ComplianceNIST 800-53 control

NIST-SR-11 Component Authenticity

Official page ↗
Framework
NIST SP 800-53 rev5 (5.2.0)
Family
SR Supply Chain Risk Management
Control
SR-11
ATT&CK techniques mitigated
15

Control statement

a. Develop and implement anti-counterfeit policy and procedures that include the means to detect and prevent counterfeit components from entering the system; and b. Report counterfeit system components to [Selection (one or more of): source of counterfeit component; {{ insert: param, sr-11_odp.02 }} ; {{ insert: param, sr-11_odp.03 }} ].

Discussion

Sources of counterfeit components include manufacturers, developers, vendors, and contractors. Anti-counterfeiting policies and procedures support tamper resistance and provide a level of protection against the introduction of malicious code. External reporting organizations include CISA.

ATT&CK mappings (CTID)

• T1059.002 AppleScript • T1195 Supply Chain Compromise • T1195.001 Compromise Software Dependencies and Development Tools • T1195.002 Compromise Software Supply Chain • T1195.003 Compromise Hardware Supply Chain • T1204.003 Malicious Image • T1505 Server Software Component • T1505.001 SQL Stored Procedures • T1505.002 Transport Agent • T1505.004 IIS Components • T1546.006 LC_LOAD_DYLIB Addition • T1554 Compromise Host Software Binary • T1601 Modify System Image • T1601.001 Patch System Image • T1601.002 Downgrade System Image

Related

Mitigates · MITRE ATT&CK (15)

  • T1505.004 IIS Components sub-technique
  • T1204.003 Malicious Image sub-technique
  • T1601 Modify System Image technique
  • T1601.001 Patch System Image sub-technique
  • T1601.002 Downgrade System Image sub-technique
  • T1195.001 Compromise Software Dependencies and Development Tools sub-technique
  • T1195.002 Compromise Software Supply Chain sub-technique
  • T1195.003 Compromise Hardware Supply Chain sub-technique
  • T1059.002 AppleScript sub-technique
  • T1554 Compromise Host Software Binary technique
  • T1546.006 LC_LOAD_DYLIB Addition sub-technique
  • T1505.001 SQL Stored Procedures sub-technique
  • T1505.002 Transport Agent sub-technique
  • T1505 Server Software Component technique
  • T1195 Supply Chain Compromise technique

Related control · Compliance (5)

  • NIST-PE-3 Physical Access Control NIST 800-53 control
  • NIST-SA-4 Acquisition Process NIST 800-53 control
  • NIST-SI-7 Software, Firmware, and Information Integrity NIST 800-53 control
  • NIST-SR-10 Inspection of Systems or Components NIST 800-53 control
  • NIST-SR-9 Tamper Resistance and Detection NIST 800-53 control

Referenced by Compliance · enhancement of (3)

  • NIST-SR-11(1) Anti-counterfeit Training NIST 800-53 enhancement
  • NIST-SR-11(2) Configuration Control for Component Service and Repair NIST 800-53 enhancement
  • NIST-SR-11(3) Anti-counterfeit Scanning NIST 800-53 enhancement

Referenced by Compliance · has member (1)

  • NIST-SR Supply Chain Risk Management NIST 800-53 family

Referenced by Compliance · related control (15)

  • NIST-AT-3 Role-based Training NIST 800-53 control
  • NIST-CM-3 Configuration Change Control NIST 800-53 control
  • NIST-MA-2 Controlled Maintenance NIST 800-53 control
  • NIST-MP-6 Media Sanitization NIST 800-53 control
  • NIST-PE-3(5) Tamper Protection NIST 800-53 enhancement
  • NIST-PM-30 Supply Chain Risk Management Strategy NIST 800-53 control
  • NIST-RA-5 Vulnerability Monitoring and Scanning NIST 800-53 control
  • NIST-SA-10(1) Software and Firmware Integrity Verification NIST 800-53 enhancement
  • NIST-SA-24 Design For Cyber Resiliency NIST 800-53 control
  • NIST-SI-7 Software, Firmware, and Information Integrity NIST 800-53 control
  • NIST-SR-10 Inspection of Systems or Components NIST 800-53 control
  • NIST-SR-3 Supply Chain Controls and Processes NIST 800-53 control
  • NIST-SR-4(3) Validate as Genuine and Not Altered NIST 800-53 enhancement
  • NIST-SR-5 Acquisition Strategies, Tools, and Methods NIST 800-53 control
  • NIST-SR-9 Tamper Resistance and Detection NIST 800-53 control