unified

UC-VULN-09 — Employ non-persistence and information-resilience techniques

Reduce the attack surface available to persistent adversaries by provisioning selected components and services non-persistently and refreshing them from known-good, trusted sources at defined intervals or on demand. Refresh designated information at defined frequencies to purge stale or potentially corrupted data, source critical information from diverse suppliers or paths, and fragment designated high-value information across separate systems so no single compromise exposes or destroys it.

Record JSON · Open in map · Data retrieval guide

Catalog revision: 24028ffcfc2b295fa1b08ee6caa84b765f0731b321496bf4f548c49ad2177028. A connection does not establish full coverage.

Attributes

domain
Vulnerability & Patch Management
type
preventive
category
technical

Details

unified_id
UC-VULN-09
title
Employ non-persistence and information-resilience techniques
statement
Reduce the attack surface available to persistent adversaries by provisioning selected components and services non-persistently and refreshing them from known-good, trusted sources at defined intervals or on demand. Refresh designated information at defined frequencies to purge stale or potentially corrupted data, source critical information from diverse suppliers or paths, and fragment designated high-value information across separate systems so no single compromise exposes or destroys it.
domain
Vulnerability & Patch Management
control_type
preventive
control_category
technical
members
  • framework
    nist-800-53
    control_id
    SI-14
    coverage
    full
    relationship
    superset_of
  • framework
    nist-800-53
    control_id
    SI-21
    coverage
    full
    relationship
    superset_of
  • framework
    nist-800-53
    control_id
    SI-22
    coverage
    full
    relationship
    superset_of
  • framework
    nist-800-53
    control_id
    SI-23
    coverage
    full
    relationship
    superset_of
guidance

    Source

    No record-specific source URL is provided.

    Connections