Home
Mapping Frameworks
CRI Profile Home
Data-at-rest protection

CRI Profile PR.DS-01.01

Data-at-rest is protected commensurate with the criticality and sensitivity of the information and in alignment with the data classification and protection policy (e.g., through the use of encryption, authentication, access control, segregation, masking, tokenization, and file integrity monitoring).

Mappings

Capability ID	Capability Description	Mapping Type	ATT&CK ID	ATT&CK Name	Notes
PR.DS-01.01	Data-at-rest protection	Mitigates	T1048.003	Exfiltration Over Unencrypted Non-C2 Protocol	Comments This diagnostic statement focuses on protecting data-at-rest by implementing encryption and other security measures such as sandboxing, authentication, segregation, masking, tokenization, and file integrity monitoring.
PR.DS-01.01	Data-at-rest protection	Mitigates	T1041	Exfiltration Over C2 Channel	Comments This diagnostic statement focuses on protecting data-at-rest by implementing encryption and other security measures such as sandboxing, authentication, segregation, masking, tokenization, and file integrity monitoring.
PR.DS-01.01	Data-at-rest protection	Mitigates	T1005	Data from Local System	Comments This diagnostic statement focuses on protecting data-at-rest by implementing encryption and other security measures such as sandboxing, authentication, segregation, masking, tokenization, and file integrity monitoring.
PR.DS-01.01	Data-at-rest protection	Mitigates	T1550.001	Application Access Token	Comments This diagnostic statement focuses on protecting data-at-rest by implementing encryption and other security measures such as sandboxing, authentication, segregation, masking, tokenization, and file integrity monitoring.
PR.DS-01.01	Data-at-rest protection	Mitigates	T1003.003	NTDS	Comments This diagnostic statement focuses on protecting data-at-rest by implementing encryption and other security measures such as sandboxing, authentication, segregation, masking, tokenization, and file integrity monitoring.
PR.DS-01.01	Data-at-rest protection	Mitigates	T1040	Network Sniffing	Comments This diagnostic statement focuses on protecting data-at-rest by implementing encryption and other security measures such as sandboxing, authentication, segregation, masking, tokenization, and file integrity monitoring.
PR.DS-01.01	Data-at-rest protection	Mitigates	T1565.002	Transmitted Data Manipulation	Comments This diagnostic statement focuses on protecting data-at-rest by implementing encryption and other security measures such as sandboxing, authentication, segregation, masking, tokenization, and file integrity monitoring.
PR.DS-01.01	Data-at-rest protection	Mitigates	T1565.001	Stored Data Manipulation	Comments This diagnostic statement focuses on protecting data-at-rest by implementing encryption and other security measures such as sandboxing, authentication, segregation, masking, tokenization, and file integrity monitoring.
PR.DS-01.01	Data-at-rest protection	Mitigates	T1530	Data from Cloud Storage	Comments This diagnostic statement focuses on protecting data-at-rest by implementing encryption and other security measures such as sandboxing, authentication, segregation, masking, tokenization, and file integrity monitoring.
PR.DS-01.01	Data-at-rest protection	Mitigates	T1213	Data from Information Repositories	Comments This diagnostic statement focuses on protecting data-at-rest by implementing encryption and other security measures such as sandboxing, authentication, segregation, masking, tokenization, and file integrity monitoring.
PR.DS-01.01	Data-at-rest protection	Mitigates	T1557.002	ARP Cache Poisoning	Comments This diagnostic statement focuses on protecting data-at-rest by implementing encryption and other security measures such as sandboxing, authentication, segregation, masking, tokenization, and file integrity monitoring.
PR.DS-01.01	Data-at-rest protection	Mitigates	T1557	Adversary-in-the-Middle	Comments This diagnostic statement focuses on protecting data-at-rest by implementing encryption and other security measures such as sandboxing, authentication, segregation, masking, tokenization, and file integrity monitoring.