Threat D.E.D+DS-cP-iHu.9

URI: D.E.D+DS-cP-iHu.9

Package: DataLifecycle

< prev | next >

Description: Stored data Data is not created by any process: this may mean it is static data inserted into the system during deployment on at least one system host. If so, use controls to specify that this is the case. If it is not static data then there should be at least one process that creates, amends, updates or appends the data.

Threat Type: Primary Threat

Matching Pattern:

D.E.D+DS-cP-iHu.9
MP-D+DS-cP-iHu

Finds a Data asset that is not email and is not created by any process or user input, but is stored on at least one host. Such Data would need to be static for this situation to make sense.

        (empty)

        (empty)

        (empty)

        (empty)

CSG-StaticSystemData

Data Data is static data inserted into the system on deployment and not altered subsequently by any process in the system. This control strategy is used to negate modelling error threats that detect cases where data is not created by any process.