ComplianceNIST 800-53 control

NIST-SC-43 Usage Restrictions

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SC System and Communications Protection
Control
SC-43
ATT&CK techniques mitigated
5

Control statement

a. Establish usage restrictions and implementation guidelines for the following system components: [Assignment: components] ; and b. Authorize, monitor, and control the use of such components within the system.

Discussion

Usage restrictions apply to all system components including but not limited to mobile code, mobile devices, wireless access, and wired and wireless peripheral components (e.g., copiers, printers, scanners, optical devices, and other similar technologies). The usage restrictions and implementation guidelines are based on the potential for system components to cause damage to the system and help to ensure that only authorized system use occurs.

ATT&CK mappings (CTID)

• T1011 Exfiltration Over Other Network Medium • T1078 Valid Accounts • T1078.004 Cloud Accounts • T1114.003 Email Forwarding Rule • T1613 Container and Resource Discovery

Related

Mitigates · MITRE ATT&CK (5)

  • T1613 Container and Resource Discovery technique
  • T1078.004 Cloud Accounts sub-technique
  • T1114.003 Email Forwarding Rule sub-technique
  • T1011 Exfiltration Over Other Network Medium technique
  • T1078 Valid Accounts technique

Related control · Compliance (5)

  • NIST-AC-18 Wireless Access NIST 800-53 control
  • NIST-AC-19 Access Control for Mobile Devices NIST 800-53 control
  • NIST-CM-6 Configuration Settings NIST 800-53 control
  • NIST-SC-18 Mobile Code NIST 800-53 control
  • NIST-SC-7 Boundary Protection NIST 800-53 control

Referenced by Compliance · has member (1)

  • NIST-SC System and Communications Protection NIST 800-53 family

Referenced by Compliance · related control (12)

  • NIST-AC-18 Wireless Access NIST 800-53 control
  • NIST-AC-19 Access Control for Mobile Devices NIST 800-53 control
  • NIST-CA-7 Continuous Monitoring NIST 800-53 control
  • NIST-CM-6 Configuration Settings NIST 800-53 control
  • NIST-PM-31 Continuous Monitoring Strategy NIST 800-53 control
  • NIST-PT-2(1) Data Tagging NIST 800-53 enhancement
  • NIST-PT-2(2) Automation NIST 800-53 enhancement
  • NIST-PT-3 Personally Identifiable Information Processing Purposes NIST 800-53 control
  • NIST-PT-3(1) Data Tagging NIST 800-53 enhancement
  • NIST-PT-3(2) Automation NIST 800-53 enhancement
  • NIST-SC-7 Boundary Protection NIST 800-53 control
  • NIST-SI-4 System Monitoring NIST 800-53 control