ComplianceCIS Safeguard v8.1

CIS-4.10 Enforce Automatic Device Lockout on Portable End-User Devices

Official page ↗
Framework
CIS Controls v8.1
Control
CIS-4 Secure Configuration of Enterprise Assets and Software
ATT&CK techniques mitigated
4

ATT&CK mappings (CTID)

• T1110 Brute Force — Automatic device lockout limits the number of consecutive authentication attempts that can be made against a portable device, directly reducing the likelihood that repeated online password attempts will succeed. • T1110.001 Password Guessing — Automatic device lockout limits the number of consecutive authentication attempts that can be made against a portable device, directly reducing the likelihood that repeated online password attempts will succeed. • T1110.003 Password Spraying — Automatic device lockout limits the number of consecutive authentication attempts that can be made against a portable device, directly reducing the likelihood that repeated online password attempts will succeed. • T1110.004 Credential Stuffing — Automatic device lockout limits the number of consecutive authentication attempts that can be made against a portable device, directly reducing the likelihood that repeated breached username password attempts will succeed.

Related

Mitigates · MITRE ATT&CK (4)

Referenced by Compliance · has member (1)

  • CIS-4 Secure Configuration of Enterprise Assets and Software CIS Control v8.1