ComplianceNIST 800-53 control

NIST-SC-36 Distributed Processing and Storage

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SC System and Communications Protection
Control
SC-36
ATT&CK techniques mitigated
7

Control statement

Distribute the following processing and storage components across multiple [Selection (one of): physical locations; logical domains]: [Assignment: organization-defined processing and storage components].

Discussion

Distributing processing and storage across multiple physical locations or logical domains provides a degree of redundancy or overlap for organizations. The redundancy and overlap increase the work factor of adversaries to adversely impact organizational operations, assets, and individuals. The use of distributed processing and storage does not assume a single primary processing or storage location. Therefore, it allows for parallel processing and storage.

ATT&CK mappings (CTID)

• T1070 Indicator Removal • T1070.001 Clear Windows Event Logs • T1070.002 Clear Linux or Mac System Logs • T1070.008 Clear Mailbox Data • T1119 Automated Collection • T1565 Data Manipulation • T1565.001 Stored Data Manipulation

Related

Mitigates · not in database (2)

Mitigates · MITRE ATT&CK (5)

  • T1070.008 Clear Mailbox Data sub-technique
  • T1565 Data Manipulation technique
  • T1565.001 Stored Data Manipulation sub-technique
  • T1070 Indicator Removal technique
  • T1119 Automated Collection technique

Related control · Compliance (4)

  • NIST-CP-6 Alternate Storage Site NIST 800-53 control
  • NIST-CP-7 Alternate Processing Site NIST 800-53 control
  • NIST-PL-8 Security and Privacy Architectures NIST 800-53 control
  • NIST-SC-32 System Partitioning NIST 800-53 control

Referenced by Compliance · enhancement of (2)

Referenced by Compliance · has member (1)

  • NIST-SC System and Communications Protection NIST 800-53 family

Referenced by Compliance · related control (6)

  • NIST-CP-6 Alternate Storage Site NIST 800-53 control
  • NIST-CP-7 Alternate Processing Site NIST 800-53 control
  • NIST-PL-8(1) Defense in Depth NIST 800-53 enhancement
  • NIST-SA-24 Design For Cyber Resiliency NIST 800-53 control
  • NIST-SC-32 System Partitioning NIST 800-53 control
  • NIST-SI-4 System Monitoring NIST 800-53 control