ComplianceCIS Safeguard v8.1
CIS-4.10 Enforce Automatic Device Lockout on Portable End-User Devices
- Framework
- CIS Controls v8.1
- Control
- CIS-4 Secure Configuration of Enterprise Assets and Software
- ATT&CK techniques mitigated
- 4
ATT&CK mappings (CTID)
• T1110 Brute Force — Automatic device lockout limits the number of consecutive authentication attempts that can be made against a portable device, directly reducing the likelihood that repeated online password attempts will succeed.
• T1110.001 Password Guessing — Automatic device lockout limits the number of consecutive authentication attempts that can be made against a portable device, directly reducing the likelihood that repeated online password attempts will succeed.
• T1110.003 Password Spraying — Automatic device lockout limits the number of consecutive authentication attempts that can be made against a portable device, directly reducing the likelihood that repeated online password attempts will succeed.
• T1110.004 Credential Stuffing — Automatic device lockout limits the number of consecutive authentication attempts that can be made against a portable device, directly reducing the likelihood that repeated breached username password attempts will succeed.
Related
Mitigates · MITRE ATT&CK (4)
Referenced by Compliance · has member (1)
- CIS-4 Secure Configuration of Enterprise Assets and Software CIS Control v8.1