Segment data processing and storage based on the sensitivity of the data. Do not process sensitive data on enterprise assets intended for lower sensitivity data.
| Capability ID | Capability Description | Mapping Type | ATT&CK ID | ATT&CK Name | Notes |
|---|---|---|---|---|---|
| CIS-3.12 | Segment Data Processing and Storage Based on Sensitivity | mitigates | T1530 | Data from Cloud Storage |
Comments
Segregated cloud environments reduce exposure of sensitive cloud storage resources.
References
|
| CIS-3.12 | Segment Data Processing and Storage Based on Sensitivity | mitigates | T1021 | Remote Services |
Comments
Segmentation directly limits attacker movement between remote-accessible systems and sensitive environments.
References
|