# SC-40 Wireless Link Protection

NIST SP 800-53 control. Family: SC System and Communications Protection. Function: preventative. In no baseline. Mapping licence: CC BY-SA 4.0.

Statement: Protect external and internal [Assignment: organization-defined wireless links] from the following signal parameter attacks: [Assignment: organization-defined types of signal parameter attacks or references to sources for such attacks].
Guidance: Wireless link protection applies to internal and external wireless communication links that may be visible to individuals who are not authorized system users. Adversaries can exploit the signal parameters of wireless links if such links are not adequately protected. There are many ways to exploit the signal parameters of wireless links to gain intelligence, deny service, or spoof system users. Protection of wireless links reduces the impact of attacks that are unique to wireless systems. If organizations rely on commercial service providers for transmission services as commodity items rather than as fully dedicated services, it may not be possible to implement wireless link protections to the extent necessary to meet organizational security requirements.

## Enhancements (4)
- SC-40(01) Electromagnetic Interference
- SC-40(02) Reduce Detection Potential
- SC-40(03) Imitative or Manipulative Communications Deception
- SC-40(04) Signal Parameter Identification
Each enhancement's statement: /api/v1/controls/SC-40?fields=enhancements

## Clauses by framework (18 frameworks)
- nist_csf_2: PR.DS-02, PR.DS-10
- nis2: Art. 21(2)(h)
- mas_trm: 10
- anssi: Hygiene.25, SecNumCloud.14.3
- finma_circular: IV.C(63)
- rbi_csf: Annex1.4
- fisc: FISC.T4, FISC.T10
- hkma_tme1: TME1.8.5
- cbb_tm: TM-8
- cbuae: CR-8
- qatar_nia: CS
- sama_csf: 3.3, 3.4
- bog_cisd: CISD-VI
- bom_ctrm: 3.4
- cbe_csf: CTO-3
- sa_js2: JS2-8.3
- bot_cyber: Ch2.4, Ch2.7
- pci_pts: J
OSA's mapping for nist_csf_2 takes NIST's published crosswalk as its base. A clause not marked as OSA's own is in that crosswalk.

## More
- This control as JSON, with guidance and ATT&CK techniques: /api/v1/controls/SC-40
- Clauses only: /api/v1/controls/SC-40?fields=mappings
- Page for people: /controls/sc-40/
- Found an error? Open an issue at https://github.com/opensecurityarchitecture/osa-data/issues with the id, what OSA says and what the source says.