Least Privilege

Description

Employ the principle of least privilege, allowing only authorized accesses for users (or processes acting on behalf of users) that are necessary to accomplish assigned organizational tasks.

Mapped SPARTA techniques

100 techniques

DE-0002 Disrupt or Deceive DownlinkST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0002.01 Inhibit Ground System FunctionalityST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0004 MasqueradingST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0006 Modify WhitelistST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0009.05 Corruption or Overload of Ground-Based SDA SystemsST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
DE-0011 Credentialed EvasionST0006
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0001 ReplayST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0001.02 Bus Traffic ReplayST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0005.02 Malicious Use of Hardware CommandsST0004
mitigates
moderate
AC-6 mitigates EX-0005.02 by reserving hardware-command authority to a small set of need-to-know operators.
EX-0009 Exploit Code FlawsST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0009.02 Operating SystemST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0009.03 Known Vulnerability (COTS/FOSS)ST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0010 Malicious CodeST0004
addresses
moderate
AC-6 mitigates EX-0010 by minimizing privileges available to malicious code that does run.
EX-0012 Modify On-Board ValuesST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.01 RegistersST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.02 Internal Routing TablesST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.03 Memory Write/LoadsST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.04 App/Subscriber TablesST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.05 Scheduling AlgorithmST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.06 Science/Payload DataST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.07 Propulsion SubsystemST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.08 Attitude Determination & Control SubsystemST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.09 Electrical Power SubsystemST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.10 Command & Data Handling SubsystemST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.11 Watchdog Timer (WDT)ST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.12 System ClockST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EX-0012.13 Poison AI/ML Training DataST0004
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006 Modify Communications ConfigurationST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006.01 Software Defined RadioST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0006.02 TransponderST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0007 Compromised Ground SystemST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0008 Compromised Developer SiteST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0009 Compromised Partner SiteST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
EXF-0010 Payload Communication ChannelST0008
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0002 Compromise Software Defined RadioST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0004 Secondary/Backup Communication ChannelST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0004.01 Ground StationST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0005 Rendezvous & Proximity OperationsST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0005.02 Docked Vehicle / OSAMST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0005.03 Proximity GrapplingST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0006 Compromise Hosted PayloadST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007 Compromise Ground SystemST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007.01 Compromise On-Orbit UpdateST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0007.02 Malicious Commanding via Valid GSST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009 Trusted RelationshipST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.01 Mission Collaborator (academia, international, etc.)ST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.02 VendorST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0009.03 User SegmentST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0011 Auxiliary Device CompromiseST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0012 Assembly, Test, and Launch Operation CompromiseST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
IA-0013 Compromise Host SpacecraftST0003
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0001 Hosted PayloadST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0002 Exploit Lack of Bus SegregationST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0004 Visiting Vehicle Interface(s)ST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0005 Virtualization EscapeST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0006 Launch Vehicle InterfaceST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0006.01 Rideshare PayloadST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
LM-0007 Credentialed TraversalST0007
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0003 Ground System PresenceST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
PER-0004 Replace Cryptographic KeysST0005
addresses
moderate
AC-6 mitigates PER-0004 by reserving key-management authority to a small set of need-to-know operators.
PER-0005 Credentialed PersistenceST0005
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0002 Compromise InfrastructureST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0002.01 Mission-Operated Ground SystemST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0002.02 3rd Party Ground SystemST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0003 Obtain Cyber CapabilitiesST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0003.02 Cryptographic KeysST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0004 Stage CapabilitiesST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0004.01 Identify/Select Delivery MechanismST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
RD-0004.02 Upload Exploit/PayloadST0002
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001 Gather Spacecraft Design InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.01 Software DesignST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.02 FirmwareST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.03 Cryptographic AlgorithmsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.04 Data BusST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.05 Thermal Control SystemST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.06 Maneuver & ControlST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.07 PayloadST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.08 PowerST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0001.09 Fault ManagementST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002 Gather Spacecraft DescriptorsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002.01 IdentifiersST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002.02 OrganizationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0002.03 OperationsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003 Gather Spacecraft Communications InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.01 Communications EquipmentST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.02 Commanding DetailsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.03 Mission-Specific Channel ScanningST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0003.04 Valid CredentialsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0004 Gather Launch InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0004.01 Flight TerminationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0006 Gather FSW Development InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0006.01 Development EnvironmentST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0006.02 Security Testing ToolsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0007 Monitor for Safe-Mode IndicatorsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008 Gather Supply Chain InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.01 Hardware ReconST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.02 Software ReconST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.03 Known VulnerabilitiesST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0008.04 Business RelationshipsST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.
REC-0009 Gather Mission InformationST0001
relates to
moderate
Mapped by SPARTA, not curated by SafeMode Space.

Cross-framework references

Relationships published by the source frameworks themselves, reproduced here with attribution. They are not SafeMode Space mappings and carry no confidence rating of ours.

Referenced by 1 in NIST Cybersecurity Framework 2.0

PR.AA-05 Access permissions, entitlements, and authorizations are defined in a policy, managed, enforced, and reviewed, and incorporate the principles of least privilege and separation of duties

Cite as SafeMode Space, nist-80053-rev5 AC-6.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.

# Description

›Mapped SPARTA techniques

100 techniques

›Cross-framework references

Referenced by 1 in NIST Cybersecurity Framework 2.0

Description

Mapped SPARTA techniques

Cross-framework references