Publication: enisa-stl-2025-03 Space Threat Landscape
Full text
The control text is third-party content; see the official source for the full wording.
Mapped SPARTA techniques
5 techniques
Cybersecurity awareness and training addresses the human attack vector (phishing, credential theft) that RD-0002 uses to compromise infrastructure, a program relevant to the technique rather than an active technical defense.
Cybersecurity awareness and training is a governance control relevant to resisting the phishing and removable-media delivery RD-0004.01 evaluates, but it does not actively defend against the adversary selecting a delivery mechanism.
Cybersecurity awareness and training addresses the human attack vector that organisational reconnaissance (REC-0002.02) enables, a program relevant to the technique rather than an active defense against the mapping.
Ongoing awareness and training for launch-ecosystem personnel is relevant to resisting the social-engineering pretexts REC-0004 enables, but training is a governance control and does not actively defend against information gathering.
Cybersecurity awareness and training is a governance control that governs personnel preparedness around the supplier and partner relationships REC-0008.04 enumerates; it is relevant to the technique rather than an active defence against the reconnaissance.