Control Strategy StaffScreening

URI: CSG-StaffScreening

Package: Users

Description: Persons fulfilling the role Human are screened by their employer Employer before being given that role. This ensures they are more trustworthy than one would expect given the population or community they come from.

(empty)

H.L.HuiHoSt.1

Insider attack by Human abusing access to Host: if the user Human of device Host is untrustworthy, they can abuse their privileges on that device.

P.L.HuiPoSt.1

Insider attack by Human abusing their control of Process: if the legitimate user Human of process Process is malicious, they can abuse the privileges assigned to Process.

S.L.HuPSoSt.1

Insider intrusion by Human into Space: user Human has physical access to the private space Space, and could carry out malicious acts in that space.

CC.L.CSCCHuoSt.1

Malicious action by insider Human controlling Service affects Client: if the user Human controling service Service is malicious, they can make it mishandle requests sent from Client.

CC.R.HuoStCCCS.1

Malicious action by insider Human using Client to access Service: if user Human of client process Client is malicious, they can abuse the right of Client to access service Service.

(empty)

Screened at Role_Human

Screening at Role_Employer

Control Strategy StaffScreening

Mitigated Threats (0)

Blocked Threats (5)

H.L.HuiHoSt.1

P.L.HuiPoSt.1

S.L.HuPSoSt.1

CC.L.CSCCHuoSt.1

CC.R.HuoStCCCS.1

Triggers Threats (0)

Control Sets (2)