Control Strategy DataAccessKey

URI: CSG-DataAccessKey

Description: Process Process has a key for encrypting or decrypting data Data.

(empty)

DF.A.HPDF-VDI.6

Process Process cannot consume encrypted data Data from FlowsFrom: the flow of Data from FlowsFrom to Process is encrypted, so it cannot be consumed without a key.

DF.A.HPDODF-V.6.1

Process Process cannot encrypt output Data for transmission to FlowsTo: the flow of output data Data from Process to FlowsTo should be encrypted, but Process has no means to encrypt the data before sending it.

DF.A.HPDSDADF-V.6

Service Process cannot send unencrypted data Data to FlowsTo: because the stored copy of Data on Host is not encrypted, and FlowsTo expects an encrypted version, it is not possible for Process to send it without a key.

DF.A.HPDS-VDADF.6

Service Process cannot decrypt data Data for transmission to FlowsTo: the stored copy of Data on Host is encrypted, but FlowsTo expects an unencrypted version, and Process has no means to decrypt the data before sending it.

DF.A.PmDFIDADFI-k.6

Unencrypted data Data cannot be forwarded by Process to FlowsTo: if the flow of data Data to Process is not encrypted, it cannot be forwarded to FlowsTo which expects it to be encrypted.

DF.A.PmDFI-kDADFI.6

Encrypted data Data cannot be forwarded by Process to FlowsTo: if the flow of data Data to Process is encrypted, it cannot be forwarded to FlowsTo which expects it to be unencrypted.

DF.A.PmDFODADFO-k.6

DF.A.PmDFO-kDADFO.6

DS.A.HPDOcDS-V.6

Process Process cannot create encrypted data Data: if the local copy of Data is encrypted, then process Process that creates the data will be unable to store that copy unless it has a key or can produce the data in the encrypted domain.

DS.A.HPmDFDAcDS-k.6

Decrypted data Data cannot be stored on Host by Process: service Process manages storage of an encrypted copy of data Data, so if all flows of Data to Process are decrypted the stored copy cannot be created unless Process has an encryption key.

DS.A.HPmDF-kDAcDS.6

Encrypted data Data cannot be stored on Host by Process: service Process manages storage of an unencrypted copy of data Data, so if all flows of Data to Process are encrypted the stored copy cannot be created unless Process has a decryption key.

DS.T.HPDFDAuDS-V.6

Encrypted data Data stored on Host cannot be updated by Process with unencrypted input from FlowsFrom: process Process manages an encrypted stored copy of data Data on Host, so if the flows of updates from FlowsFrom is not encrypted, then Process cannot update this copy of Data without a key, so this copy will become out of date.

DS.T.HPDF-VDAuDS.6

Unencrypted data Data stored on Host cannot be updated by Process with encrypted input from FlowsFrom: process Process manages an unencrypted stored copy of data Data on Host, so if the flows of updates from FlowsFrom is encrypted, then Process cannot update this copy of Data without a key, so this copy will become out of date.

DS.T.HPDOuDS-V.6

Process Process cannot update encrypted data Data stored on Host: if the local copy of Data on Host is encrypted, then process Process that creates the data will be unable to save updates unless it has a key or can produce the data in the encrypted domain, so this copy of Data will become out of date.

P.A.HPuDS-VDI.6

Process Process cannot read encrypted input Data stored on Host: the stored copy of input Data at Host is encrypted, and the process does not have a key.

P.T.HP-uDS-VDI.6

Process Process cannot read encrypted input Data: the stored copy of input Data at Host is encrypted, so if the process lacks a key and cannot read updates of the data, it will be forced to work using outdated inputs.

DS.Auth.HPsACd-pDS-V.1.6

Use of compromised key at Process to alter Data stored on Host: someone with the rights of Process on its host device Host can alter the local encrypted copy of data Data by using a cryptographic key assigned to Process allowing it to serve the data.

DS.C.HPsACr-pDS-V.1.6

Use of compromised key at Process to access Data stored on Host: someone with the rights of Process on its host device Host can access the local encrypted copy of data Data by using a cryptographic key assigned to Process allowing it to serve the data.

DS.C.HPsACr-pDS-V.2.6

Use of compromised key at Process to access Data stored on stolen device Host: if an attacker can access Process on stolen device Host, they can access the local encrypted copy of data Data by using a cryptographic key assigned to Process allowing it to serve the data.

AccessKey at Role_DataAccess