NIST SP 800-53 Rev. 5
AC-23
Access Control

Data Mining Protection

Description

Employ [organization-defined parameter] for [organization-defined parameter] to detect and protect against unauthorized data mining.

Mapped SPARTA techniques

5 techniques

  • EXF-0007Compromised Ground SystemST0008
    mitigates
    moderate

    AC-23 (Data Mining Protection) mitigates EXF-0007 by limiting bulk data extraction from ground-system data stores.

  • EXF-0008Compromised Developer SiteST0008
    addresses
    moderate

    AC-23 mitigates EXF-0008 by limiting bulk extraction from developer repos and design-data stores.

  • IMP-0006TheftST0009
    mitigates
    moderate

    AC-23 mitigates IMP-0006 by limiting bulk extraction that data-mining-style theft requires.

  • AC-23 (Data Mining Protection) addresses bulk extraction of design data from internal repositories that adversaries target to reduce uncertainty.

  • REC-0001.01Software DesignST0001
    addresses
    moderate

    AC-23 addresses data-mining of internal code/design repositories that contain FSW architecture details.

Cite as SafeMode Space, nist-80053-rev5 AC-23.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.