Detections
Analytics
800-53|SC-5(1)
Title
RESTRICT INTERNAL USERSDescription
The information system restricts the ability of individuals to launch [Assignment: organization-defined denial of service attacks] against other information systems.Supplemental
Restricting the ability of individuals to launch denial of service attacks requires that the mechanisms used for such attacks are unavailable. Individuals of concern can include, for example, hostile insiders or external adversaries that have successfully breached the information system and are using the system as a platform to launch cyber attacks on third parties. Organizations can restrict the ability of individuals to connect and transmit arbitrary information on the transport medium (i.e., network, wireless spectrum). Organizations can also limit the ability of individuals to use excessive information system resources. Protection against individuals having the ability to launch denial of service attacks may be implemented on specific information systems or on boundary devices prohibiting egress to potential target systems.Reference Item Details
Reference: NIST 800-53 - Security and Privacy Controls for Federal Information Systems and Organizations
Category: SYSTEM AND COMMUNICATIONS PROTECTION
Parent Title: DENIAL OF SERVICE PROTECTION
Family: SYSTEM AND COMMUNICATIONS PROTECTION
Audit Items
View all Reference Audit Items