Home
Mapping Frameworks
CRI Profile Home
Third-party monitoring and management resources

CRI Profile EX.MM-01.01

The organization implements procedures, and allocates sufficient resources with the requisite knowledge and experience, to manage and monitor its third-party relationships to a degree and extent commensurate with the risk each third party poses to the organization and the criticality of the third party's products, services, and/or relationship to the organization.

Mappings

Capability ID	Capability Description	Mapping Type	ATT&CK ID	ATT&CK Name	Notes
EX.MM-01.01	Third-party monitoring and management resources	Mitigates	T1199	Trusted Relationship	Comments This diagnostic statement provides for the implementation of procedures for management of third party products. Managing accounts and permissions used by parties in trusted relationships helps minimize potential abuse by the party or if the party is compromised by an adversary.
EX.MM-01.01	Third-party monitoring and management resources	Mitigates	T1525	Implant Internal Image	Comments This diagnostic statement provides for the implementation of procedures for management of third party products such as ensuring cloud service providers support content trust models that require container images be signed by trusted source.
EX.MM-01.01	Third-party monitoring and management resources	Mitigates	T1530	Data from Cloud Storage	Comments This diagnostic statement provides for the implementation of procedures for management of third party products such as cloud storage solutions.
EX.MM-01.01	Third-party monitoring and management resources	Mitigates	T1195.003	Compromise Hardware Supply Chain	Comments This diagnostic statement protects against Supply Chain Compromise through the implementation of procedures for management of third party products.
EX.MM-01.01	Third-party monitoring and management resources	Mitigates	T1601	Modify System Image	Comments This diagnostic statement provides for the implementation of procedures for management of third party products such as vendor provided digitally signed operating system images to validate the integrity of the software used on their platform.
EX.MM-01.01	Third-party monitoring and management resources	Mitigates	T1601.001	Patch System Image	Comments This diagnostic statement provides for the implementation of procedures for management of third party products such as vendor provided digitally signed operating system images to validate the integrity of the software used on their platform.
EX.MM-01.01	Third-party monitoring and management resources	Mitigates	T1601.002	Downgrade System Image	Comments This diagnostic statement provides for the implementation of procedures for management of third party products such as vendor provided digitally signed operating system images to validate the integrity of the software used on their platform.
EX.MM-01.01	Third-party monitoring and management resources	Mitigates	T1554	Compromise Host Software Binary	Comments This diagnostic statement provides for the implementation of procedures for management of third party products such as ensuring the authenticity and integrity of software.
EX.MM-01.01	Third-party monitoring and management resources	Mitigates	T1195	Supply Chain Compromise	Comments This diagnostic statement protects against Supply Chain Compromise through the implementation of procedures for management of third party products.
EX.MM-01.01	Third-party monitoring and management resources	Mitigates	T1195.002	Compromise Software Supply Chain	Comments This diagnostic statement protects against Supply Chain Compromise through the implementation of procedures for management of third party products.
EX.MM-01.01	Third-party monitoring and management resources	Mitigates	T1195.001	Compromise Software Dependencies and Development Tools	Comments This diagnostic statement protects against Supply Chain Compromise through the implementation of procedures for management of third party products.