# SC-30 Concealment and Misdirection

NIST SP 800-53 control. Family: SC System and Communications Protection. Function: preventative. In no baseline. Mapping licence: CC BY-SA 4.0.

Statement: Employ the following concealment and misdirection techniques for [Assignment: organization-defined systems] at [Assignment: organization-defined time periods] to confuse and mislead adversaries: [Assignment: organization-defined concealment and misdirection techniques].
Guidance: Concealment and misdirection techniques can significantly reduce the targeting capabilities of adversaries (i.e., window of opportunity and available attack surface) to initiate and complete attacks. For example, virtualization techniques provide organizations with the ability to disguise systems, potentially reducing the likelihood of successful attacks without the cost of having multiple platforms. The increased use of concealment and misdirection techniques and methods—including randomness, uncertainty, and virtualization—may sufficiently confuse and mislead adversaries and subsequently increase the risk of discovery and/or exposing tradecraft. Concealment and misdirection techniques may provide additional time to perform core mission and business functions. The implementation of concealment and misdirection techniques may add to the complexity and management overhead required for the system.

## Enhancements (4)
- SC-30(02) Randomness
- SC-30(03) Change Processing and Storage Locations
- SC-30(04) Misleading Information
- SC-30(05) Concealment of System Components
Withdrawn by NIST: SC-30(01) (now in SC-29(01)).
Each enhancement's statement: /api/v1/controls/SC-30?fields=enhancements

## Clauses by framework (2 frameworks)
- rbi_csf: Annex1.4
- cra: CRA.I.2k

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/SC-30
- Clauses only: /api/v1/controls/SC-30?fields=mappings
- Page for people: /controls/sc-30/
- Found an error? Open an issue at https://github.com/opensecurityarchitecture/osa-data/issues with the id, what OSA says and what the source says.