D3-ACL

Access Control List Hardening

Implement and maintain access control lists to restrict unauthorized access to systems, networks, and data.

D3FEND / Harden

Implementation

  • Implement least privilege access
  • Regular access reviews and certification
  • Segment networks with ACLs
  • Document and audit ACL changes
  • Automate access provisioning/deprovisioning

Tools

  • Active Directory Group Policy
  • Cisco ACLs
  • AWS Security Groups
  • Azure NSGs
  • SailPoint IdentityNow

ATT&CK mappings

3

MITRE D3FEND ↗