MITRE ATT&CKmitigation
M1001 Security Updates
- Domain
- mobile
- Version
- 1.0
- Created
- 2019-10-18
Description
Install security updates in response to discovered vulnerabilities.
Purchase devices with a vendor and/or mobile carrier commitment to provide security updates in a prompt manner for a set period of time.
Decommission devices that will no longer receive security updates.
Limit or block access to enterprise resources from devices that have not installed recent security updates.
On Android devices, access can be controlled based on each device's security patch level. On iOS devices, access can be controlled based on the iOS version.
Related
Mitigates · MITRE ATT&CK (18)
- T1664 Exploitation for Initial Access technique
- T1658 Exploitation for Client Execution technique
- T1629 Impair Defenses technique
- T1629.003 Disable or Modify Tools sub-technique
- T1634 Credentials from Password Store technique
- T1634.001 Keychain sub-technique
- T1630 Indicator Removal on Host technique
- T1630.001 Uninstall Malicious Application sub-technique
- T1645 Compromise Client Software Binary technique
- T1474.002 Compromise Hardware Supply Chain sub-technique
- T1474.003 Compromise Software Supply Chain sub-technique
- T1577 Compromise Application Executable technique
- T1474 Supply Chain Compromise technique
- T1398 Boot or Logon Initialization Scripts technique
- T1404 Exploitation for Privilege Escalation technique
- T1456 Drive-By Compromise technique
- T1458 Replication Through Removable Media technique
- T1461 Lockscreen Bypass technique