Access Enforcement

Description

Enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Mapped SPARTA techniques

120 techniques

DE-0002 Disrupt or Deceive DownlinkST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0002.01 Inhibit Ground System FunctionalityST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0002.03 Inhibit Spacecraft FunctionalityST0006
mitigates
moderate
AC-3 mitigates DE-0002.03 by enforcing access authorization on telemetry-publisher and packet-filter configuration.
DE-0003 On-Board Values ObfuscationST0006
mitigates
moderate
AC-3 mitigates DE-0003 by enforcing access authorization on on-board-value modification interfaces.
DE-0003.01 Vehicle Command Counter (VCC)ST0006
mitigates
moderate
AC-3 mitigates DE-0003.01 by enforcing access authorization on VCC reset/edit operations.
DE-0003.03 Command Receiver On/Off ModeST0006
mitigates
moderate
AC-3 mitigates DE-0003.03 by enforcing access authorization on receiver enable/disable controls.
DE-0003.04 Command Receivers Received Signal StrengthST0006
mitigates
moderate
AC-3 mitigates DE-0003.04 by enforcing access authorization on AGC and signal-strength parameter modifications.
DE-0003.05 Command Receiver Lock ModesST0006
mitigates
moderate
AC-3 mitigates DE-0003.05 by enforcing access authorization on receiver lock-mode parameter modifications.
DE-0003.06 Telemetry Downlink ModesST0006
mitigates
high
AC-3 mitigates DE-0003.06 by enforcing access authorization on telemetry-mode and rate parameters.
DE-0003.07 Cryptographic ModesST0006
mitigates
moderate
AC-3 mitigates DE-0003.07 by enforcing access authorization on cryptographic-mode selection.
DE-0003.08 Received CommandsST0006
addresses
moderate
AC-3 mitigates DE-0003.08 by enforcing access authorization on command-history records.
DE-0003.09 System Clock for EvasionST0006
addresses
high
AC-3 mitigates DE-0003.09 by enforcing access authorization on clock-register modifications.
DE-0003.10 GPS EphemerisST0006
addresses
moderate
AC-3 mitigates DE-0003.10 by enforcing access authorization on ephemeris-update interfaces.
DE-0003.11 Watchdog Timer (WDT) for EvasionST0006
addresses
moderate
AC-3 mitigates DE-0003.11 by enforcing access authorization on watchdog-parameter modifications.
DE-0004 MasqueradingST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0005 Subvert Protections via Safe-ModeST0006
mitigates
high
AC-3 mitigates DE-0005 by maintaining access authorization across safe-mode states.
DE-0006 Modify WhitelistST0006
mitigates
high
AC-3 mitigates DE-0006 by enforcing access authorization on whitelist modification interfaces.
DE-0007 Evasion via RootkitST0006
addresses
moderate
AC-3 mitigates DE-0007 by enforcing access authorization on privileged paths a rootkit must traverse to install.
DE-0009.05 Corruption or Overload of Ground-Based SDA SystemsST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0011 Credentialed EvasionST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0001 ReplayST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0001.01 Command PacketsST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0003 Modify Authentication ProcessST0004
mitigates
moderate
AC-3 mitigates EX-0003 by enforcing authorization on access to authentication-handler code and config.
EX-0005.02 Malicious Use of Hardware CommandsST0004
mitigates
moderate
AC-3 mitigates EX-0005.02 by enforcing access authorization on hardware-level/maintenance commanding.
EX-0006 Disable/Bypass EncryptionST0004
mitigates
moderate
AC-3 mitigates EX-0006 by enforcing access authorization on cryptographic-configuration changes.
EX-0010 Malicious CodeST0004
addresses
moderate
AC-3 mitigates EX-0010 by enforcing approved authorizations on code-execution surfaces.
EX-0010.03 RootkitST0004
addresses
moderate
AC-3 mitigates rootkit installation by enforcing access authorization on privileged paths.
EX-0012 Modify On-Board ValuesST0004
mitigates
moderate
AC-3 mitigates EX-0012 by enforcing access authorization on registers, parameter tables, and routing maps.
EX-0012.01 RegistersST0004
mitigates
moderate
AC-3 mitigates EX-0012.01 by enforcing access authorization on internal-register writes.
EX-0012.02 Internal Routing TablesST0004
mitigates
high
AC-3 mitigates EX-0012.02 by enforcing access authorization on routing-table modifications.
EX-0012.03 Memory Write/LoadsST0004
mitigates
moderate
AC-3 mitigates EX-0012.03 by enforcing access authorization on raw memory write/load services.
EX-0012.04 App/Subscriber TablesST0004
mitigates
high
AC-3 mitigates EX-0012.04 by enforcing access authorization on subscriber-table modifications.
EX-0012.05 Scheduling AlgorithmST0004
mitigates
moderate
AC-3 mitigates EX-0012.05 by enforcing access authorization on scheduling-parameter modifications.
EX-0012.06 Science/Payload DataST0004
mitigates
moderate
AC-3 mitigates EX-0012.06 by enforcing access authorization on payload data stores.
EX-0012.07 Propulsion SubsystemST0004
mitigates
moderate
AC-3 mitigates EX-0012.07 by enforcing access authorization on propulsion-parameter modifications.
EX-0012.08 Attitude Determination & Control SubsystemST0004
mitigates
moderate
AC-3 mitigates EX-0012.08 by enforcing access authorization on ADCS parameter modifications.
EX-0012.09 Electrical Power SubsystemST0004
mitigates
moderate
AC-3 mitigates EX-0012.09 by enforcing access authorization on EPS parameter modifications.
EX-0012.10 Command & Data Handling SubsystemST0004
mitigates
moderate
AC-3 mitigates EX-0012.10 by enforcing access authorization on C&DH table modifications.
EX-0012.11 Watchdog Timer (WDT)ST0004
mitigates
high
AC-3 mitigates EX-0012.11 by enforcing access authorization on watchdog-timer parameter modifications.
EX-0012.12 System ClockST0004
mitigates
moderate
AC-3 mitigates EX-0012.12 by enforcing access authorization on clock-register modifications.
EXF-0001 ReplayST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0004 Out-of-Band Communications LinkST0008
mitigates
moderate
AC-3 mitigates EXF-0004 by enforcing access authorization on out-of-band-link configuration.
EXF-0006 Modify Communications ConfigurationST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006.01 Software Defined RadioST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006.02 TransponderST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0007 Compromised Ground SystemST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0008 Compromised Developer SiteST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0009 Compromised Partner SiteST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0002 Compromise Software Defined RadioST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0003 Crosslink via Compromised NeighborST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0004 Secondary/Backup Communication ChannelST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0004.01 Ground StationST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0004.02 ReceiverST0003
