Annex 3.2.6

Full text: this article's wording is third-party regulatory text. See the official source for the authoritative provision.

Mapped SPARTA techniques (4)

DE-0003.09 System Clock for EvasionST0006
addresses
high
derived
The synchronized-time-source obligation requires reliable time bases for log correlation and event ordering; clock biasing for evasion is precisely what that obligation is established to detect via cross-source disagreement.
EX-0008 Time Synchronized ExecutionST0004
addresses
moderate
derived
Synchronized time sources are required for log correlation; the same time-sync discipline that supports forensic correlation also helps surface anomalous time-keyed activations across subsystems.
EX-0012.12 System ClockST0004
addresses
high
direct
Synchronized time-source obligations (Annex 3.2.6) underpin log correlation and anti-replay; the same discipline that maintains time-source integrity also surfaces unauthorized clock modifications across subsystems.
EX-0014.01 Time SpoofST0004
addresses
moderate
derived
The synchronized-time-source obligation requires ensuring all systems have reliable time bases; that obligation is exactly what time-spoofing attempts to subvert, and the underlying time-source architecture is the defense.

Built 2026-07-25 from 216 techniques, 334 regulation articles, 125 ENISA controls, 2,610 framework controls, and 90 countermeasures.