Annex 10.1.1

Full text: this article's wording is third-party regulatory text. See the official source for the authoritative provision.

Mapped SPARTA techniques (3)

REC-0001 Gather Spacecraft Design InformationST0001
addresses
moderate
derived
Personnel handling sensitive design information must be subject to NIS-aware HR security obligations because the recon path frequently runs through engineers and contractors carrying ICDs and SBOMs on personal devices or to RFP appendices.
REC-0002.02 OrganizationST0001
addresses
moderate
derived
HR-security obligations bind employees to discipline around exposing organizational structure, escalation paths and project assignments — the data on which org-mapping reconnaissance depends.
REC-0008.04 Business RelationshipsST0001
addresses
moderate
derived
HR-security obligations bind employees and contractors to discipline around what they disclose about contractual relationships and project-team composition — the data underpinning relationship reconnaissance.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.