addresses
moderate
AC-3 mitigates IA-0004.02 by enforcing access authorization on commands routed via the secondary receiver.
IA-0005 Rendezvous & Proximity OperationsST0003
addresses
moderate
AC-3 mitigates IA-0005 by enforcing access authorization on any commands attempted from a proximity vantage.
IA-0005.02 Docked Vehicle / OSAMST0003
mitigates
high
AC-3 mitigates IA-0005.02 by enforcing access controls on commands and data crossing the docked-vehicle interface.
IA-0005.03 Proximity GrapplingST0003
relates to
moderate
AC-3 mitigates IA-0005.03 by enforcing access controls at any temporary umbilical or port that could be coupled during grappling.
IA-0006 Compromise Hosted PayloadST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007 Compromise Ground SystemST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007.01 Compromise On-Orbit UpdateST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007.02 Malicious Commanding via Valid GSST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0008 Rogue External EntityST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0008.01 Rogue Ground StationST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0008.02 Rogue SpacecraftST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009 Trusted RelationshipST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.01 Mission Collaborator (academia, international, etc.)ST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.02 VendorST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.03 User SegmentST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0010 Unauthorized Access During Safe-ModeST0003
mitigates
moderate
AC-3 mitigates IA-0010 by ensuring access authorization remains enforced during safe-mode states.
IA-0011 Auxiliary Device CompromiseST0003
mitigates
moderate
AC-3 mitigates IA-0011 by enforcing access authorization on physical port connections.
IA-0012 Assembly, Test, and Launch Operation CompromiseST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0013 Compromise Host SpacecraftST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IMP-0006 TheftST0009
mitigates
moderate
AC-3 mitigates IMP-0006 by enforcing access authorization on data stores theft would target.
LM-0001 Hosted PayloadST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0003 Constellation Hopping via CrosslinkST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0004 Visiting Vehicle Interface(s)ST0007
mitigates
moderate
AC-3 mitigates LM-0004 by enforcing access authorization on commands and data crossing the visiting-vehicle interface.
LM-0005 Virtualization EscapeST0007
relates to
moderate
AC-3 mitigates LM-0005 by enforcing access authorization on hypervisor and inter-partition interfaces.
LM-0006 Launch Vehicle InterfaceST0007
mitigates
moderate
AC-3 mitigates LM-0006 by enforcing access authorization on launch-vehicle umbilical and EGSE-network interactions.
LM-0007 Credentialed TraversalST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0003 Ground System PresenceST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0004 Replace Cryptographic KeysST0005
mitigates
moderate
AC-3 mitigates PER-0004 by enforcing access authorization on key-management functions.
PER-0005 Credentialed PersistenceST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0002 Compromise InfrastructureST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0002.01 Mission-Operated Ground SystemST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0002.02 3rd Party Ground SystemST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0003 Obtain Cyber CapabilitiesST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0003.02 Cryptographic KeysST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0004 Stage CapabilitiesST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0004.01 Identify/Select Delivery MechanismST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0004.02 Upload Exploit/PayloadST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001 Gather Spacecraft Design InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.01 Software DesignST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.02 FirmwareST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.03 Cryptographic AlgorithmsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.04 Data BusST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.05 Thermal Control SystemST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.06 Maneuver & ControlST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.07 PayloadST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.08 PowerST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.09 Fault ManagementST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002 Gather Spacecraft DescriptorsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002.01 IdentifiersST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002.02 OrganizationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002.03 OperationsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003 Gather Spacecraft Communications InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.01 Communications EquipmentST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.02 Commanding DetailsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.03 Mission-Specific Channel ScanningST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.04 Valid CredentialsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0004 Gather Launch InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0004.01 Flight TerminationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0006 Gather FSW Development InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0006.01 Development EnvironmentST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0006.02 Security Testing ToolsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0007 Monitor for Safe-Mode IndicatorsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008 Gather Supply Chain InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.01 Hardware ReconST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.02 Software ReconST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.03 Known VulnerabilitiesST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.04 Business RelationshipsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0009 Gather Mission InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.

Cross-framework references

Relationships published by the source frameworks themselves, reproduced here with attribution. They are not SafeMode Space mappings and carry no confidence rating of ours.

Referenced by 3 in NIST Cybersecurity Framework 2.0

Cite as SafeMode Space, nist-80053-rev5 AC-3.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.

# Description

›Mapped SPARTA techniques

120 techniques

›Cross-framework references

Referenced by 3 in NIST Cybersecurity Framework 2.0

Description

Mapped SPARTA techniques

Cross-framework references