Control Strategy SuspendInsecureServiceChannel

URI: CSG-SuspendInsecureServiceChannel-Trigger

Package: ProcessComms

< prev | next >

Description: Firewall rules that normally allow access from client Client to service Service may be temporarily switched off by manager HostManager of the service host SHost if the network path is subject to snooping. This strategy represents a contingency plan, which can be used to reduce risk from some threats but it also triggers other threats representing possible side effects, depending on how likely it is that the contingency plan will need to be activated.

Triggers Threats (1)

SC.A.HuSC.6.3

Suspended insecure path from Client to Service affects availability: firewall rules allowing access by Client to service Service via a network path may be suspended where communication on that path is exposed to snooping. However, this means the availability of Client-Service connections using this network path will be reduced if its communication security is under threat.