Home
Mapping Frameworks
CRI Profile Home
Alternative resilience mechanisms

CRI Profile PR.IR-03.01

The organization implements mechanisms (e.g., failsafe, load balancing, hot swaps, redundant equipment, alternate services, backup facilities, etc.) to achieve resilience requirements in normal and adverse situations.

Mappings

Capability ID	Capability Description	Mapping Type	ATT&CK ID	ATT&CK Name	Notes
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1485	Data Destruction	Comments This diagnostic statement protects against Data Destruction through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1485.001	Lifecycle-Triggered Deletion	Comments This diagnostic statement protects against Lifecycle-Triggered Deletion through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1486	Data Encrypted for Impact	Comments This diagnostic statement protects against Data Encrypted for Impact through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1491	Defacement	Comments This diagnostic statement protects against Defacement through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1491.001	Internal Defacement	Comments This diagnostic statement protects against Internal Defacement through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1491.002	External Defacement	Comments This diagnostic statement protects against External Defacement through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1561	Disk Wipe	Comments This diagnostic statement protects against Disk Wipe through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1561.001	Disk Content Wipe	Comments This diagnostic statement protects against Disk Content Wipe through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1561.002	Disk Structure Wipe	Comments This diagnostic statement protects against Disk Structure Wipe through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1490	Inhibit System Recovery	Comments This diagnostic statement protects against Inhibit System Recovery through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1020	Automated Exfiltration	Comments This diagnostic statement protects against Automated Exfiltration through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1020.001	Traffic Duplication	Comments This diagnostic statement protects against Traffic Duplication through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1005	Data from Local System	Comments This diagnostic statement protects against Data from Local System through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1025	Data from Removable Media	Comments This diagnostic statement protects against Data from Removable Media through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1048	Exfiltration Over Alternative Protocol	Comments This diagnostic statement protects against Exfiltration Over Alternative Protocol through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1048.002	Exfiltration Over Asymmetric Encrypted Non-C2 Protocol	Comments This diagnostic statement protects against Exfiltration Over Asymmetric Encrypted Non-C2 Protocol through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1048.003	Exfiltration Over Unencrypted Non-C2 Protocol	Comments This diagnostic statement protects against Exfiltration Over Unencrypted Non-C2 Protocol through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1041	Exfiltration Over C2 Channel	Comments This diagnostic statement protects against Exfiltration Over C2 Channel through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1052	Exfiltration Over Physical Medium	Comments This diagnostic statement protects against Exfiltration Over Physical Medium through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1052.001	Exfiltration over USB	Comments This diagnostic statement protects against Exfiltration over USB through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1567	Exfiltration Over Web Service	Comments This diagnostic statement protects against Exfiltration Over Web Service through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1567.004	Exfiltration Over Webhook	Comments This diagnostic statement protects against Exfiltration Over Webhook through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.
PR.IR-03.01	Alternative resilience mechanisms	Mitigates	T1537	Transfer Data to Cloud Account	Comments This diagnostic statement protects against Transfer Data to Cloud Account through the use of failsafes, backup facilities, disaster recovery, and resilience strategies including resumption of critical services.