SC-30 Concealment and Misdirection
System and Communications Protection
Description
Employ the following concealment and misdirection techniques for [Assignment: organization-defined systems] at [Assignment: organization-defined time periods] to confuse and mislead adversaries: [Assignment: organization-defined concealment and misdirection techniques].
Supplemental Guidance
Concealment and misdirection techniques can significantly reduce the targeting capabilities of adversaries (i.e., window of opportunity and available attack surface) to initiate and complete attacks. For example, virtualization techniques provide organizations with the ability to disguise systems, potentially reducing the likelihood of successful attacks without the cost of having multiple platforms. The increased use of concealment and misdirection techniques and methods—including randomness, uncertainty, and virtualization—may sufficiently confuse and mislead adversaries and subsequently increase the risk of discovery and/or exposing tradecraft. Concealment and misdirection techniques may provide additional time to perform core mission and business functions. The implementation of concealment and misdirection techniques may add to the complexity and management overhead required for the system.
Changes from Rev 4
No significant title changes from Rev 4.
Enhancements (4)
What NIST adds to this control. Select one to read its statement.
SC-30(02) Randomness
Employ [Assignment: organization-defined techniques] to introduce randomness into organizational operations and assets.
SC-30(03) Change Processing and Storage Locations
Change the location of [Assignment: organization-defined processing and/or storage] [Selection (one): [Assignment: organization-defined time frequency]; at random time intervals].
SC-30(04) Misleading Information
Employ realistic, but misleading information in [Assignment: organization-defined system components] about its security state or posture.
SC-30(05) Concealment of System Components
Employ the following techniques to hide or conceal [Assignment: organization-defined system components]: [Assignment: organization-defined techniques].
Withdrawn by NIST:
- SC-30(01) Virtualization Techniques, now in SC-29(01)
MITRE ATT&CK Techniques (7)
ATT&CK v16.1Techniques mitigated by this control, mapped via CTID.