Channels
Mitigates 12 ATT&CK techniques, used by 12 threats in this month's news.
Why it matters this month
Threats in SecurityTabs news using techniques this control mitigates.
Techniques it mitigates
- T1071.001Application Layer Protocol: Web Protocols410 users
- T1489Service Stop57 users
- T1071.004Application Layer Protocol: DNS55 users
- T1071.002Application Layer Protocol: File Transfer Protocols26 users
- T1071.003Application Layer Protocol: Mail Protocols26 users
- T1114.001Email Collection: Local Email Collection20 users
- T1114.002Email Collection: Remote Email Collection17 users
- T1071Application Layer Protocol16 users
- T1114Email Collection6 users
- T1213.005Data from Information Repositories: Messaging Applications6 users
- T1114.003Email Collection: Email Forwarding Rule5 users
- T1213Data from Information Repositories4 users
Weaknesses from each CVE's CVE Record (CWE, © MITRE). Techniques: MITRE ATT&CK®. Technique ↔ control and CVE ↔ technique links: Center for Threat-Informed Defense Mappings Explorer (NIST SP 800-53 rev5; CISA KEV). Plain-language explainers are SecurityTabs editorial. Mapping version rev5/attack-16.1.