Threat DS.C.HsACDS-V.1.3

URI: DS.C.HsACDS-V.1.3

Package: DataLifecycle

< prev | next >

Description: Use of user privileges at Host to access stored data Data: anyone with user privileges at Host can read copies of Data stored on the Host.

Threat Type: Primary Threat

Matching Pattern:

DS.C.HsACDS-V.1.3
MP-HsACDS-V

Finds a stored copy of Data on a Host that is not encrypted using keys from a vault, plus location contexts in which the host is accessible.

        (empty)

        (empty)

CSG-DataAccessControl

The host device Host enforces an access control policy for a stored copy of Data.

CSG-DataStorageEncryption

The copy of Data stored on Host is encrypted.

CSG-HostEncryption

Data stored on physical device PhysicalHost are encrypted, so data cannot be accessed by physically extracting and reading storage devices from PhysicalHost, as an alternative to logging into the device.